Last updated: 13 September 2026
This notice explains how Rival Ltd, trading as Rival Performance (“Rival”, “we”, “us”), uses personal information when you visit our website, buy parts, contact us, use our vehicle finder, or book fitting, mechanical, diagnostic or tuning work.
Who is responsible for your information?
Rival Ltd is the controller responsible for the uses of personal information described in this notice, except where a provider acts independently as explained below.
Company number: 09981944, registered in England and Wales
VAT number: GB266447183
Registered office: 15 Riverside Studios, Amethyst Road, Newcastle Business Park, Newcastle upon Tyne, NE4 7YL, United Kingdom
Workshop and trading address: Unit 1 Mercia Way, Newcastle upon Tyne, NE15 6UG, United Kingdom
Email: support@rivalperformance.co.uk
Telephone: 0191 695 1011
The information we use
What we collect depends on your interaction with us. It can include:
- Contact and account details: your name, email, telephone number, addresses, account identifier and communication preferences.
- Orders and payments: the goods or services ordered, invoices, payment status, transaction references, delivery information, returns and refunds. Payment providers handle card processing. Transaction records and limited payment details are different from complete card credentials.
- Vehicle and workshop information: registration, VIN where needed, make, model, specification, mileage, modifications, reported symptoms, service history, fault codes, diagnostic logs, measurements, job notes, photographs and records of instructions or authorisations.
- Enquiries and claims: messages, fitment requests, correspondence, evidence supplied to investigate a product or workshop issue, and our response.
- Website information: IP address, browser and device information, page interactions, cookie identifiers and saved preferences, subject to the applicable consent choices.
- Premises CCTV: images of people and vehicles in monitored areas.
We do not record telephone calls. We may keep written notes of an enquiry, instructions or agreed work.
We receive information directly from you and, where relevant, from payment and delivery providers, suppliers handling an order or claim, and vehicle-data services used to identify a vehicle from its registration. We may receive information from another person acting on your behalf.
We need certain contact, vehicle and transaction information to answer a request, process an order or carry out an agreed job. If necessary information is not provided, we may be unable to provide that service. Marketing choices are optional.
Why we use information and our lawful bases
- Enquiries, orders and workshop work: to give requested advice or quotations, arrange bookings, identify the vehicle, perform agreed work, process payment, deliver goods and communicate about the job or order. We normally rely on taking steps at your request before a contract, or performing our contract with you.
- Customer support and remedies: to handle returns, faults, warranties and complaints. We rely on the contract, applicable legal obligations, and our legitimate interests in investigating issues and maintaining appropriate evidence.
- Accounting and compliance: to maintain records and meet tax, company and other legal duties. We rely on legal obligations.
- Security, fraud and disputes: to protect customers, staff, vehicles, premises and systems; investigate incidents; and establish or defend claims. We rely on our legitimate interests in these activities and legal obligations where applicable.
- Website operation: to provide checkout, account, security and requested preference features. We rely on the contract or legitimate interests as appropriate. Where optional device storage or tracking requires consent, we rely on that consent.
- Marketing and identifiable promotional photographs: as described below, using consent where required.
Vehicle finder and My Garage
When you enter a registration or choose a vehicle, we use that information to identify the vehicle and show relevant vehicle and fitment information. Registration lookup information may be sent to a vehicle-data provider for that purpose. Requests for help may also include the selected vehicle and the contact details you choose to provide.
Saved vehicle features use browser storage and, where you use an account-linked garage, information associated with your account. You can remove saved vehicles using the available garage controls. Removing a saved vehicle does not necessarily delete records we need for an existing order, workshop job or dispute.
CCTV and workshop images
We use CCTV at our premises for security, protection of people and property, and investigation of incidents. Our lawful basis is our legitimate interest in protecting staff, visitors, vehicles and the business. Relevant footage may be shared with insurers, professional advisers or law-enforcement bodies where necessary and lawful.
Photographs and videos used to document vehicle condition, a fault, diagnostic work or a completed job are used for the relevant service, support or dispute purpose. We also publish photographs of vehicles and workshop work, including dyno-cell photographs, and generally obscure number plates.
