Legal
Privacy Policy
Last updated · June 2026 · UK GDPR Compliant
Silent Classics Ltd ("we", "us") is the data controller for personal data processed through this website and our custom kit ordering process. This policy explains what we collect, why, and the rights you have under the UK General Data Protection Regulation (UK GDPR).
1. Data We Collect
To process a custom build allocation, milestone invoice, or workshop booking, we collect only the minimum data required:
- Full name and salutation
- Contact details (email address and telephone number)
- Delivery and billing address
- Payment session identifiers issued by our payment processor
We do not store full card numbers, CVCs or bank credentials. All card data is captured and tokenised directly by Stripe inside their PCI-DSS Level 1 certified environment.
2. Lawful Basis For Processing
Our processing of your personal data is based entirely on Contractual Necessity (UK GDPR Article 6(1)(b)). The data we hold is strictly required in order to:
- Fulfil your custom Fiat 500 EV kit or conversion order
- Manage and reserve your build quarter / workshop slot
- Issue milestone invoices and final balance payment links
- Arrange compliant international freight logistics for Class 9 lithium-ion battery crates
We do not rely on consent-based marketing profiling for any of the data collected at checkout.
3. Third-Party Sharing
Your data is securely transmitted only to the following sub-processors, each of which is contractually bound to UK GDPR-equivalent standards:
- Stripe Payments Europe Ltd — secure card authorisation, deposit capture and milestone invoicing.
- Lovable Cloud — our internal operational data vault for order records, build allocations and account access.
- Google Sheets (Google Workspace) — our live fulfillment ledger used by the workshop and logistics teams to track each build through to dispatch.
We do not sell your data to advertisers, marketing networks, or data brokers under any circumstances.
4. Your Rights Under UK GDPR
You have the following statutory rights regarding your personal data:
- Right of Access — request a copy of all personal data we hold about you.
- Right to Rectification — request correction of any inaccurate or incomplete information.
- Right to Erasure — request deletion of your personal data, subject to our legal obligation to retain order and tax records for HMRC for six years.
- Right to Restriction & Portability — request a machine-readable export of your data.
- Right to Lodge a Complaint — with the UK Information Commissioner's Office (ICO) at ico.org.uk.
To exercise any of these rights, please contact us at sales@silentclassics.co.uk. We will respond within one calendar month.
5. Data Retention & Security
Order and contract data is retained for six years from completion to comply with UK statutory accounting and warranty obligations. All data is encrypted in transit (TLS 1.3) and at rest. Access to the operational data vault is restricted to authenticated workshop staff via role-based access controls.
6. Cookies
Details of the cookies and similar technologies we use, along with the consent categories and the controls available to you, are set out in our separate Cookie Policy.
