Privacy Policy — ECU Tuning Portal

1. Who We Are

ECU Tuning Portal operates this ECU tuning portal. We are the data controller for personal information collected through this service. Contact: support@khanperformance.co.uk

2. Data We Collect

We collect the following information when you use our Portal:

Account information: Name, email address, company name, password (hashed)
Vehicle information: Make, model, year, engine, ECU type
Payment information: Transaction amounts and dates (card details are processed by Stripe and never stored by us)
Usage data: Files uploaded, services requested, chat messages, login timestamps
Technical data: IP address, browser type, download logs

3. How We Use Your Data

To provide and manage your account and tuning services
To process payments and maintain credit balances
To communicate with you about your files and account
To send service-related emails (status updates, receipts)
To improve our services and prevent fraud
To comply with legal obligations

4. Legal Basis for Processing

We process your data under the following legal bases (UK GDPR):

Contract: Processing necessary to deliver the services you have purchased
Legitimate interests: Security, fraud prevention, service improvement
Consent: Marketing emails (you may withdraw consent at any time)
Legal obligation: Maintaining records for tax and regulatory purposes

5. Data Retention

We retain your account data for as long as your account is active. ECU files are retained for 30 days after completion (configurable). Payment records are kept for 7 years for legal compliance. You may request deletion of your account and associated data at any time.

6. Third Parties

We share data with the following third parties only as necessary:

Stripe: Payment processing — Stripe Privacy Policy
Email provider: Transactional emails only

We do not sell your personal data to any third party.

7. Your Rights

Under UK GDPR you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data ("right to be forgotten")
Object to processing or request restriction
Data portability
Withdraw consent at any time

To exercise these rights, contact us at support@khanperformance.co.uk. You also have the right to lodge a complaint with the ICO (Information Commissioner's Office) at ico.org.uk.

8. Cookies

We use only essential session cookies required for login and security (CSRF protection). We do not use tracking, advertising, or analytics cookies.

9. Security

We use industry-standard security measures including password hashing, HTTPS encryption, and access controls. ECU files are stored in private server storage not accessible via public URLs.

10. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes by email. Continued use of the Portal after changes constitutes acceptance.