This policy explains what personal data Hoku Racing MB collects when you use hokuracing.com, why we collect it, who we share it with and what rights you have. It is written to meet Articles 13 and 14 of the EU General Data Protection Regulation (GDPR).
1. Who we are
The controller of your personal data is:
- Hoku Racing MB
- Company code 306205367
- VAT code LT100015806217
- Kaunas, Lithuania
- Email: info@hokuracing.com
- Phone: +370 644 62322
We have not appointed a Data Protection Officer, as we are not required to. Data protection questions go to the email address above.
2. What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Name, email, phone, delivery and billing address, company name and VAT code for business buyers | To take and fulfil your order, issue the invoice, arrange delivery and handle returns | Performance of a contract (Art. 6(1)(b)); legal obligation for accounting records (Art. 6(1)(c)) |
| Vehicle make, model, year and modification you enter in the fitment finder | To show wheels that fit your car and to check fitment before we ship | Performance of a contract, and our legitimate interest in preventing wrong-fitment returns (Art. 6(1)(f)) |
| Order history, invoices, payment status | Accounting, warranty handling, dispute resolution | Legal obligation; legitimate interest |
| Account email and password (hashed, never stored in readable form) | To let you sign in, see your orders and keep a wishlist | Performance of a contract |
| Messages you send through the contact form | To answer you | Legitimate interest in responding to enquiries |
| Newsletter email address | To send product and restock news | Consent (Art. 6(1)(a)) — withdrawable at any time |
| IP address and server log entries | Security, fraud prevention, diagnosing faults | Legitimate interest in keeping the shop working and secure |
We do not collect special category data, we do not profile you automatically in a way that has legal effects, and we do not sell your data to anyone.
3. Card details
We never see or store your full card number. Card data is entered on the payment provider's own hosted page and stays with them. We receive only the payment result, the last digits and the payer's email.
4. Who we share data with
We share only what each recipient needs to do its job:
- Stripe Payments Europe, Ltd. (Ireland) — card payments and Klarna instalments.
- PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) — PayPal payments.
- DPD and UPS — delivery. They receive your name, address and phone so the parcel can be handed over.
- Google Ireland Limited — Google Workspace, which hosts our email. Correspondence with us passes through it.
- Hetzner Online GmbH — hosting. Our server is in Helsinki, Finland; data stays in the EU.
- eBay — only if you bought from us through eBay, in which case the order data comes to us from them.
- Our accountant, and public authorities where the law requires it.
All of these act as processors under written terms, or as independent controllers for their own regulated activity (payment providers).
5. Transfers outside the EU
Our hosting, email and payment processing are handled inside the European Economic Area. Where a provider's group companies process data outside the EEA, they do so under the European Commission's Standard Contractual Clauses.
One exception is worth naming plainly: our pages load typefaces from Google Fonts, which means your browser contacts a Google server and Google sees your IP address. If you would rather this did not happen, a content blocker will stop it, and the site remains fully usable.
6. How long we keep it
- Orders, invoices and accounting records — 10 years from the end of the financial year, as Lithuanian accounting law requires.
- Account data — while your account exists. Ask us and we will delete it, except for the order records we must keep.
- Contact form messages — 2 years.
- Newsletter — until you unsubscribe.
- Server logs — up to 8 weeks.
7. Your rights
You can ask us to: give you a copy of your data; correct it; delete it; restrict how we use it; transfer it to another provider; or stop processing based on legitimate interest. Where we rely on consent, you can withdraw it at any time — that does not affect what we did before you withdrew it.
Write to info@hokuracing.com. We answer within one month. There is no charge unless a request is excessive or repetitive.
If you are not satisfied with how we handled it, you may complain to the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, L. Sapiegos g. 17, Vilnius, vdai.lrv.lt) or to the supervisory authority in your own country of residence.
8. Is providing data required?
For an order, yes — without a name, address and contact details we cannot ship anything or issue a valid invoice. The newsletter and your vehicle details in the fitment finder are voluntary.
9. Changes
If we change this policy we update the date shown at the top of the page. Material changes affecting existing customers will also be sent by email.