Privacy Policy

Last updated 26 October 2026 · DTW Engines Limited

        In short: we collect only what we need to sell and ship you a product, we do
        not sell your data, we run no advertising or analytics trackers on this site, and we never
        see or store your card number.      

1. Who we are

DTW Engines Limited, Unit 5 Stort Mill, Riverway, Harlow, Essex CM20 2SN, United Kingdom. For any privacy question, contact [email protected] or call +44 7451 259592.

2. What we collect

Order information. Your name, email address, phone number, billing address and delivery address, plus the items, prices and freight on your order.
Enquiries. If you use our contact form, the name, email, phone, delivery ZIP and message you submit.
Technical data. Standard web server logs (IP address, request time, page requested) and a session cookie that keeps your cart and, if you are staff, your admin session.

We do not collect special categories of personal data, and we do not knowingly collect information from anyone under 18.

3. Payment information

Card payments are processed by Stripe. Your card number, expiry and security code are entered on Stripe's own payment page and are never transmitted to or stored on our servers. We retain only Stripe's payment reference and the order total, so that we can match a payment to an order and process refunds.

Stripe acts as an independent data controller for payment data. See Stripe's privacy policy.

4. Why we use it

To take payment, ship your order, and provide the confirmation and support that follow.
To answer enquiries you send us, by form, email, phone or live chat.
To meet legal, tax and accounting obligations.
To keep the site secure, through rate limiting and abuse prevention.

5. Cookies and tracking

This site sets two first-party cookies:

A session cookie that remembers your cart and protects forms against cross-site request forgery. Strictly necessary; it expires when you close your browser.
An analytics cookie holding a random identifier, kept for twelve months, that lets us tell one visit apart from the next.

We load no third-party analytics, advertising or social media trackers. No pixels, no remarketing tags, no fingerprinting, and no data broker receives anything about you. The site runs no JavaScript at all, so nothing can be collected from your browser beyond what it sends with an ordinary page request.

Our own analytics run on our server and record, for each page you open: the time, the page, the page that referred you, your IP address, the country your request arrived from, your browser's user agent, and any product you view, search for, or add to your cart. It is kept for 90 days and then deleted automatically.

We use it for two things. To understand which products people are looking for, and so that when you telephone us about an order, the person who answers can see the item you were looking at instead of asking you to read out part numbers. It is never used to build an advertising profile, and it is never sold or shared.

If you would rather we did not keep this, email [email protected] and we will delete the records associated with your visits.

6. Who we share it with

We share personal information only with parties that are needed to complete your order:

Stripe, to take payment.
Freight carriers, who receive your name, delivery address and phone number so they can deliver and arrange an appointment.
Our email provider, to deliver order confirmations.
Authorities, where we are legally required to.

We do not sell or rent your personal information to anyone.

7. How long we keep it

Order records are kept for seven years to satisfy tax and accounting requirements. Contact enquiries are kept for up to two years. Server logs are kept for up to 90 days.

8. How we protect it

The site is served over HTTPS. Order records and enquiry logs are stored outside the public web directory with restricted file permissions. Administrative access is password protected and rate limited. We never store card numbers.

9. Your European & UK Statutory Rights (GDPR)

Under the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018, you possess comprehensive rights regarding your personal data:

Right of Access: Request a full copy of the personal information we maintain concerning your orders and account.
Right to Rectification: Request correction of inaccurate or incomplete contact and delivery details.
Right to Erasure ("Right to be Forgotten"): Request deletion of personal records where ongoing retention is not mandated by statutory European tax and accounting legislation.
Right to Restriction & Objection: Object to processing or request restriction of data handling.
Right to Lodge a Complaint: You have the right to submit a complaint to the Information Commissioner's Office (ICO) in the UK or your national European Data Protection Authority (DPA).

To exercise any of these statutory rights, email [email protected]. We respond within 30 days. We never sell personal data.

10. Changes

If we change this policy we will update the date at the top of this page. Material changes will be notified to customers with an active order by email.