Privacy notice

What this notice covers

It covers this website, including the shop, your account and the dealer portal. It does not cover other organisations' websites we link to, which have their own notices.

The software that supports machines in the field is a separate system with its own privacy notice. This website only ever receives aggregate, non-personal figures from it — never anything that identifies a person or a specific machine.

The information we collect

We collect what you give us, and very little else. We do not buy personal information from anyone, and we do not build profiles of visitors.

• When you send an enquiry: your name, email address, the country you tell us, and whatever you write in the message.
• When you sign up for the newsletter: your email address, and the date and source of your consent.
• When you create an account: your email address, the name you choose to give us, and an identifier for the account from our sign-in provider.
• If you sign in with Google or Apple, they tell us your email address and confirm it is yours. We never see your password. If you use Apple's Hide My Email, we only ever hold the relay address it gives us.
• If you are a dealer: which dealer organisation you belong to, and a record of which documents you download and when.
• Technical information created in the course of serving pages, such as server logs held briefly by our hosting provider.

Why we use it, and our lawful basis

• To run your account and, when the shop opens, to take and fulfil your order — because we need to in order to do what you have asked us to do (contract).
• To send you the newsletter — because you asked us to (consent). You can withdraw that at any time, in your account or from any newsletter we send, and we will stop.
• To answer your enquiry — because you contacted us and expect a reply (legitimate interests).
• To run the dealer portal and keep a record of who downloaded which document — so we can tell a dealer whether they have the current revision of a manual, and so we know where our technical documents have gone (legitimate interests).
• To keep the site working and secure, and to prevent abuse (legitimate interests).

Cookies and analytics

We set only the cookies the site needs to work: one to keep you signed in if you have an account, and one to remember a basket when the shop opens. There are no advertising cookies, no tracking pixels and no third-party scripts that follow you between sites.

Our website analytics are cookieless and aggregate. They tell us which pages are read and roughly where in the world readers are; they do not identify you and cannot be used to recognise you on another site. That is why this site has no cookie banner asking you to accept tracking — there is none to accept.

Who we share it with

We do not sell personal information, and we do not share it for anyone else's marketing.

We use a small number of service providers who process information on our behalf, under contracts that oblige them to protect it and to use it only for what we have asked. They are our website hosting provider, the provider of our database, sign-in and file storage, and the service that sends our email. This list is kept current as the site grows — payment processing, for example, will be added when the shop opens.

We would also disclose information if the law required it, or to establish or defend a legal claim.

Where your information is stored

Personal information is held in a database in Ireland, inside the European Economic Area, and the parts of the site that handle it run in London and Frankfurt.

Both UK and EU data protection law apply to us. Where a provider operates outside the UK or EEA, the transfer is covered by the standard contractual clauses and the UK addendum, which are the safeguards the law provides for this.

How long we keep it

• Enquiries: while we are dealing with them, and for up to two years afterwards, so we can pick up a conversation you started.
• Newsletter consent: for as long as you are subscribed, and for two years after you unsubscribe. We keep the record of your unsubscribing so we can show that we stopped when you asked.
• Your account: until you close it. Closing it deletes your profile, your sign-in and your email preferences immediately.
• Dealer download records: six years. These record which dealer organisation took a copy of which manual or bulletin, and when. We keep them longer than the rest because they are how we tell a dealer whether they hold the current revision, and how we would establish where a technical document came from if one appeared somewhere it should not have — questions that arise years later.
• Server logs: about 30 days.
• Orders, once the shop opens: six years, because tax law requires it. We reduce them to what the law needs and remove the rest.

Your rights

Data protection law gives you rights over the information we hold about you. You can ask us to:

• Give you a copy of it.
• Correct it if it is wrong.
• Delete it.
• Stop using it, or restrict what we do with it.
• Send it to you, or to someone else, in a portable format.
• Stop relying on legitimate interests, if you object to that use.
• Stop sending you marketing, at any time.

How to exercise them

If you have an account, the quickest route is to sign in and go to Your data, where you can download everything we hold about you as a file, or close your account and have it deleted. Your email preferences are on the same page.

Otherwise, email contact@aftrak.com. We will reply within one month, and it costs nothing. We may need to check who you are first — not to make it difficult, but because sending someone's personal information to the wrong person would be the worse mistake.

Automated decisions

We do not make decisions about you by automated means, and we do not profile you.

If you are unhappy

Please tell us first — most things are quicker to put right directly. You also have the right to complain to the Information Commissioner's Office, the UK regulator we are registered with, at ico.org.uk. If you are in the EU, you can complain to the supervisory authority in the country where you live.

Changes to this notice

When we change this notice we update the date at the top. If a change materially affects how we use your information, we will say so clearly rather than relying on you to notice.