Privacy & cookie policy

TyreStretch.com ("we", "us", "the site") respects your privacy and is committed to protecting the personal data we process. This policy explains what data we collect, why we collect it, how long we keep it, how we protect it, and the rights you have over it.

Who we are

TyreStretch.com is a photo gallery showcasing tyre and rim fitment examples. The data controller for the purposes of applicable data protection law (including the UK GDPR and EU GDPR) is the operator of TyreStretch.com. You can contact us at any time at [email protected].

What data we collect

You do not need to create an account or provide personal information to browse the site. We collect only limited information:

• Technical / usage data: IP address, browser type and version, device type, referring pages, pages visited and time of access. This is collected automatically when you visit the site.
• Cookies and similar technologies: used for basic analytics, advertising and to remember your cookie-consent choice. See "Cookies" below.
• Contact data: if you email us, we receive your email address and the contents of your message.

We do not knowingly collect special-category data, and the site is not directed at children under 13.

Why we collect it (legal basis)

We process technical and usage data on the basis of our legitimate interest in understanding how the site is used, keeping it secure, and improving its performance and content. Cookies that are not strictly necessary (analytics and advertising) are set only on the basis of your consent, which you give via the cookie banner and can withdraw at any time.

Third-party services

We use third-party services that may process data on our behalf or in accordance with their own privacy policies, including:

• Google Analytics — usage measurement (privacy policy).
• Google AdSense — advertising (privacy policy).
• Cloudflare — content delivery, security and DDoS protection (privacy policy).
• Meta / Instagram and Pinterest — when we share gallery images to our social media accounts via their official APIs. These platforms process data under their own privacy policies.

These providers may transfer and store data outside your country. Where data is transferred internationally, it is protected by appropriate safeguards such as the providers' standard contractual clauses.

Data retention

We keep personal data only for as long as necessary for the purposes set out above:

• Server access logs (including IP addresses) are retained for up to 90 days for security and troubleshooting, then deleted or anonymised.
• Analytics data is retained according to our Google Analytics configuration, up to a maximum of 14 months, after which it is automatically deleted.
• Email correspondence is kept for up to 24 months after our last contact, unless a longer period is required to comply with a legal obligation.
• Cookie-consent preferences are stored in your browser until they expire or you clear them.

When data is no longer needed, it is securely deleted or irreversibly anonymised.

How we protect your data (security)

We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction, including:

• All traffic to the site is encrypted in transit using HTTPS/TLS.
• The site sits behind Cloudflare, which provides DDoS mitigation, a web application firewall and edge security.
• Access to our servers and databases is restricted to authorised personnel and protected by key-based authentication.
• API credentials and other secrets are stored securely and are never exposed publicly.
• We limit the personal data we collect to the minimum required (data minimisation).

No method of transmission or storage is completely secure, but we work to protect your data and to keep our measures under review. In the event of a personal data breach that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and affected individuals as required by law.

Your rights

Depending on your location, you have rights over your personal data, which may include the right to access, correct, delete or restrict the processing of your data, to object to processing, to data portability, and to withdraw consent. To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office, ico.org.uk).

Cookies

We use cookies and similar technologies for basic analytics and advertising. When you first visit the site you are asked to consent to non-essential cookies. You can withdraw consent at any time by clearing cookies in your browser or adjusting your browser settings to refuse cookies. Blocking cookies may affect some features of the site.

Selling of data

We do not sell personal data to third parties.

Contact and changes

If you have any questions about this policy or how we handle your data, contact us at [email protected]. We may update this policy from time to time; any changes will be posted on this page with a revised "last updated" date.