LMW

Last Updated: June 2026

At Like My Wheels, we practice data minimisation. We only collect the information absolutely necessary to provide our services, and we do not sell, trade, or otherwise transfer your personal information to outside parties.

This policy outlines exactly what data we collect, how it is used, and your rights regarding that data.

1. Account & Profile Data (Vehicle Profiles)

When you register for an account to create a vehicle profile, we process your data under the lawful basis of Contractual Necessity.

• What We Collect: We collect basic information required to run your profile, including your username, email address, and vehicle details. Passwords are encrypted using industry-standard hashing (BCRYPT) and are never stored in plain text.
• Private Info
• Email: We will never share your email address (with the exception of purchases see below). We will only ever email you when essential to the functioning of the website (verify email address, account recovery etc) and will never email you advertising for ourselves or onbehalf of any other company
• Passwword: This is encrypted using industry-standard hashing (BCRYPT).
• Public Info
• Main Profile Page
• Numberplate: The numberplate of your vehicle is used to provide a search facility for your vehicle profile and is visible on each page of your vehilce's profile.
• Country Of Registration: The country of registraton is also used as part of the search functionality for your vehicle. It is also visible onn every page of your vehilce's profile.
• Vehicle Make: This is only visible on the main page of your vehicle's profile.
• Vehicle Model: This is only visible on the main page of your vehicle's profile.
• Description:The main description is visible on the main profile page only.
• Images:
• Additional Categories Pages
• Additional Categories: Additional "category" pages can be added to the public profile to give more detailed information about a certain aspect of the vehicle. This information is, title, description and images. These pages are linked from the main profile and therefore are visible to the public as part of your vehicle's profile. These pages can also be edited or deleted at anytime without affecting the other pages of our vehicle's priofile.
• Profile Visibiity: The vehicle profile can be hidden/unhidden at any time by the account holder. Whilst hidden the vehicle profile is removed from public view. Whilst public anyone, whether a member of LMW or not, can search for the profile.
• How We Use It: Your data is used solely to provide the social features of this website, such as displaying your vehicle profile to other users and allowing you to customize your dashboard lighting (RGB settings). Your email is kept private and is only used for account recovery or essential notifications.
• Public vs. Private Data: Any vehicle specifications, build stories, or photos you upload are inherently public and searchable (including via QR code). Your email address, password, and account settings remain strictly private and hidden from the public.
• Image Rights & Licensing: You retain full ownership and copyright of any images you upload. However, by uploading images to your profile, you grant us explicit, royalty-free permission and a license to display those images publicly on the platform.
• Data Retention & Erasure: Your profile data is kept for as long as your account is active. You have the right to permanently delete your account at any time via your dashboard. Initiating deletion will permanently and irrevocably erase your profile, vehicle data, and images from our active database.

2. Purchases & Checkout Data (E-commerce)

If you purchase merchandise or QR stickers from our site, we require additional information to fulfill your order under the lawful basis of Contractual Necessity.

• What We Collect: We collect your real name, delivery address, and billing address. To ensure accuracy and prevent communication errors, we automatically link your purchase to the verified email address associated with your registered user profile.
• Payment Processing: We do not collect or store your credit card details. All payments are processed securely by our third-party payment gateway (Stripe), acting as a data controller for financial compliance.
• Third-Party Sharing for Fulfillment: Your delivery address, name, and verified email address are securely passed to our product manufacturing partners (e.g., Prodigi) and their designated courier services strictly for the purpose of printing, fulfilling, and shipping your order. They are contractually prohibited from retaining your data or using it for their own marketing purposes.
• Data Retention (HMRC Compliance): While you may delete your public profile instantly, UK tax law (HMRC) legally requires us to retain transactional financial records (which include the delivery name and address linked to an invoice) for 6 years. This data is securely archived and decoupled from active marketing or profile databases.

3. Security & Cookies

• Security Measures: We implement a variety of security measures, including SSL (Secure Socket Layer) technology and BCRYPT cryptography, as well as other bespoke active protection measures against hackers and bots to maintain the safety of your personal information.
• Cookies: We use essential "Session Cookies" to keep you logged into your account. These are temporary and do not track your activity on other websites. Because these are strictly necessary for the site to function, they do not require a consent banner.

4. Your Rights & Complaints

Under the UK GDPR and the Data (Use and Access) Act 2026 (DUAA), you possess the following rights regarding your personal data:

• The Right to Access: You may request a copy of the personal data we hold about you. (However, all the data we hold about you is visible to you when you are logged into your account (with the exception of password))
• The Right to Rectification: You may update or correct inaccurate data via your account dashboard.
• The Right to Erasure: You may delete your account and associated profile data at any time.
• Complaints Process: If you have a concern about how your data is being handled, you may lodge a formal complaint with us via our contact page. By law, we will acknowledge receipt of your complaint and provide a resolution or update within 30 days. If you remain dissatisfied, you have the right to escalate your complaint to the Information Commissioner's Office (ICO).