Privacy Policy – How We Handle Your Data

RadioCodeLookup.com respects your privacy and handles your personal data with care. This privacy policy explains what data we collect, why we collect it, and how we protect your rights. This policy has been drawn up in accordance with the UK GDPR and EU GDPR.

1. Who We Are

RadioCodeLookup.com is an online service for retrieving car radio unlock codes, operated by a company registered in the Netherlands. You may contact us via the contact form on our website or by e-mail.

We are the data controller within the meaning of the UK & EU GDPR for the processing of your personal data as described in this policy.

2. What Personal Data We Collect

We collect the following personal data from you:

Name: for identification and to personalise our communications.
E-mail address: to deliver the ordered radio code and send order confirmations.
Payment data: payments are processed via Stripe. We do not receive full payment card details; Stripe provides us only with a transaction reference and payment status.
IP address: automatically recorded when you visit our website, for security and fraud-prevention purposes.
Order data: the serial number or other technical details of your radio, necessary to perform the service.

3. Why We Collect This Data

We process your personal data for the following purposes:

Performance of the contract: to deliver the ordered radio code and to keep you informed of your order status (legal basis: performance of a contract).
Payment processing: to handle payments securely via Stripe (legal basis: performance of a contract).
Customer support: to assist you with questions or complaints (legal basis: legitimate interests).
Legal obligations: to maintain financial records in compliance with statutory retention requirements (legal basis: legal obligation).
Security and fraud prevention: to prevent misuse of our services (legal basis: legitimate interests).
Website analytics: to gain insight into how our website is used and to improve it (legal basis: legitimate interests). We use Umami Analytics, which operates without cookies and does not process personal data.

4. Retention Periods

We do not retain your personal data for longer than is necessary for the purposes for which it was collected:

Order data (name, e-mail address, order details): 7 years from the transaction date, in accordance with statutory financial record-keeping requirements.
Customer support communications: 2 years after the last contact.
IP addresses and log data: a maximum of 90 days, unless longer retention is required for security incidents.

5. Sharing With Third Parties (Processors)

We do not sell your personal data to third parties. We share it only where necessary for the performance of our services or where we are legally required to do so.

Stripe: Payments are processed by Stripe, Inc. Stripe is a certified payment processor (PCI DSS Level 1). Stripe processes your payment data on our behalf and in accordance with its own privacy policy, which you can read at stripe.com/privacy. Stripe may process data outside the European Economic Area and the UK, with appropriate safeguards applied (Standard Contractual Clauses).

Resend: Transactional e-mails (such as order confirmations and code delivery) are sent via Resend. Resend processes your e-mail address as a data processor and is bound by a data processing agreement.

Umami Analytics: We measure website visits via Umami Analytics. Umami operates entirely without cookies and does not process personal data. No tracking cookies are placed and no consent is required.

6. Your Rights

Under the UK & EU GDPR you have the following rights in respect of your personal data:

Right of access: you may request details of the personal data we hold about you.
Right to rectification: you may have inaccurate or incomplete data corrected.
Right to erasure: you may request that your data be deleted, unless we are legally required to retain it.
Right to restriction of processing: in certain circumstances you may ask us to temporarily restrict processing.
Right to data portability: you may request that your data be transferred in a structured, commonly used format.
Right to object: you may object to processing based on legitimate interests.

To exercise any of these rights, please contact us via the contact form or by e-mail. We will respond to your request within 30 days. If you believe we are not handling your personal data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk) in the UK, or the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl) in the Netherlands.

7. Cookies

Our website does not use tracking cookies. We use Umami Analytics, which operates entirely without cookies and does not record personal data. Stripe may place technical cookies when processing a payment for fraud prevention and security purposes; these are strictly necessary for the processing of your payment.

8. Contact

If you have any questions about this privacy policy or about the processing of your personal data, please contact us:

Website: radiocodelookup.com/contact
E-mail: support@radiocodelookup.com

We aim to respond to your enquiries as quickly as possible, and in any event within 30 days.