How Finish Line Remaps collects, uses and protects your personal data — written in plain English, with the legal detail where it matters.
REV 1.0
Last UpdatedJune 2026
Reading Time—
Applies Tofinishlineremaps.co.uk
01
Who We Are
In Plain English
We're a small vehicle tuning business in Haslingden, Lancashire. We're the "data controller" for any personal information you give us, and you can contact us directly about it any time.
Finish Line Remaps ("FLR", "we", "us") is a vehicle tuning specialist based in Haslingden, Lancashire, providing ECU remapping, DSG / TCU optimisation, diagnostics, coding and mobile remapping services across Lancashire and Greater Manchester.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Finish Line Remaps is the data controller of the personal data described in this policy.
02
The Data We Collect
In Plain English
We only collect what we need to quote, book and do the job: your contact details, your vehicle's registration and details, and a record of the work we carry out. Analytics only runs if you accept cookies. Tap each card below for the full breakdown.
We collect the following categories of personal data. Expand each card to see exactly what is collected, why, our lawful basis, and how long we keep it.
WhatName, phone number, email address, and — for mobile appointments — the address where we carry out the work.
WhyTo respond to enquiries, provide quotes, arrange bookings and carry out mobile visits.
BasisContract (taking steps at your request before entering a contract, and performing it).
KeptFor the duration of our relationship plus up to 6 years (see section 05).
WhatVehicle registration number, make, model, engine and gearbox details. If you use our reg-lookup tool, your registration is sent to our vehicle data service to identify your car.
WhyTo check tuning compatibility, prepare an accurate quote and write the correct calibration file for your specific vehicle.
BasisContract / legitimate interests (providing the quote you asked for).
KeptWith your job records — up to 6 years after the work.
WhatYour vehicle's original ECU/TCU software file, the modified calibration file, diagnostic reports, and a record of work carried out and payments made.
WhySo we can restore your original software on request, honour aftercare, and meet accounting obligations. Keeping your original file is a key safety net for you.
KeptOriginal files retained indefinitely unless you ask us to delete them; financial records 6 years.
WhatPages viewed, approximate location (city level), device and browser type — collected by Google Analytics (GA4) only after you accept analytics cookies.
WhyTo understand how visitors find and use the site so we can improve it.
BasisConsent — analytics never loads unless you choose Accept, and you can withdraw at any time.
KeptPer Google Analytics retention settings (14 months).
WhatIP address, request timestamps and pages requested — standard web server logs kept by our hosting provider.
WhySecurity, abuse prevention and keeping the website running reliably.
BasisLegitimate interests (site security and operation).
KeptRotated automatically by the hosting provider, typically within weeks.
WhatIf you use our customer portal: login email, securely hashed password, and the job and vehicle records linked to your account.
WhyTo give you secure access to your tuning history and documents.
BasisContract (providing the portal service you signed up for).
KeptWhile your account is active; deleted on verified request.
What we don't collect: we do not collect special category data, we do not buy marketing lists, and we do not use advertising or social media tracking on this website.
03
How We Use Your Data
In Plain English
We use your details to do the work you've asked for and stay in touch about it. We don't send marketing blasts, and we never sell your information to anyone.
Under UK GDPR we must have a lawful basis for every use of your personal data. Ours are:
Performing our contract with you — providing quotes, booking appointments, carrying out remapping and diagnostic work, providing aftercare and keeping your original software files safe.
Legal obligations — keeping financial records for HMRC and responding to lawful requests from authorities.
Legitimate interests — responding to enquiries, maintaining job histories for warranty and aftercare purposes, and protecting our website from abuse. Where we rely on legitimate interests, we balance them against your rights.
Consent — analytics cookies, and any optional communications you explicitly opt in to. You can withdraw consent at any time without affecting the service you receive.
We do not use your data for automated decision-making or profiling, and we do not sell or rent personal data to third parties — ever.
04
Who We Share It With
In Plain English
A small number of trusted suppliers help us run the business — web hosting, vehicle data lookup, analytics. They only get what they need, and only to provide their service to us.
We share personal data only where necessary, with:
Hosting providers — our website, customer portal and email run on third-party infrastructure. Providers process data on our instructions under data processing terms.
