1. Who controls your data
The data controller is SC LEX GLOBAL IT SRL, DN17 nr 268B, Romania, operator of SatNavUpdate.co.uk. For privacy requests, use the Contact page.
We aim to handle data in line with applicable data-protection rules, including UK GDPR principles for UK customers and EU GDPR rules that may apply to us as an EU-based business.
2. Data we may collect
- Contact and order data: email address, name if supplied, order status, product selected, order identifiers and support messages.
- Vehicle data: VIN, short VIN, identified vehicle model, map/head-unit information, report data or technical delivery details needed for the product.
- Payment data: payment status and payment-provider identifiers from Stripe. We do not receive or store your full card number or CVC.
- Technical data: IP address, browser/user-agent, security logs, rate-limit data, server logs, error logs and pages requested.
- Contact-form content: anything you choose to send us through the contact form or by email.
3. Why we use your data
We use data to provide VIN lookups, identify sat nav compatibility, generate or deliver FSC codes/files, create vehicle history reports, confirm payment, send delivery emails, provide customer support, prevent abuse or fraud, maintain security and meet legal/accounting obligations.
4. Lawful bases
- Contract: to process your order and deliver the digital product you requested.
- Legitimate interests: to secure the website, prevent abuse, keep technical logs, improve reliability and respond to support requests.
- Legal obligation: to keep accounting, tax or compliance records where required.
- Consent: where optional technologies or optional marketing communications require consent. At present, optional analytics/advertising tags are disabled on the UK site until new codes are added.
5. VIN and vehicle information
A VIN is needed to identify the vehicle and supply the selected service. We may send the VIN and relevant technical details to data providers, fulfilment providers or internal systems strictly to deliver the service. Vehicle data may not identify a person by itself, but it can become personal data when linked to an order email or customer account context.
6. Sharing data
We may share necessary data with providers that help us operate the service, such as hosting providers, email providers, Stripe/payment processors, VIN/data providers, map/FSC fulfilment providers, security tools, maintenance contractors and professional advisers.
These providers should only use the data for the service they provide to us or as required by law.
7. International transfers
Because we are based in Romania and serve UK customers, data may be processed in the UK, the EEA and other locations where our providers operate. Where required, transfers should rely on recognised safeguards such as adequacy rules, standard contractual clauses or equivalent protections.
8. How long we keep data
- Order and accounting records: for the period required by tax/accounting law and reasonable business records.
- Report links and deliverables: for as long as needed to provide access, support and proof of delivery.
- Contact messages: while handling the request and for a reasonable follow-up period.
- Security and technical logs: for limited periods needed to protect and operate the service.
9. Cookies and similar technologies
The website may use essential cookies or local storage for security, session handling, checkout, admin protection and core functionality. We do not currently run the old analytics/Google Ads tags or the old consent banner on the UK site. If optional analytics or advertising cookies are added later, this policy and the consent experience should be updated first.
10. Security
We use reasonable technical and organisational measures such as HTTPS, limited access, server-side secrets, payment-provider isolation and monitoring. No online service is completely risk-free, but we treat security as an operational priority.
11. Your rights
Depending on your location and the applicable law, you may have rights to access, correct, delete, restrict or object to processing, request portability, and withdraw consent where processing is based on consent.
You can make a request through the Contact page. We may need to verify your identity before responding. UK customers may also contact the UK Information Commissioner’s Office for guidance or complaints; EU customers may contact their local supervisory authority.
12. Contact
For privacy questions or requests, use the Contact page and include enough information for us to identify the relevant order or message without sending unnecessary sensitive data.
