Last updated: 24 August 2026
This notice explains what personal data we collect when you use airforce-sus.co.uk, why we collect it, and what rights you have over it.
Who we are
AirForce Suspension UK is a trading name of INPUT IT LTD, company number 04812979, registered at Input IT Ltd, Unit 10/6 Pickup Storage, Grangefield Road, Pudsey, LS28 6JR, United Kingdom. We are the data controller for the personal data described here. You can contact us about anything in this notice at [email protected].
What we collect
When you place an order: your name, billing and delivery addresses, email address, phone number, vehicle details where you give them, and details of what you bought. We do not see or store your full card number; see Payments below.
When you contact us: your name, contact details, the content of your message and any attachments, including photographs of your vehicle.
When you create an account: the details above plus your login credentials, stored hashed.
When you apply for a trade account: your business name, registration and VAT numbers, and the details of your contact person.
When you browse the site: technical data such as your IP address, browser type, pages visited and referring site, collected through server logs and, with your consent, analytics cookies.
Why we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR article 6) |
|---|---|
| Taking and fulfilling your order, delivering goods, handling returns and warranty claims | Performance of a contract |
| Answering your enquiries and giving fitment advice | Performance of a contract, or our legitimate interest in responding to you |
| Keeping accounting and tax records | Legal obligation |
| Preventing fraud and securing the site | Legitimate interest |
| Sending you service messages about your order | Performance of a contract |
| Sending marketing emails | Consent, which you can withdraw at any time using the unsubscribe link |
| Analytics cookies | Consent |
We do not sell your data and we do not use automated decision-making that has a legal or similarly significant effect on you.
Payments
Card and other payments are processed by Stripe Payments Europe Ltd and Stripe Payments UK Ltd. Your payment details go directly to Stripe over an encrypted connection; we receive a confirmation and the last four digits of your card. Stripe acts as an independent controller for the data it needs to process payments and prevent fraud. Its privacy policy is at stripe.com/gb/privacy.
Who else sees your data
We share personal data only where needed to run the business:
- Couriers and freight forwarders, to deliver your order. For kits shipped direct from the factory, your name and delivery address are passed to the manufacturer, the manufacturer, and its freight agent so the consignment can be labelled and cleared through customs.
- The manufacturer, for warranty claims that require a factory return.
- Hosting, email and IT providers who process data on our instructions under contract.
- Accountants, lawyers and insurers where needed.
- HMRC, the police or regulators where the law requires.
Where data leaves the UK for order fulfilment, we rely on the UK International Data Transfer Agreement or another safeguard recognised under UK GDPR, and we send only what is needed to ship the goods.
Cookies
The site uses strictly necessary cookies to run the basket, checkout and your login. These do not need consent. Analytics and any marketing cookies are set only if you accept them in the consent banner, and you can change your choice at any time from the cookie settings link in the footer.
How long we keep it
- Order, invoice and payment records: six years after the end of the tax year in which the order was placed, as HMRC requires.
- Warranty records: for the life of the warranty plus one year.
- Enquiries that do not lead to an order: two years.
- Account data: until you ask us to close the account, then deleted within 30 days except for records we must keep.
- Marketing consent: until you withdraw it.
- Server logs: 90 days.
Security
Data is held on servers in the UK, encrypted in transit and at rest, with access limited to people who need it. No system is perfectly secure; if we become aware of a breach that puts your rights at risk we will tell you and the ICO as the law requires.
Your rights
Under UK GDPR you can ask us to:
- give you a copy of the personal data we hold about you;
- correct data that is wrong;
- delete your data, where we do not have to keep it;
- restrict or object to how we use it;
- give you your data in a portable format;
- withdraw consent, where consent is the basis we rely on.
Email [email protected] to make a request. We respond within one month. We may ask you to confirm your identity first.
Complaints
If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes
We will post any changes to this notice here and update the date at the top. Significant changes will be flagged on the site.