Privacy Policy
Last updated: October 2026
1. ABOUT THIS PRIVACY POLICY
This Privacy Policy explains how CARDIP (UK) Ltd collects, uses, stores and protects personal information when you use our website, contact us, request a quotation, enquire about installer training or otherwise interact with CARDIP UK. CARDIP (UK) Ltd. Company number: 17253496. Registered in England and Wales.
For the purposes of applicable UK data protection law, CARDIP (UK) Ltd is the controller of personal information processed for the purposes described in this Privacy Policy, except where another organisation is separately responsible for determining how your information is used. CARDIP® is a brand of Colosol Coatings GmbH. References in this Privacy Policy to “CARDIP UK”, “we”, “us” or “our” mean CARDIP (UK) Ltd.
2. INFORMATION WE MAY COLLECT
Depending on how you interact with CARDIP UK, we may collect: Identity and contact information, including your name, email address, telephone or WhatsApp number and business name. Vehicle and project information, including vehicle make, model, year, current condition, desired colour or finish, photographs and information relating to the CARDIP service you are interested in. Installer and business information, including information about your automotive business, experience, facilities and interest in CARDIP training or certification.
Enquiry and communication information, including information you provide through our website forms, email, telephone, WhatsApp or other communications with us. Transaction information, where applicable, including information relating to quotations, bookings, invoices and payments. Payment card information may be processed directly by a payment provider rather than stored by CARDIP UK. Technical and website information, which may include IP address, device and browser information, pages visited, referral source and information about how visitors interact with our website, subject to applicable cookie and consent requirements. We only collect information that is reasonably relevant to our relationship with you and the services we provide.
3. HOW WE COLLECT INFORMATION
We may collect personal information when you: request a CARDIP quotation; submit an installer or training enquiry; contact CARDIP UK; communicate with us by email, telephone or WhatsApp; book or purchase a service; provide vehicle photographs or project information; attend CARDIP training or events; interact with our website; or otherwise provide information directly to us. We may also receive information from third parties where lawful, including professional partners, installers, service providers or referral partners. Where information has not been obtained directly from you, we will handle it in accordance with applicable data protection law.
4. HOW WE USE YOUR INFORMATION
We may use personal information to: Respond to enquiries — to respond to questions, quote requests, contact requests and other communications. Prepare quotations and recommendations — to understand your vehicle, requirements and desired outcome and recommend an appropriate CARDIP service. Provide CARDIP services — to manage bookings, vehicle projects, customer communications, payments, handover and aftercare. Manage installer enquiries and training — to assess enquiries from automotive businesses and communicate about CARDIP training, certification and the professional installer network.
Manage our customer relationships — to maintain appropriate records of quotations, projects, communications and services. Operate and improve our website — to maintain website functionality, security and, where permitted, understand how visitors use the website. Meet legal and regulatory requirements — to maintain records and comply with legal, accounting, tax, regulatory or other obligations. Protect CARDIP UK and others — where reasonably necessary to prevent fraud, protect our systems, establish or defend legal claims or protect our legitimate business interests.
5. OUR LAWFUL BASES FOR PROCESSING
Under UK data protection law, we must have a lawful basis for processing personal information. Depending on the circumstances, we may rely on: Contract — where processing is necessary to take steps at your request before entering into a contract or to perform a contract with you. For example, preparing a quotation or delivering an agreed CARDIP service. Legitimate interests — where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and interests. This may include responding to certain business enquiries, managing customer relationships, improving our services, protecting our business and maintaining appropriate records.
Legal obligation — where we need to process information to comply with applicable law. Consent — where we specifically ask you to consent to particular processing. Where processing is based on consent, you may withdraw that consent at any time.
6. MARKETING COMMUNICATIONS
Where permitted by law, CARDIP UK may send information about relevant CARDIP products, services, events or opportunities. Where consent is required, we will obtain it before sending such communications. You can ask us to stop sending marketing communications at any time by using an unsubscribe option provided in the communication or by contacting us. Stopping marketing communications does not prevent us from sending necessary service communications relating to an enquiry, quotation, booking or existing customer relationship.
