Privacy Policy

Effective Date: May 2026

Data Controller: Tyka Tyres Ltd.

This Privacy Policy describes how Tyka Tyres Ltd. ("we", "us", or "our") collects, uses, and protects your personal and business data when you visit our website, apply for a trade account, or use our B2B Trade Portal.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Tyka Tyres Ltd. is the Data Controller of the personal data collected through this website.

1. Acceptance of Terms & Account Creation

By accessing our website, submitting a trade application, or creating and logging into a Trade Portal account, you explicitly acknowledge and agree to the terms of this Privacy Policy. Because we operate an exclusive B2B wholesale portal, account creation requires manual verification. By registering for an account, you consent to us using the provided information to verify your business status.

2. The Data We Collect

Under UK GDPR, personal data applies to identifiable living individuals (which includes sole traders, partners, and company directors/employees). We collect:

Identity Data: First name, last name, and role within the business.

Contact Data: Email address, billing address, delivery addresses, and telephone numbers (e.g., +44 7404 203567).

Business Data: Trading name, company registration number, and VAT number.

Financial & Transaction Data: Records of the SKUs purchased (e.g., RYDANZ and FIREMAX tyres), invoices, order history, and payment details (processed securely via our payment gateways; we do not store raw card data).

Technical Data: IP address, browser type and version, time zone setting, operating system, and how you interact with our Shopify-hosted site.

3. Our Lawful Basis for Processing (UK GDPR)

We will only use your personal data when the law allows us to. We process your data under the following lawful bases:

Performance of a Contract: To process your account application, manage your wholesale account, process orders, and deliver goods from our Basildon and Epping Hubs.

Legitimate Interests: To manually verify your trade status (protecting our wholesale pricing network), prevent fraud, and improve our website and logistics operations.

Legal Obligation: To retain financial records and invoices as required by HMRC and UK tax laws.

Consent: For placing non-essential cookies on your device or sending direct B2B marketing communications (which you can opt out of at any time under PECR).

4. Data Sharing & International Transfers

We do not sell your data. We share your data only with trusted third parties necessary to operate our business:

Shopify: Our store is hosted on Shopify Inc. Because Shopify operates globally, your data may be transferred outside the UK (e.g., to Canada or the US). We ensure these transfers comply with UK GDPR, relying on UK Adequacy Regulations or Standard Contractual Clauses (SCCs). You can read Shopify’s privacy policy here: https://www.shopify.com/legal/privacy.

Logistics Partners: We share your delivery address and phone number with our courier networks to fulfill your orders.

Legal Authorities: We may disclose data if required by UK law enforcement, HMRC, or court order.

5. Cookies & PECR Compliance

In accordance with the Privacy and Electronic Communications Regulations (PECR), our website uses strictly necessary "cookies" to keep you logged into the Trade Portal and manage your cart. We also use analytics cookies to monitor site traffic. You can manage or decline non-essential cookies via your browser settings; however, disabling strictly necessary cookies will prevent you from accessing the secure Trade Portal.

6. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for. By law, we have to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers for UK tax purposes.

7. Your UK GDPR Rights

Under UK data protection laws, you have specific rights regarding your personal data:

Request Access: You can request a copy of the personal data we hold about you.

Request Correction: You can ask us to correct incomplete or inaccurate data.

Request Erasure: You can ask us to delete your data where there is no good reason for us continuing to process it (note: this may be overridden by HMRC record-keeping requirements).

Object to Processing: You can object to us processing your data for direct marketing or where we rely on a legitimate interest.

Request Restriction: You can ask us to suspend the processing of your personal data.

Data Portability: You can request the transfer of your data to a third party.

If you wish to exercise any of these rights, please contact us using the details below.

8. Right to Complain to the ICO

If you believe we are processing your personal data unlawfully, you have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

9. Contact Us

If you have any questions about this Privacy Policy, your Trade Account, or your data rights, please contact our team: