PRECISION REMAPS UK · PORTAL INFORMATION

Privacy policy

Version 2026-10-02.2

This portal is operated by Precision Remaps UK. Contact admin@precisionremapsuk.com.

Information we use

The owner supplies each account’s name, business, email, phone and postal address. A profile can be left blank. We also store a username, a salted password hash, hashed session and recovery credentials, account permissions and creation date. We never store a readable account password. Billing uses Stripe customer and subscription identifiers, payment status, paid-through date and terms acceptance. Card details are entered directly into Stripe and are not stored by this portal.

Why we use it

We use account and payment information to provide the service and administer subscriptions under our contract with you. Security controls, access restrictions and abuse prevention support our legitimate interest in protecting accounts and the service. Any legally required billing records support our legal obligations. Postal and contact details appear only in your own profile and copied job checks and documents you choose to export, and in the owner’s user management view.

A username and secure password are required for access. Contact and postal fields are optional; email reset requires a valid account email. Unified search terms are sent to the portal to query only authorised records; no search history is saved by the application. Unsaved form drafts remain in the current browser page. Choosing Save to account stores customer information, job sheets, status history and invoices in the hosting database, restricted to your workshop and authorised staff roles. Workshop owners can provision individual staff logins. Technicians access jobs and private job files; managers also access customer editing, quotes and invoices. Staff access can be disabled and existing sessions revoked. The owner’s subscription report shows member identities and billing states, not your private customer and job records. Favourites store the exact ECU tool variant selected for your workshop. Personal tool selections and support email preferences are stored against your own login. Private job files are stored with filenames, category, version/read reference, upload identity, time and SHA-256 checksum. Activity history attributes record changes to the signed-in staff account. Copying a job check places it on your device’s clipboard under your control. Job sheets and customer invoices are generated in your browser. Downloaded PDFs and editable JSON record files are saved to your device under your control; downloaded files are separate from any record you choose to save to your account. Keep records securely, retain them only as needed and share them with the intended recipient. Importing a saved record reads it into the current page.

Onboarding and coverage corrections

Your setup step, review acknowledgements, skipped steps and completion date are saved against your own login. The guide uses your existing profile and tool preferences, and checks only workshop records permitted by your role. Private coverage corrections store the exact catalogue reference, your observations, tool and hardware/software details, evidence links, files and replies. Only the submitting login and the portal owner can view these reports; other workshop staff cannot view them. The owner may publish a separate reviewed catalogue advisory with a shareable evidence link and source date. Private submission text, attachments and member profile details are not copied automatically into that advisory. Remove customer names, addresses, VINs, passwords and other unnecessary personal information before submitting evidence. Contact support to request report, evidence or onboarding-data access or deletion; records remain until deleted or reviewed for retention and no automatic deletion period is configured.

Providers and recovery emails

OpenAI Sites and its Cloudflare hosting/database infrastructure provide hosting, database storage and private object storage for support and coverage attachments and job files. Stripe provides membership checkout and billing management when configured. Workshop job deposits and balances use the workshop’s own Stripe connected account when onboarded. Stripe collects its account verification and bank details directly; the portal stores connected-account and checkout identifiers, invoice references, amounts, payment/refund states and expiring payment-link credentials. Customer payment links expose the selected invoice summary to anyone holding the complete link for up to 14 days, unless withdrawn or invalidated by an invoice change. Resend delivers password-reset, opted-in support alerts and approved customer service emails only when a verified sender is connected. Customer service emails require approved workshop rules and enabled customer recipients; their recipient, content and delivery state are saved in the workshop delivery log. A reset email contains a time-limited link and is sent to the address supplied for that account. DVLA registration lookup, when connected, sends the registration number you choose to look up to the Vehicle Enquiry Service and returns basic vehicle details. It does not identify the exact ECU or model. Providers may process information internationally. Contact us for the applicable processing arrangements and transfer safeguards; we do not promise UK-only storage. Support buttons open email or WhatsApp drafts for you to review and send. Sending a message or sharing a PDF passes the information you choose to your selected app and recipient. Portal tickets, messages and attachments can be accessed by the submitting member and the portal owner for support. Support correspondence received by Precision Remaps UK is used to answer and record your enquiry and retained as needed for support, complaints or legal obligations. Email and WhatsApp have their own privacy practices. External manufacturer links have their own privacy practices.

