Privacy policy
How TecNorma processes customer, order, account and website data.
Use the complete part number, OE reference or VIN.
Delivery options and costs are shown before payment.
support@tecnorma.co.uk
Data controller
TecNorma Sp. z o.o., ul. Złota 75A/7, 00-819 Warsaw, Poland is responsible for processing personal data for its website and services. Contact support@tecnorma.co.uk about privacy requests. A third-party seller or payment provider may separately control data for its own contractual and legal purposes.
Online payment provider
Online payments are processed by Mollie. Available methods are shown at checkout.
Provider changes apply to new payments and links. Earlier payments and refunds remain with their original provider. With Mollie, a separate core deposit refund is made by bank transfer; product refunds are processed through the payment provider. A full refund of the original payment can include the deposit without a separate transfer. Follow the instructions for your order and do not pay twice.
The payment provider receives the information needed to process your transaction, such as the amount, currency, order reference and, depending on the method, contact, billing, delivery and order details. You enter authorisation details in a secure payment environment. TecNorma does not store full card numbers or CVC codes. Providers may act as independent data controllers as described in their privacy policies. Changing providers does not delete earlier transaction records.
Information and purposes
We process account and contact details, delivery and billing addresses, order contents, payment references, messages and returns to provide services and fulfil purchases. Contractual processing is based on Article 6(1)(b) GDPR; accounting and other legal obligations on Article 6(1)(c). Security, fraud prevention and handling claims rely on legitimate interests under Article 6(1)(f), subject to your rights.
Optional marketing and non-essential analytics rely on consent where required. You can change cookie preferences and unsubscribe from marketing. Necessary transactional and security messages are separate.
Service providers and transfers
Necessary data is shared with the relevant seller, carriers, payment providers and providers of hosting, communication and technical services. Payment credentials are entered in the payment provider's secure environment, not stored as full card numbers by TecNorma.
Providers may process information outside your country or the EEA. Where required, transfers use an applicable adequacy decision or appropriate contractual safeguards. Contact us for information about the safeguards relevant to your data.
Retention
We keep account data while the account is used and afterwards where needed for legal obligations or claims. Order and accounting records follow applicable statutory retention periods. Optional marketing data is retained until consent is withdrawn or no longer needed. Private message photo attachments expire after 30 days.
Your choices and rights
Depending on the applicable conditions, you can request access, correction, erasure, restriction, portability or object to processing. You can withdraw consent without affecting earlier lawful processing. Contact us to exercise your rights and complain to the competent data protection authority if you consider processing unlawful.
Data used for VIN checks and photos
TecNorma Sp. z o.o. is the data controller for these features. The VIN, listing details and result are used to check compatibility at your request and take steps before a purchase (Article 6(1)(b) GDPR). The number is sent to OpenAI; the check may use web search. Do not send vehicle owner details. Supporting results may be cached with a pseudonymous query key for reuse; security data is used to prevent abuse (Article 6(1)(f) GDPR).
Reading a VIN from a photo is optional. We process the photo and reading with your consent before sending it to OpenAI (Article 6(1)(a) GDPR). Send only the VIN area, without names, addresses, document numbers or unnecessary details. TecNorma does not save the photo in its database, file storage or analytics; it is processed temporarily in the browser and during the reading request. Compatibility results and security data serve purposes separate from the photo.
You can refuse consent and enter the VIN manually or search for a part number. Before sending a photo, you can cancel by closing the window; you can also withdraw consent by contacting us. Withdrawal does not affect earlier lawful processing or undo a completed reading. Your rights and the controller's contact details are described elsewhere in this policy.
OpenAI provides AI processing. We disable API response storage, but this does not mean zero retention by the provider: data may be retained in abuse-monitoring logs, normally for up to 30 days, subject to provider and legal exceptions. Processing may take place outside the EEA; the transfer provisions and safeguards in this policy apply. We do not promise immediate deletion by OpenAI.
We process order numbers, delivery addresses and contact details to fulfil orders (Article 6(1)(b) GDPR), and billing data to meet legal obligations (Article 6(1)(c)). Necessary delivery details are shared with the carrier. Transaction records are retained for the periods set out in this policy. AI assessments are not decisions with legal effects: you confirm the VIN and decide whether to buy yourself.