7. WHO WE MAY SHARE INFORMATION WITH
We do not sell your personal information. We may share information where reasonably necessary with trusted organisations that help us operate our business or provide services. These may include: website and hosting providers; CRM and communications providers; email providers; payment providers; professional advisers; IT and security providers; analytics providers where permitted; trained or authorised CARDIP installers where relevant to your enquiry; Colosol Coatings GmbH where reasonably necessary in connection with CARDIP products, technical support, training or the CARDIP professional network; and regulators, law enforcement authorities or other parties where disclosure is required by law. Where service providers process personal information on our behalf, we expect appropriate data protection and security arrangements to be in place. Independent businesses may act as separate controllers of personal information they receive and will be responsible for their own privacy practices.
8. INTERNATIONAL DATA TRANSFERS
Some organisations we use may process or store personal information outside the United Kingdom. Where personal information is transferred internationally, we will take appropriate steps required by applicable data protection law to protect that information. This may include relying on recognised adequacy arrangements or appropriate contractual safeguards where required.
9. HOW LONG WE KEEP INFORMATION
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, accounting, tax, contractual and regulatory requirements. Retention periods may differ depending on the type of information and our relationship with you. For example, an initial enquiry that does not become a customer relationship may not need to be retained for the same period as records relating to a completed paid service. When information is no longer reasonably required, we will delete, anonymise or securely dispose of it as appropriate.
10. HOW WE PROTECT YOUR INFORMATION
We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. Access to personal information should be limited to people and service providers who reasonably require it for legitimate business purposes. However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
11. COOKIES AND WEBSITE TECHNOLOGIES
Our website may use cookies and similar technologies necessary to operate the website and, where enabled, to understand website performance and visitor interactions. Some technologies are essential to the operation or security of the website. Other technologies, such as certain analytics or advertising technologies, may require your permission before they are activated. Where required, visitors will be provided with appropriate information and controls relating to non-essential cookies or similar technologies. You can also control certain cookies through your browser settings. The ICO currently requires organisations to provide clear information about storage/access technologies and, generally, not enable non-exempt technologies before the required consent has been obtained. Information Commissioner’s Office
12. THIRD-PARTY WEBSITES AND SERVICES
Our website may contain links to websites, social media platforms or services operated by third parties. CARDIP UK is not responsible for the privacy practices of independent third parties. We recommend reviewing the relevant privacy information when providing personal information to another organisation.
13. YOUR DATA PROTECTION RIGHTS
Depending on the circumstances and applicable law, you may have rights relating to your personal information, including the right to: request access to personal information we hold about you; ask us to correct inaccurate or incomplete information; ask us to delete personal information in certain circumstances; ask us to restrict certain processing; object to certain processing; request the transfer of certain information where applicable; withdraw consent where processing relies on consent; and complain about how your personal information has been handled. These rights are not absolute and may depend on the circumstances and the lawful basis on which information is being processed. To exercise a data protection right, please contact CARDIP UK using the contact details published on our website. We may need to verify your identity before completing certain requests.
14. COMPLAINTS
If you have concerns about how CARDIP UK handles your personal information, please contact us first so that we can investigate and respond. You also have the right to raise a concern with the Information Commissioner’s Office (ICO), the UK’s data protection regulator. Information Commissioner’s Office
15. CHILDREN
CARDIP UK’s services are not directed at children, and we do not knowingly seek to collect personal information from children through our vehicle quotation or professional installer services. If we become aware that personal information has been collected inappropriately, we will take reasonable steps to address it.
16. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy periodically to reflect changes to our services, website, business practices or legal obligations. The latest version will be published on this page with an updated revision date. We recommend reviewing this Privacy Policy periodically.
17. CONTACT CARDIP UK
For questions about this Privacy Policy, your personal information or your data protection rights, please contact: CARDIP (UK) Ltd. Company number: 17253496. Registered in England and Wales.
