Privacy Policy
Last updated 30 July 2026
Boostwerkz ("we", "us") provides a vehicle registration lookup and quote widget, together with a lead-management portal, to vehicle tuning and remapping businesses. This policy explains what personal data we handle, why, and what rights you have. We are the data controller for our customers' account data, and a data processor acting on our customers' instructions for the enquiry data their own customers submit.
Who this policy covers
- Our customers — tuning businesses who hold a Boostwerkz account.
- Vehicle owners — people who submit a quote enquiry through a widget embedded on one of our customers' websites, or through a lead form run by that business on Facebook or Instagram.
What we collect
From our customers (account data)
- Business name, website address, contact email and lead-notification email.
- Login credentials (passwords are stored only as salted cryptographic hashes).
- Billing details processed by Stripe — we store a customer reference, plan and payment status; we never see or store full card numbers.
- Product usage: searches performed, leads received, and settings you choose.
From vehicle owners (enquiry data)
- Name, phone number, email address and postcode, where provided.
- Vehicle registration mark, and the vehicle details returned for it.
- The tuning service or stage requested, chosen options and any message left.
- Preferred contact method, where the enquiry form asks for it.
Automatically
- A one-way hash of the visitor's IP address, used solely to enforce anti-abuse search limits. We do not store raw IP addresses against enquiries.
- Aggregate counts of widget views and searches, for usage limits and analytics.
We do not use advertising cookies or third-party tracking pixels on our marketing site, and the embedded widget sets no advertising cookies.
How we use it
- To look up vehicle data for a registration entered by the vehicle owner.
- To deliver the resulting enquiry to the tuning business — by email and in their portal — so they can provide the quote that was requested.
- To operate accounts, take payment, provide support and prevent abuse.
- To meet our legal and accounting obligations.
Our lawful bases are: contract (running the service our customers pay for), legitimate interests (security, abuse prevention, service improvement) and legal obligation (records we must keep). Where a vehicle owner submits an enquiry, they do so to request a quote — the resulting contact from that business is the purpose of the submission.
We do not sell personal data, and we do not use enquiry data for our own marketing or share it between our customers.
Facebook and Instagram lead ads
Where a customer connects their Facebook Page, we receive lead-form submissions from Meta on that customer's behalf and place them in that customer's account only. We request only the permissions needed to do this: to list the Pages the person manages, to subscribe to that Page's lead notifications, and to retrieve the submitted lead. We do not post content, read messages, or access anything else on the Page. A customer can disconnect at any time from their portal Setup page, or by removing Boostwerkz in their Facebook Business settings, which stops all further delivery immediately.
Who we share it with
- The tuning business whose widget or ad the enquiry came from — this is the purpose of the service.
- Vehicle Data Global — our vehicle data provider, which receives the registration in order to return vehicle details.
- Resend — delivers our transactional email.
- Stripe — processes subscription payments.
- Vercel and Neon — host the application and its database.
- Meta — only where a customer has connected their Facebook Page, as described above.
These providers act under contract and may process data outside the UK/EEA; where they do, we rely on the UK International Data Transfer Addendum or Standard Contractual Clauses. We may also disclose data where the law requires it.
How long we keep it
- Enquiries — kept for as long as the business's account is active, as they are that business's customer records. Deleted within 30 days of the account closing, or sooner on request.
- Vehicle lookup results — cached against the registration so a repeat search need not be re-purchased. This cache holds vehicle facts, not personal contact details.
- Account and billing records — retained for up to seven years where tax law requires.
Security
All traffic is encrypted in transit. Passwords are hashed and salted. Access to production data is restricted to those who need it. Each customer's data is separated by account, and widgets answer only on domains a customer has registered.
Your rights
You may request access to your personal data, correction of it, deletion of it, restriction of its processing, a portable copy, or object to processing based on legitimate interests. Email admin@boostwerkz.com and we will respond within one month. See also our Data Deletion page.
If a tuning business holds your enquiry, they decide how long to keep it — contact them directly, or contact us and we will pass your request on and act on their instruction.
You may complain to the UK Information Commissioner's Office (ico.org.uk) if you are unhappy with how we have handled your data.
Children
The service is for businesses and vehicle owners; it is not directed at children and we do not knowingly collect their data.
Changes
We will update this page when our practices change and revise the date above. Material changes affecting our customers will be notified by email.
Contact
Boostwerkz — admin@boostwerkz.com. We are based in the United Kingdom.