Privacy Policy

Only what we need to sell you a part, build a tune, or answer your message:

• Order details, your name, email address, phone number if you give one, shipping address for physical items, the items you bought and the options you chose.
• Tune details, for ECU tune orders we ask for your ECU Calibration ID, EK1 serial number and the last six digits of your VIN, because the tune file is built for that exact vehicle and ECU calibration.
• Messages, whatever you type into the contact, booking or payment-request forms.
• Payment confirmation, the reference for your payment and whether it succeeded. Card numbers never reach us (see below).
• Server logs, your IP address is used briefly to rate-limit form spam.

Payments are processed by Stripe. Your card details are entered into Stripe's payment form and go straight to Stripe. SleepyTuned never receives or stores your full card number, and we cannot charge your card again without you starting a new order. Stripe's own privacy terms apply to the data it collects.

• We do not sell, rent or trade your information.
• We do not run advertising trackers, pixels or analytics scripts on this site.
• We do not send marketing email unless you tick the opt-in box at checkout, and every marketing email can be unsubscribed from.

• Your cart is stored in your own browser (local storage), not on our server. Clearing your browser data empties it.
• If you arrive from a link containing a discount code, we store that code in a cookie so it survives until checkout.
• Staff logging into the admin area get a session cookie. That's it, there are no advertising cookies on this site.

We use a small number of service providers, each handling only what their job needs:

• Stripe, payment processing.
• MongoDB Atlas, the database holding orders, customer records and form messages.
• Mailgun, sending order confirmations and forwarding your form messages to us.
• Vercel, hosting the website itself.

If you order a product that is fulfilled with a partner tuner, the details needed to build and deliver your tune are shared with that partner and nothing more.

Order records are kept as business and tax records. Form messages are kept while we deal with them and afterwards for reference, so we can pick up the history if you come back. You can ask us to delete anything we are not legally required to keep.

Use our contact form to ask for a copy of what we hold about you, to correct it, or to have it deleted. Depending on where you live you may have additional rights over your data; tell us what you need and we will work with you. We may need to keep order and payment records required for accounting.

The site is served over HTTPS, card data is handled entirely by Stripe, and the admin area is password-protected and restricted to SleepyTuned staff. No system is perfectly secure, so please tell us immediately if you think something is wrong with your order or account details.

This site sells vehicle performance parts and is not intended for children under 16.

If this policy changes we will update this page. Questions about privacy go to our contact form.