GDPR

NNK Overseas Limited, trading as NNK Racing ("we", "us", "our"), is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website at www.nnkracing.com or contact us directly.

We are a data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have questions about this policy or how we handle your data, please contact us using the details at the bottom of this page.

1. Who We Are

Company name: NNK Overseas Limited (trading as NNK Racing)
‍Registered address: United Kingdom
‍Contact email: info@nnkracing.com

2. What Data We Collect

We may collect the following categories of personal data:

Identity data: first name, last name
Contact data: email address, phone number, postal address
Transaction data: details of products you enquire about or purchase
Communication data: messages and enquiries you send us, including NOS parts requests
Technical data: IP address, browser type, device information, pages visited, referring URLs
Usage data: how you interact with our website
Marketing preferences: whether you have opted in to receive communications from us

We do not collect any special category data (such as health, biometric, or financial data beyond what is required to process a transaction).

3. How We Collect Your Data

We collect data through the following means:

When you submit an enquiry, contact form, or NOS parts request on our website
When you email or call us directly
When you make a purchase through our website (via our e-commerce provider)
Automatically through cookies and similar tracking technologies when you browse our website
Through third-party platforms such as Instagram, Facebook, or eBay if you contact us there

4. How We Use Your Data

We use your personal data for the following purposes:

To respond to your enquiries and provide customer service
To process and fulfil orders and purchases
To source NOS parts on your behalf when you submit a request
To send transactional emails related to your orders or enquiries
To send marketing communications where you have given us your consent
To improve our website and understand how visitors use it
To comply with legal obligations

5. Legal Basis for Processing

We rely on the following legal bases to process your personal data:

Contractual necessity: to process orders and fulfil purchases
Legitimate interests: to respond to enquiries, improve our services, and conduct direct marketing to existing customers
Consent: for marketing communications where you have opted in, and for non-essential cookies
Legal obligation: where we are required to process data to comply with applicable law

6. Cookies

Our website uses cookies to function correctly and to help us understand how visitors use the site. Cookies are small text files stored on your device.

We use the following types of cookies:

Strictly necessary cookies: required for the website to operate. These cannot be disabled.
Analytics cookies: help us understand visitor behaviour so we can improve the website (e.g. page views, traffic sources). We use these only with your consent.
Marketing cookies: used to deliver relevant advertisements on third-party platforms. We use these only with your consent.

You can manage your cookie preferences at any time through your browser settings or our cookie consent banner.

7. Who We Share Your Data With

We do not sell your personal data. We may share it with the following third parties where necessary:

Shopify / Shopyflow: our e-commerce and order management platform
Webflow: our website hosting and form submission platform
Email service providers: to send transactional and marketing emails
Couriers and logistics providers: to fulfil and deliver orders
Legal and regulatory authorities: where required by law

All third-party processors are contractually obligated to handle your data securely and in accordance with applicable data protection law.

8. International Data Transfers

Some of our third-party service providers are based outside the UK or European Economic Area (EEA). Where we transfer your data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO) or equivalent mechanisms.