Privacy Policy

Last updated: April 2026

1. Who we are

HyperBrake Motorsport ("we", "us") operates hyperbrake.com. Contact: [email protected]. This policy explains how we handle your personal data in accordance with the EU General Data Protection Regulation (GDPR).

2. Data we collect

• Contact form data: name, email, phone (optional), service interest, message content.
• Distributor applications: company name, VAT number, website, country, business details.
• Order tracking: tracking code, customer name, email, phone, order description, shipping details.
• Technical data: IP address, browser, pages visited, timestamps — via server logs.
• Cookies: essential session cookies and (if accepted) analytics/marketing cookies.

3. How we use your data

• Respond to inquiries and provide quotes.
• Process distributor applications.
• Fulfil and track orders.
• Improve the website and detect abuse.
• Comply with legal obligations (accounting, tax).

4. Legal basis (GDPR Art. 6)

We process your data on the basis of: your consent (cookies, marketing emails), contract performance (orders, quotes), legal obligation (invoicing, tax records), and our legitimate interests (security, fraud prevention).

5. Data retention

• Contact inquiries: up to 24 months, unless a commercial relationship develops.
• Orders & invoices: 10 years (legal requirement in Greece).
• Server logs: up to 90 days.

6. Data sharing

We do not sell your data. We share it only with:

• Shipping couriers (to deliver your order).
• Payment providers (to process transactions).
• Our hosting provider (cPanel/Apache).
• Authorities, where required by law.

7. Your rights under GDPR

You have the right to: access, rectify, erase, restrict processing, object, and data portability. To exercise any of these rights, email [email protected]. You may also lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).

8. Cookies

We use essential cookies (required for the site to function) and, with your consent, analytics and marketing cookies. Manage your preferences from the cookie banner at any time.

9. Security

We use TLS (HTTPS) for all traffic, hashed passwords, parameterized database queries, CSRF protection on forms, and rate-limited public endpoints. No system is 100% secure — please report suspected issues to [email protected].

10. Changes to this policy

We may update this policy; the "Last updated" date above reflects the latest revision. Significant changes will be announced on the homepage.