Who is responsible
LERWICK AUTOBODY LIMITED, trading online as Deckline, is the data controller for the storefront, order, membership and support information described here. Our address is 8 Gremista Industrial Estate, Gremista, Lerwick, Shetland, Scotland, ZE1 0PX. Contact support@lerwickautoo.shop or +44 7642700952 for privacy requests.
What we collect
We collect name, email, telephone, shipping address, billing address, country, cart contents, membership selection, order and return correspondence, fit-request measurements, bulk-order requirements, support messages, consent records and age or guardian-confirmation information. Payment records include status, transaction reference, billing summary, fraud signals and dispute or refund status, but not complete card details.
Collection sources
Information comes directly from you when you use checkout, contact, fit-request or bulk-order forms, manage a membership or contact support. We receive payment status and billing summaries from Stripe or PayPal; tracking, delivery events and address corrections from parcel carriers; and limited device, browser, IP, cookie, security and page-interaction data from the storefront, hosting logs and consented analytics. We may also create internal fulfilment, return and support records from those interactions.
Shipping address and order fulfilment
We use the recipient name, shipping address, country, telephone number, order contents and delivery instructions to validate the destination, prepare and dispatch physical cabin goods, provide tracking, handle customs, investigate loss or damage, and support returns or replacements. We share only the fulfilment data needed by our warehouse, postal or parcel carriers and customs intermediaries. Billing data is used for payment reconciliation and fraud review and is not substituted for a shipping address unless you direct us to do so.
Why we use it and legal bases
- Contract: cart, checkout, payment status, fulfilment, shipping, membership, returns and customer support.
- Legal obligation: accounting, tax, fraud prevention, consumer rights, product-safety records and lawful requests.
- Legitimate interests: storefront security, service improvement, abandoned-checkout support, stock planning and protecting legal claims, balanced against your rights.
- Consent: non-essential cookies, marketing messages and any optional profiling. Consent may be withdrawn without affecting earlier lawful processing.
International transfers
Our processors and delivery partners may process information outside the United Kingdom, European Economic Area or your country. Where required, we use adequacy decisions, approved contractual clauses and supplementary safeguards. International parcels necessarily require the recipient’s name, address, telephone and customs description to be shared across borders.
How long we keep it
Incomplete checkout leads, contact requests and fit requests are kept for no longer than 24 months unless you ask for earlier deletion or a legal issue requires longer retention. Order, payment, tax, refund and dispute records are generally retained for up to 7 years. Security logs are normally kept for up to 12 months; consent records for the period needed to demonstrate compliance; delivery data for the order record period. We delete or anonymise information when its purpose and required retention expire.
Security
We use access controls, encryption in transit, restricted service credentials, environment-isolated payment keys, logging and processor reviews. No internet system is risk-free. Please use secure email practices and never send complete card details or passwords to support.
GDPR and CCPA rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent. You may also appeal a refused request where local law provides. California residents may request to know, correct or delete covered personal information and may exercise rights without discriminatory treatment. We may verify a request using information already associated with the order or account.
Email support@lerwickautoo.shop. We normally respond within one month under UK GDPR, or within the applicable statutory period.
Do Not Sell or Share
We do not sell personal information for money. We do not share personal information for cross-context behavioural advertising. If this practice changes, we will update this policy, provide legally required controls and honour opt-out preference signals where required.
Automated decisions and children
The Cabin Studio Finder ranks products from the answers you choose; it does not make legal or similarly significant decisions and does not determine vehicle-specific fit. We do not knowingly offer the site to children under 13. Users aged 13–17 require guardian consent, and purchases must be made by an adult or with the adult’s authorization.
Complaint and contact method
Send a privacy request or complaint to LERWICK AUTOBODY LIMITED, 8 Gremista Industrial Estate, Gremista, Lerwick, Shetland, Scotland, ZE1 0PX; email support@lerwickautoo.shop; telephone +44 7642700952; or use the contact form. Include enough information for us to identify the relevant order or request, but never send complete card details. You may also complain to the UK Information Commissioner’s Office or your competent data-protection authority.
Policy changes
Material changes will be posted here with a new update date. Questions about fulfilment or returns may also be sent through the contact form.