The short version
- We collect only what we need to deliver your file and keep the shop safe: your e-mail address, your order details and some technical data.
- Card details are handled by Stripe. We never see your full card number.
- These pages set no advertising or analytics cookies, and Quick buy sends no marketing e-mails.
- Delivered files are deleted after 7 days; unpaid checkouts after 30 days.
- You can ask to see, correct or delete your data at [email protected].
This summary is for convenience. The full policy below applies.
1.Who we are
The controller responsible for your personal data is:
85 Great Portland Street, First Floor, London, W1W 7LT, United Kingdom
For any privacy question or request, e-mail [email protected] (please write “Privacy” in the subject line). You can also reach us on Telegram at @qwertyworkz, but please do not send sensitive information there.
2.What this policy covers
This policy covers Quick buy (buying an original ECU file by card without registration), your order page and file downloads, the site chat and support for these, on auto-remap.com/original-files.
- The rest of auto-remap.com is covered by the auto-remap.com privacy policy.
- Accounts and purchases made with a file-service account at fs.auto-remap.com are governed by the terms published there and the privacy information published there.
3.Data we collect
When you buy with Quick buy
- Your e-mail address (and any corrected address you give us later).
- Order details: order number, the file you bought, price, order status, and the times of payment and delivery.
- Your IP address, your country (estimated from your IP address) and your browser’s user agent (a short text describing your browser and device), recorded at checkout.
- A record of your consent: the statements you ticked at checkout, when you ticked them and the version of the Terms of Service you accepted.
- The secret link to your order page. We store only a hashed (one-way scrambled) form of it, so the link cannot be rebuilt from our database.
Your e-mail address is needed to deliver your file. Without it we cannot accept your order.
Payment data
You enter your card details directly into the payment form of our payment provider, Stripe. We never receive or store your full card number or security code. Stripe may also ask you for details such as the cardholder name or billing country. From Stripe we keep only the payment status and amount, the card brand, the last four digits of the card, the country where the card was issued and the result of the 3-D Secure check. Stripe also processes your payment data as an independent controller, for example to prevent fraud and to meet its legal obligations — see Stripe’s privacy policy.
Delivery records
When we e-mailed you and whether the e-mail was sent, and each download of your file, with the time and the IP address it was downloaded from.
Support and site chat
- If you e-mail us: your e-mail address and the content of your messages.
- If you use the site chat: your messages, any contact details you choose to leave, your IP address, your country and the page you wrote from. Chat messages are translated automatically with Google Translate and forwarded to our staff via Telegram.
Server and security logs
When you visit these pages, our servers and Cloudflare record technical data such as your IP address, the time, the page requested and your browser’s user agent, to keep the site secure and working.
4.Why we use it and our legal bases
We use your data only for the purposes below. Our legal bases are those of the UK GDPR and, where it applies, the EU GDPR.
- To take and process your order, obtain and deliver your file, send you e-mails about your order and help you with it. Legal basis: performance of our contract with you (Art. 6(1)(b)), including steps you ask for before buying, such as questions in the chat.
- To keep accounting and tax records and to respond to lawful requests from authorities. Legal basis: legal obligation (Art. 6(1)(c)).
- To prevent fraud and abuse (for example, limits on the number of orders per IP address or e-mail address, and refusing disposable mailboxes), to keep our services secure, and to establish, exercise or defend legal claims, including payment disputes and proof of the statements you accepted at checkout. Legal basis: our legitimate interests in running a safe and reliable shop and protecting our customers and ourselves from fraud (Art. 6(1)(f)). You can object to this — see section 9.
- To answer questions you send us by e-mail or chat that are not about an order. Legal basis: our legitimate interest in responding to enquiries (Art. 6(1)(f)).
We do not use your data for marketing: Quick buy sends only e-mails about your order. We do not sell your personal data.
We do not make decisions about you that have legal or similarly significant effects based solely on automated processing. Stripe may automatically decline a payment it considers high-risk; if you think this happened by mistake, contact us.
5.Who receives your data
We share your data only as far as needed for the purposes above:
- Stripe — processes your payment (and acts as an independent controller for its own fraud prevention and legal obligations).
- Our e-mail provider (Google Workspace and/or SendPulse) — sends our e-mails to you and hosts our support mailbox.
- Cloudflare — content delivery and security. Every request to these pages passes through Cloudflare, which sees your IP address and the request.
- Our hosting providers — run the servers where the website and the order database are stored.
- Telegram and Google Translate — only for the site chat and staff notifications. When an order is paid or needs attention, our staff receive a Telegram notification with the order number, the file and a masked form of your e-mail address (for example j***@gmail.com), never the full address. Chat messages are translated with Google Translate and forwarded to our staff via Telegram.
- Professional advisers and authorities — accountants, lawyers, tax authorities, courts or police, where this is required by law or needed to protect our rights.
Our file supplier does not receive your personal data: we request files using the file reference only.
6.International transfers
Some of the providers listed above (for example Stripe, Google, Cloudflare and Telegram) process data outside the UK and the European Economic Area, including in the United States. Where the destination country does not have an adequacy decision (in the UK, adequacy regulations), we rely on appropriate safeguards: the European Commission’s standard contractual clauses together with the UK International Data Transfer Addendum, or the provider’s certification under the EU-US Data Privacy Framework and its UK Extension where available. You can ask us for more information about these safeguards.
7.How long we keep your data
- Checkouts that were never paid (abandoned or expired): deleted 30 days after they were started.
- IP address and browser user agent: removed from order records 18 months after the order.
- Delivered files: deleted from our servers 7 days after delivery.
- Order and invoice records (including your e-mail address, the order details, payment references and the record of your consent): kept for as long as tax and accounting law requires — generally 6 years.
- Chat conversations: 12 months.
- Support e-mails and server logs: only as long as needed to deal with your request or to keep the site secure.
Stripe keeps payment data according to its own privacy policy.
8.Security
All pages are served over an encrypted connection (HTTPS). Card details are handled only by Stripe. Order page links are stored only in hashed form, download links are signed and expire, and access to order data is limited to the staff who need it to deliver and support your order.
9.Your rights
Under the UK GDPR and the EU GDPR you have the right to:
- access the personal data we hold about you and get a copy of it;
- have inaccurate data corrected;
- have your data erased;
- restrict how we use your data;
- object to our use of your data where we rely on legitimate interests;
- receive the data you gave us in a portable format (data portability);
- withdraw your consent at any time, where we rely on consent.
To use these rights, e-mail [email protected], ideally from the address you used for your order so that we can confirm it is you. We reply within one month. Some data we must keep by law (for example accounting records), so we cannot always erase everything straight away.
If you are unhappy with how we handle your data, please tell us first so we can try to put it right. You also have the right to complain to a supervisory authority: in the UK, the Information Commissioner’s Office (ico.org.uk); in the EU, the data protection authority of the country where you live or work (list of authorities).
11.Children
Quick buy and the original-files pages are not directed at children under 18, and we do not knowingly collect personal data from them.
12.Changes to this policy
We may update this policy, for example when the law or our services change. The version date at the top of this page shows when it was last changed.
See also our Terms of Service.