Effective date: March 17, 2026
This Privacy Policy explains how CB AutoTech collects, uses, stores, and shares personal data when you browse our site, place an order, or contact us.
1. Data controller
The data controller is CB AutoTech. For privacy and personal-data matters, contact us at cbautotech@icloud.com.
2. Data we collect
Depending on how you use the site, we may collect:
- Contact details such as name, email address, phone number, and billing or shipping addresses
- Customer account details and order history when you use WooCommerce account features
- Order, shipping, return, and invoicing information
- Details you enter into the contact form before you continue through WhatsApp
- Technical data such as IP address, browser type, device information, and basic security logs
- Usage data related to language, cart, checkout, and, where still enabled, attribution cookies
3. How we use your data
- To process, confirm, and deliver orders through WooCommerce
- To provide customer support, order updates, returns handling, and after-sales communication
- To prepare your message when you choose to continue the conversation through WhatsApp
- To maintain the security, stability, and core functionality of the site
- To meet tax, accounting, and other legal obligations
4. Legal bases
We process personal data on the basis of contract performance when you buy products, legal compliance for accounting and tax obligations, our legitimate interests in running a secure and functional online store, and consent where consent is required, including for optional technologies or when you confirm that you want to continue through WhatsApp.
5. Who we share data with
We share personal data only where necessary with:
- The WooCommerce / WordPress site infrastructure for e-commerce and account functionality
- EuroCommerce / Cardlink and the relevant banking or payment partners for card transaction processing
- Shipping carriers and delivery partners for order fulfilment
- WhatsApp / Meta when you choose to continue your enquiry through WhatsApp
- Google when you load Google Maps content or, where still enabled, Google Fonts
- Hosting providers, technical support providers, accountants, legal advisers, or public authorities where required
6. Card payments
Card payments are handled through the EuroCommerce / Cardlink payment environment. We do not store full card details on our site servers. At checkout you are redirected to the secure payment environment operated by the payment provider, which processes the payment information under its own terms and data-protection obligations.
7. WhatsApp contact flow
The site contact form does not automatically send your message to us. After you complete the form and confirm that you want to continue, the site prepares a pre-filled message and redirects you to WhatsApp so that you can decide whether to send it. Any message you choose to send through WhatsApp is also subject to WhatsApp and Meta terms and privacy practices.
8. Google Maps and external resources
The contact page includes an embedded Google Map to show our business location. When that content loads, Google may receive technical data such as your IP address, browser information, and device data. The site may also load Google Fonts while that configuration remains active in the theme.
9. Cookies and similar technologies
The site uses cookies and similar technologies for core functionality, checkout performance, and language preferences. Examples include:
- cb_lang to remember your language choice
- WooCommerce cart and session cookies to keep the cart and checkout working
- WordPress / WooCommerce login and security cookies when customer or admin account access is used
- Attribution cookies such as sbjs_* where they remain enabled to understand traffic sources and order journeys
Where required by applicable law, non-essential cookies or third-party embeds should only load after an appropriate consent choice.
10. Retention periods
- Order, invoicing, and accounting records: up to 10 years, or longer where required by tax or commercial law
- Support and contact enquiries: up to 24 months from the last substantive communication, unless longer retention is needed for legal defence or an open request
- Inactive customer accounts: up to 24 months from the last activity, unless linked to orders that must be retained
- Technical logs and security data: typically up to 12 months, unless longer retention is needed for incident investigation
- Cookies: until their expiry, your deletion of them, or withdrawal of the relevant choice where applicable
11. International transfers
Some service providers or third parties, such as Google or Meta / WhatsApp services, may process data outside the European Economic Area. In those cases, we rely on the contractual and organisational safeguards made available by the relevant provider for those transfers.
12. Your rights
Subject to applicable law, you may have the right to access, correct, erase, restrict, object to, or transfer your personal data, and to withdraw consent where processing relies on consent. You may also lodge a complaint with the competent data protection authority.
13. Contact
For privacy or personal-data requests, contact us at cbautotech@icloud.com.