Privacy Policy

ECOLUX CARS LTD, trading as Cabora(“we”, “us”), is the data controller for personal data processed through ecolcars.shop. We are registered at 8 Stoneyflatts Park, South Queensferry, EH30 9YL, United Kingdom. For any privacy request, email support@ecolcars.shop or call +44 7369000442.

We collect only what we need to run the store. Depending on how you use it, that includes:

• Order & shipping address data — name, email, phone, shipping address, city, postal code and country needed for order fulfilment and entered by you at checkout.
• Order fulfilment data — products, quantities, order value, delivery status, tracking events, returns, exchanges and refund history.
• Support & enquiry data — the name, email, phone, country and message you send through the contact or wholesale forms, including return or exchange requests.
• Membership data — the tier you choose and billing period; recurring billing is handled by Stripe.
• Payment & billing data — billing name, billing address, payment status and limited transaction details supplied by Stripe or PayPal. Stripe and PayPal process card or account credentials on their own systems; we never receive or store your full card number.
• Technical data — basic device, browser and usage information and strictly necessary cookies needed to run the cart and secure the admin area.

• Directly from you — when you create an order, provide a shipping address, join a membership, contact support, request a return or submit a wholesale enquiry.
• From payment providers — Stripe or PayPal sends us payment status, transaction references and limited billing details after you use its hosted payment flow.
• From delivery carriers — tracking, delivery, delay, loss and return-to-sender events used for order fulfilment and customer support.
• Automatically from your device — essential cookie, browser and security data needed to operate and protect the store.

• To fulfil your order and deliver it — performance of a contract, including sharing the shipping address with the selected carrier.
• To manage returns, exchanges and delivery support — performance of a contract and our legitimate interest in resolving customer issues.
• To answer support and wholesale enquiries — our legitimate interest in helping customers, or steps prior to a contract.
• To manage memberships and billing — performance of a contract.
• To keep abandoned-checkout details for follow-up — legitimate interest; you may object at any time.
• To secure the site and prevent fraud — legitimate interest and legal obligation.
• To meet accounting and tax duties — legal obligation.

Where we rely on consent (for example non-essential cookies), you can withdraw it at any time.

We do not sell your personal data. We share it only with processors that help us operate:

• Payment — Stripe or PayPal, according to the payment option selected, for checkout, membership billing where applicable, refunds and dispute handling. These providers process complete card or account credentials; we do not.
• Hosting & delivery of the site — Vercel.
• Database & lead storage — Supabase.
• Shipping carriers — the couriers responsible for order fulfilment receive the recipient name, shipping address, phone or email where required for delivery, and package details.
• Email — the provider we use to send order and support messages.

We may also disclose data where required by law or to protect our rights.

Some processors operate outside the UK and EEA. Where data is transferred internationally, we rely on appropriate safeguards such as UK/EU adequacy decisions or standard contractual clauses. We ship internationally where available, so your delivery details may be processed in the destination country to complete delivery.

• Order, shipping, fulfilment and billing records: kept as required by accounting, tax and consumer law, then deleted or anonymised.
• Support and enquiry messages: up to 24 months, then deleted or anonymised.
• Abandoned-checkout leads: up to 24 months, or until you ask us to erase them.
• Essential cookies: for the session or as noted in the Cookie Policy.

Depending on where you live, you have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• erase data (“right to be forgotten”) where applicable;
• restrict or object to processing, including direct-marketing follow-up;
• data portability;
• withdraw consent at any time;
• (California residents) know, delete and correct personal information, and not be discriminated against for exercising these rights.

To exercise any right, email support@ecolcars.shop. We respond within the time limits set by applicable law.

We do not sell or share your personal information for cross-context behavioural advertising, and we do not exchange it for money. California residents therefore have nothing to opt out of in this respect, but may still exercise the CCPA rights above by contacting support@ecolcars.shop.

We use strictly necessary cookies to run the shopping cart and secure the admin area, plus limited analytics to understand usage. You can control non-essential cookies through your browser and our Cookie Policy.

We do not make decisions producing legal effects about you by automated means alone. Our store is not directed at children: it is not for use by anyone under 13, and customers aged 13–17 must have a parent or guardian consent and complete any purchase. We do not knowingly collect data from children under 13; if you believe we have, contact us and we will delete it.

We use encryption in transit, access controls and reputable processors. Payment card data is handled entirely by Stripe's PCI-compliant systems. No method of transmission is completely secure, but we take reasonable steps to protect your information and to notify you and regulators where the law requires.

Contact us first at support@ecolcars.shopand we will try to resolve your concern. You also have the right to complain to your data protection authority — in the UK, the Information Commissioner's Office (ICO). This policy is governed by the laws of England and Wales. Last updated 13 July 2026.