Promotional use is a separate purpose from carrying out your job. We will remove identifying details or ask your agreement before publishing material that still identifies you. Where we rely on your agreement, you can withdraw it by contacting us. We will stop future use and remove material from channels we control where applicable, but may be unable to remove copies independently shared by others. Contact us if you are concerned that a published photograph identifies you.
Email and SMS marketing
If you subscribe to our email or SMS marketing, we use the relevant contact details to send news, products, offers and workshop updates in line with your choices. Where we rely on an existing-customer exception rather than consent, we will use it only where its legal conditions are met: our own similar goods or services, details collected during a sale or genuine sale enquiry, and an opportunity to opt out both when collected and in every message.
You can object to direct marketing at any time. Use the unsubscribe or opt-out option in the message or contact support@rivalperformance.co.uk. We may retain a minimal suppression record to respect your choice. Essential order, appointment, safety and service messages are separate from marketing.
Shopify and other providers
Our online store is hosted by Shopify. Information about visits and purchases is shared with Shopify to run the store and provide its services. Shopify Network Intelligence is enabled: Shopify can also use information about interactions with our store together with interactions with other merchants and Shopify to provide enhanced services, including personalisation and advertising-related features. These uses are subject to applicable privacy choices and consent requirements.
Shopify and other providers may process information in other countries. Shopify’s independent uses are explained in its Consumer Privacy Policy. You can use the Shopify privacy portal to exercise relevant rights, withdraw consent or object to its processing.
Depending on the service, we also share necessary information with payment providers; couriers and direct-dispatch suppliers; manufacturers and warranty partners; booking, workshop, hosting and technical-system providers; email and SMS providers; and accountants, insurers or legal advisers. Authorities may receive information where required or permitted by law. Providers that determine their own purposes, such as payment or finance providers, explain these in their own privacy notices.
Where UK law requires safeguards for a restricted international transfer, the applicable arrangement must use a recognised adequacy decision, approved contractual safeguards or another permitted mechanism. Contact us for information about safeguards applying to our transfers and how to obtain a copy.
Cookies and similar storage
Our website uses cookies and similar storage for its operation and requested features. Optional analytics and advertising technologies are subject to consent where required. Simply browsing the site does not constitute consent to optional cookies.
Use the website’s cookie banner to make your choices. Further information is available on our Cookies & Data page and in Shopify’s cookie information. Browser controls can also remove or block stored information, but this may interrupt the basket, login or saved preferences. For Shopify’s own enhanced-service choices, use its privacy portal linked above.
How long information is kept
Retention depends on the purpose and the record involved. We use legal record-keeping requirements, the life of an enquiry or job, warranty obligations, relevant claim periods and an ongoing need to investigate an incident to decide how long information is needed. We do not treat this as permission to keep all information indefinitely.
- Order, invoice and accounting records are kept for applicable tax and company-law requirements.
- Workshop, technical and claim records are retained for the service and any relevant warranty, insurance or dispute needs.
- Routine CCTV footage is kept for 30 days. Relevant footage may be preserved longer where needed for a specific incident, insurance matter or legal claim, and is deleted when that need ends.
- Marketing details are used in line with your choices; a limited opt-out record may be kept after you unsubscribe.
Contact us if you need information about the retention of a particular record.
Your rights and privacy complaints
Depending on the circumstances, you can ask to access, correct, erase or restrict use of your information; request portability of eligible information; object to processing based on legitimate interests; and withdraw consent where we rely on it. You have an unconditional right to object to direct marketing. There are also protections relating to significant automated decisions where applicable.
Contact support@rivalperformance.co.uk to make a request or raise a privacy complaint. We may need proportionate information to verify your identity. Rights requests are normally answered within one month, subject to lawful extensions or other exceptions.
We will acknowledge a data-protection complaint within 30 days, investigate it appropriately, keep you informed where appropriate and communicate the outcome without undue delay. You may also complain to the Information Commissioner’s Office, telephone 0303 123 1113.
Updates
We will update this notice when our practices or relevant requirements change and revise the date above. Where required, we will bring significant changes to your attention.