Privacy Policy

Only what we need to sell you a part, build a tune, or answer your message:

• Order details, your name, email address, phone number if you give one, shipping address for physical items, the items you bought and the options you chose.
• Tune details, for ECU tune orders we ask for your ECU Calibration ID, EK1 serial number and the last six digits of your VIN, because the tune file is built for that exact vehicle and ECU calibration.
• Messages, whatever you type into the contact, booking or payment-request forms.
• Payment confirmation, the reference for your payment and whether it succeeded. Card numbers never reach us (see below).
• Visits, the pages you view here and what brought you (the referring site, campaign tags on the link, and the click id if you came from one of our Meta ads), with your device type and browser, recorded against a random visit id rather than your name.
• Server logs, your IP address is used briefly to rate-limit form spam. When you place an order, your IP address and browser user agent are kept with it.

Payments are processed by Stripe. Your card details are entered into Stripe's payment form and go straight to Stripe. SleepyTuned never receives or stores your full card number, and we cannot charge your card again without you starting a new order. Stripe's own privacy terms apply to the data it collects.

• We do not sell, rent or trade your information.
• We do not load third-party advertising pixels or analytics scripts on this site. Visit tracking is our own and stays in our own database.
• We do not send marketing email unless you tick the opt-in box at checkout, and every marketing email can be unsubscribed from.

• Your cart is stored in your own browser (local storage), not on our server. Clearing your browser data empties it.
• If you arrive from a link containing a discount code, we store that code in a cookie so it survives until checkout.
• Every visitor gets a random visit id in a cookie, and if you arrive from an ad or a tagged link, where you came from (campaign tags and the ad click id) is kept in cookies for up to 90 days, so a purchase can be credited to the ad or post that led to it.
• Staff logging into the admin area get a session cookie.

We use a small number of service providers, each handling only what their job needs:

• Stripe, payment processing.
• MongoDB Atlas, the database holding orders, customer records and form messages.
• Mailgun, sending order confirmations and forwarding your form messages to us.
• Vercel, hosting the website itself.
• Meta, when you start a checkout and when you pay, we tell Meta so it can report which of our ads led to sales. Your email and phone number are hashed (one-way scrambled) before they are sent, along with the order value, your IP address, browser user agent and the ad click id if you came from one of our ads.

If you order a product that is fulfilled with a partner tuner, the details needed to build and deliver your tune are shared with that partner and nothing more.

Order records are kept as business and tax records. Form messages are kept while we deal with them and afterwards for reference, so we can pick up the history if you come back. You can ask us to delete anything we are not legally required to keep.

Use our contact form to ask for a copy of what we hold about you, to correct it, or to have it deleted. Depending on where you live you may have additional rights over your data; tell us what you need and we will work with you. We may need to keep order and payment records required for accounting.

The site is served over HTTPS, card data is handled entirely by Stripe, and the admin area is password-protected and restricted to SleepyTuned staff. No system is perfectly secure, so please tell us immediately if you think something is wrong with your order or account details.

This site sells vehicle performance parts and is not intended for children under 16.

If this policy changes we will update this page. Questions about privacy go to our contact form.