Privacy Policy

This policy explains what personal data Ghost Protect Ltd collects, why we collect it, how we use it, and your rights under UK GDPR (the UK General Data Protection Regulation, as retained in UK law following Brexit).

1. Who We Are

Ghost Protect Ltd is the data controller for personal data collected through this website and our booking process. We are registered in England and Wales.

Contact: hello@ghostprotect.co.uk · 0800 000 0000

If you have any questions about how we handle your data, please contact us at the address above.

2. What Data We Collect

Data you provide to us

When you submit an enquiry or book an installation, we may collect:

• Your full name
• Email address
• Phone number
• Vehicle make, model, and year
• Your postcode or address for the installation
• Any additional information you include in your message

Data collected automatically

When you visit our website, certain data is collected automatically, including:

• Your IP address (anonymised where possible)
• Browser type and version
• Pages visited and time spent on each page
• The source that brought you to our site (e.g. Google search, social media)
• Device type (desktop, mobile, tablet)

This data is collected via cookies. See our Cookie Policy for full details.

3. How We Use Your Data

4. Third-Party Services

We use the following third-party services which may process your data. Each has its own privacy policy.

Google Analytics 4 (GA4)

We use Google Analytics 4 to understand how visitors use our website. Data is anonymised and aggregated. Google may transfer data internationally. Google Privacy Policy.

Google Ads

We use Google Ads to advertise our services in Google search results and across the Google Display Network. If you click one of our ads, Google sets a cookie to track whether your visit results in an enquiry. Google Privacy Policy.

Microsoft Advertising (Bing Ads)

We use Microsoft Advertising to show ads in Bing search results. Microsoft's Universal Event Tracking (UET) tag may place cookies on your device to measure conversions. Microsoft Privacy Statement.

Meta (Facebook and Instagram)

We use the Meta Pixel to measure the effectiveness of our Facebook and Instagram advertising and to build audience segments for retargeting. The Pixel may collect your IP address, browser type, and page interactions. Meta Privacy Policy.

Form processing

Enquiry form submissions may be processed by a third-party form service. Data is encrypted in transit and is not sold or shared with any party other than as described in this policy.

5. Data Sharing

We do not sell your personal data. We share data only:

• With our engineers to fulfil your installation booking;
• With our form processing and CRM service providers, under data processing agreements;
• With the advertising and analytics platforms listed above, where you have consented to cookies; and
• Where required by law or a court order.

6. Data Retention

We retain your enquiry and booking data for up to 3 years after your last interaction with us, to allow us to respond to warranty queries and legal claims. Financial records are retained for 7 years in line with HMRC requirements.

Analytics and advertising cookie data is retained for periods set by the respective third-party platforms (typically 13–26 months).

7. International Transfers

Some of our third-party providers (including Google and Meta) are based in the United States. Where data is transferred outside the UK, it is protected by adequacy decisions, Standard Contractual Clauses, or equivalent mechanisms approved under UK GDPR.

8. Your Rights

Under UK GDPR, you have the following rights:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate data.
• Right to erasure — ask us to delete your data (subject to legal obligations).
• Right to restrict processing — ask us to pause processing your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests or for direct marketing.
• Rights related to automated decision-making — we do not make automated decisions that significantly affect you.

To exercise any of these rights, email us at hello@ghostprotect.co.uk. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Cookies

We use cookies for essential site functionality, analytics, and advertising. For full details, including how to manage your preferences, see our Cookie Policy.

10. Changes to This Policy

We may update this policy from time to time. The current version will always be published at this address. Significant changes will be communicated by a notice on our website.