Privacy policy

Last updated: 7 March 2026

This Privacy Policy explains how Calfab Limited trading as Vanbitious collects, uses and protects personal data when you use our website, purchase goods, book services or contact us.

This policy applies to all data collected through:

• our website
• our online store
• email communications
• telephone enquiries
• workshop bookings and services

This policy should be read together with our:

• Terms and Conditions
• Conversion Warranty Policy
• Return and Refund Policy

⸻

1. Data controller

The data controller responsible for your personal information is:

Calfab Limited trading as Vanbitious
Company number: SC702491

Registered address
Unit 8
109 Urquhart Road
Aberdeen
AB24 5NH

Email: hello@vanbitious.co.uk

⸻

2. Personal data we collect

We may collect and process the following personal information:

Identity information

• name
• billing details
• delivery address

Contact information

• email address
• telephone number

Vehicle information

Where services are booked we may collect:

• vehicle registration
• vehicle model
• vehicle specifications
• vehicle photographs or documents provided by you

Order and transaction information

• purchase history
• service bookings
• payment records
• invoices and order confirmations

Technical data

When visiting our website we may collect:

• IP address
• browser type
• device information
• pages visited
• website usage information

Communications

We may retain:

• emails sent to us
• enquiry messages
• warranty claim information
• photographs or documents submitted

⸻

3. How we use your data

We use personal data to:

• process orders and payments
• deliver products and services
• manage workshop bookings
• respond to enquiries
• handle warranty claims
• provide customer support
• comply with legal obligations
• detect fraud and protect our business

Where you have opted in, we may also send:

• marketing emails
• product updates
• service announcements

You can unsubscribe from marketing communications at any time.

⸻

4. Lawful basis for processing

We process personal data under the following lawful bases:

Contract

To fulfil orders, bookings and services you have requested.

Legal obligation

To comply with tax, accounting and regulatory requirements.

Legitimate interest

For customer service, fraud prevention and improving our services.

Consent

Where you have opted in to receive marketing communications.

You may withdraw consent at any time.

⸻

5. Payment processing

Payments made through our website may be processed by trusted payment providers including:

• Shopify Payments
• Stripe
• other secure payment processors used by Shopify

Vanbitious does not store full card details.

Payment information is handled securely by the payment provider in accordance with their own privacy policies.

⸻

6. Third party service providers

We may share personal data with trusted service providers where necessary to operate our business.

These may include:

Payment processors

• Shopify Payments
• Stripe

Delivery providers

• DPD
• Royal Mail
• other courier services where applicable

Technical providers

• Shopify (website and ecommerce platform)
• IT and hosting providers

Professional advisers

• accountants
• legal advisers
• regulators or authorities where legally required

We only share data where necessary and require service providers to protect your information.

⸻

7. Data retention

We retain personal data only for as long as necessary.

Typical retention periods include:

Order and invoice records: 6 years
Warranty and support correspondence: up to 24 months
Marketing records: until you unsubscribe

Where legal obligations require longer retention, we may retain information accordingly.

⸻

8. Data security

We take reasonable technical and organisational measures to protect personal data.

These may include:

• secure hosting
• restricted access to business systems
• encrypted payment processing
• password protected systems

However, no internet transmission is completely secure and we cannot guarantee absolute security.

⸻

9. Cookies

Our website uses cookies to improve functionality and analyse website performance.

Cookies may include:

Essential cookies

Required for core website functionality such as shopping cart and checkout.

Analytical cookies

Used to understand website usage and improve user experience.

You can control cookies through:

• your browser settings
• the cookie banner on our website

⸻

10. International data transfers

Where services such as Shopify store data outside the UK, appropriate safeguards are used to ensure personal data remains protected.

⸻

11. Your rights

Under UK data protection law you have the right to:

• request access to your personal data
• request correction of inaccurate data
• request deletion of your data
• request restriction of processing
• object to processing in certain circumstances
• request transfer of your data to another provider

To exercise these rights please contact:

hello@vanbitious.co.uk

⸻

12. Complaints

If you have concerns about how your data is handled you may contact us directly.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Website:
https://www.ico.org.uk

⸻

13. Policy updates

We may update this Privacy Policy from time to time.

The most recent version will always be available on our website.