Customer progress, reports and exports

Workshop users choose customer-facing updates, requirements, return tracking and signed completion reports for a job. Secure progress links are read-only, last 7, 30 or 90 days, and can be withdrawn or replaced. Anyone holding the complete link can view the selected information; send it only to the intended customer. Internal job notes, costs and ECU memory files are not exposed through the progress page. Service templates, donor inventory and completion reports are stored within the workshop account. Label photo recognition runs on your device using site-hosted recognition files; photos are not sent to an external recognition provider or automatically saved. Confirmed fields are stored only when you choose to save an intake or inventory record. Full workshop ZIP exports contain customer information and saved documents. The downloading workshop is responsible for storing and sharing these files securely.

Workshop desk and restore

Saved workshop diary bookings, technician allocation, time entries, costs, returning-fault investigations, technical cases and file-check snapshots are restricted to the workshop and authorised staff roles. Financial views are restricted to workshop owners and managers. Personal start-page and dashboard choices are stored against each login. Unified search respects these same access rules. A backup restore preview records proposed changes before confirmation and expires after one hour. Restores do not import account passwords, staff identities, payment connections, active customer links or customer messaging preferences. Workshop users review technical evidence and confirm customer service recipients before using these features.

Retention and protection

Workshop files, quotes, approval decisions, staff records and activity logs remain while needed for the workshop account and are reviewed with account deletion requests. Approval credentials expire after seven days or are removed when withdrawn or used. Files can be downloaded and removed by workshop managers. Profiles remain while the account is needed, including necessary subscription administration, and are reviewed for deletion when access ends or you request deletion. Legal, dispute and accounting needs may require some records to be retained longer. A disabled account is not automatically deleted. Saved workshop records, favourites and support tickets remain until deleted or reviewed for retention; no fixed automatic deletion period is configured. Members can download and delete unlinked customer, job and invoice records and remove favourites. Contact support for ticket or account data deletion, including attachments. Session credentials expire after eight hours, email reset links after 30 minutes, and recovery codes after use or replacement. Expired credentials are cleaned during account activity. Rate-limit records are cleaned after 24 hours during sign-in activity; billing event identifiers after 90 days during webhook processing. Hosting providers may retain operational security records under their own arrangements.

We use HTTPS, protected sessions, hashed credentials, access controls and request limits. Optional authenticator login stores its setup secret encrypted on the server and separate single-use backup code hashes. Enabling or changing authenticator protection revokes older sign-in sessions; password recovery does not disable authenticator protection. Users see only their own profile; the owner can manage account details. Keep recovery codes securely offline. Resetting a password signs out existing sessions and replaces older recovery credentials.

Device sessions and service checks

Your session list stores a simplified browser and operating-system label, sign-in time, recent activity time and expiry. It does not store raw browser identifiers, IP addresses or location for device management. Each login can view and revoke its own sessions after password confirmation. The owner service dashboard shows aggregate service states, payment and email counts, coverage-check results and recorded file sizes, without private customer content or account session identifiers. Explicit storage checks create and remove a small temporary test file and retain the check result and time until replaced by the next check.

Your choices and rights

Contact admin@precisionremapsuk.com to request access, corrections, deletion, restriction or portability where applicable. We may verify your identity before acting. You can object to processing based on legitimate interests. You can also raise a concern with the Information Commissioner’s Office. Subscription access is checked automatically against account and payment status; contact us if that check appears wrong. We do not use this portal for advertising profiles or marketing tracking.