Privacy Policy
Effective Date: 27 Oct. 2025
Introduction
This Privacy Policy outlines how CS COUPE, operated by Niek Nijsen Ltd., collects, uses, and protects the personal information of visitors and customers on www.bmwE9.com.
ICO Registration
Niek Nijsen Ltd. is registered with the Information Commissioner’s Office as a data controller under the Data Protection Act 2018 and has paid the required annual data protection fee.
Data Collection
We collect personal information when you voluntarily provide it, such as through our contact form or during the checkout process. The information we collect includes:
- Name
- Address
- Payment information
Purpose of Data Collection
We use the collected data for the following purposes:
- To fulfil orders made through our online store.
- To respond to inquiries submitted via email or contact form.
- To send updates, newsletters, or promotional materials if you have subscribed or provided consent.
- To administer membership accounts or services (once introduced in the near future).
- To comply with legal obligations, financial recordkeeping, and regulatory requirements.
Third-Party Services
We share your information with trusted third-party providers to complete transactions:
- PayPal & WooPayments: To process payments.
- Printondemand-worldwide: To print and ship our CS COUPE magazine.
Legal Basis for Data Processing
We process your data under the following legal bases:
- Contract: To fulfil your order.
- Consent: For newsletters or marketing communications.
- Legitimate Interest: To respond to inquiries, maintain website functionality, and improve services.
- Legal Obligation: To retain accounting or tax records.
Marketing Communications
You will only receive newsletters or marketing emails if you have explicitly opted in. You may withdraw consent at any time via the unsubscribe link in any email or by contacting us directly.
Data Retention
Customer order and transaction data will be retained for six years to comply with UK accounting and tax laws, unless a longer period is required by law. Marketing data is retained until consent is withdrawn.
Data Security and Access
We maintain technical and organisational measures (such as encryption, limited access, and secure hosting) to safeguard personal data. Only authorised personnel have access.
User Rights
Under the UK GDPR, you have the right to:
- Access, modify, or delete your personal data.
- Restrict or object to certain processing.
- Withdraw consent at any time (for marketing).
- Lodge a complaint with the ICO at www.ico.org.uk.
Data Transfers
If we transfer your data outside the UK or the EEA, we ensure compliance with data protection laws through mechanisms such as Standard Contractual Clauses.
Cookies
We use only essential cookies to store items in your shopping cart and retain details during the checkout process. No tracking, analytics, or marketing cookies are used. By using our website, you consent to the use of these essential cookies.
Changes to This Policy
We may update this Privacy Policy from time to time, and any changes will be notified via a banner on our homepage.