Vehicle data services — when you use the reg-lookup tool, your registration number is sent to a vehicle data provider to return your car's specification. No contact details are included in that lookup.
WhatsApp — if you choose to contact us via the WhatsApp button, your use of WhatsApp is governed by WhatsApp's Privacy Policy. Nothing is shared with WhatsApp until you choose to open it.
Professional advisers and authorities — accountants, insurers or public authorities where we are legally required or it is necessary to protect our rights.
Where any provider stores data outside the UK, we ensure appropriate safeguards are in place (such as UK adequacy regulations or International Data Transfer Agreements).
05
How Long We Keep It
In Plain English
Job and payment records: up to 6 years (the law and our accountant require it). Your original ECU file: kept safe so we can always restore your car — unless you ask us to delete it. Casual enquiries that go nowhere: deleted much sooner.
Enquiries that don't become bookings — deleted within 12 months of our last contact.
Customer and job records — kept for 6 years after the work, in line with HMRC record-keeping requirements and the limitation period for contract claims.
Original ECU/TCU software files — retained indefinitely as a service to you, so your vehicle can always be returned to stock. Deleted on verified request.
Analytics data — controlled by Google Analytics retention settings (14 months).
Server logs — rotated automatically, typically within weeks.
When data is no longer needed, it is deleted or anonymised securely.
06
Your Rights
In Plain English
Your data belongs to you. You can ask to see it, fix it, delete it, take it elsewhere or tell us to stop using it — for free. Expand each right below to see how it works.
Under UK GDPR you have eight key rights. To exercise any of them, contact us using the details in section 01 — we will respond within one calendar month, free of charge in almost all cases.
You can request a copy of all personal data we hold about you (a "subject access request"), along with details of how we use it. We'll provide it within one month.
If anything we hold is wrong or incomplete — a misspelt name, an old phone number, the wrong vehicle — tell us and we'll correct it promptly.
Also known as the "right to be forgotten". You can ask us to delete your data. We'll do so unless we have a legal reason to keep it (e.g. tax records must be kept 6 years) — and we'll tell you exactly what's kept and why.
You can ask us to pause processing of your data — for example while we check its accuracy or consider an objection you've raised. We'll store it but not use it.
For data you've provided to us that we process by automated means, you can request it in a structured, machine-readable format — or ask us to send it directly to another provider.
You can object to processing based on our legitimate interests. We'll stop unless we can demonstrate compelling grounds. You can always object to direct marketing — we'll stop immediately, no questions asked.
Where we rely on consent (analytics cookies), you can withdraw it at any time — use the cookie settings on this site or just ask us. Withdrawal doesn't affect processing that happened before.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) — see section 11. We'd appreciate the chance to put it right first.
07
Cookies & Local Storage
In Plain English
Essential storage only, plus optional analytics that you control. The full detail lives in our Cookie Policy, and you can change your choice right here.
This site uses essential local storage to remember your cookie choice, and Google Analytics cookies only if you consent. We use no advertising or social media tracking. Full details — including every cookie category and how to manage them — are in our Cookie Policy.
08
How We Protect It
In Plain English
Encrypted connections, hardened servers, hashed passwords, and access limited to the people who actually need it.
Encryption in transit — the website and customer portal are served exclusively over HTTPS with HSTS enabled.
Hardened hosting — security headers, a content security policy and restricted file access are enforced at server level.
Credential protection — portal passwords are stored using strong one-way hashing; we never see or store them in plain text.
Access control — customer records and ECU files are accessible only to FLR personnel who need them to do the work.
No system is 100% secure, but if a breach ever put your rights at risk we would notify you and the ICO as required by law (within 72 hours of becoming aware, where feasible).
09
Children's Privacy
Our services involve vehicle ownership and are directed at adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
10
Changes To This Policy
We may update this policy to reflect changes in our practices, services or the law. Material changes will be highlighted on this page with a new revision number and date. The revision tag at the top of this page always shows the current version.
11
Complaints & The ICO
In Plain English
Talk to us first — we'll fix it fast. If you're still not happy, the ICO is the UK regulator and complaining to them is free.
If you have any concern about how we handle your data, please contact us first using the details in section 01 — we take this seriously and will respond quickly.
You also have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO) — Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF