Privacy &
cookie policy.
Plain-language summary of what data we collect on epsppf.co.uk, why, who it's shared with, and your rights under UK GDPR. Last updated: 8 May 2026.
1. Who we are
This site (epsppf.co.uk) is operated by Auto Wrap Lab Limited, trading as EPS PPF, registered in England & Wales. Our trading address is Unit G, 3 Regal Way, Watford, Hertfordshire, WD24 4YJ. We are part of the EPS Cars Group.
For data-protection purposes we are the data controller for any personal data you submit through this website.
2. What data we collect
When you submit the contact form
- Your name, email address, phone number (optional), vehicle make & model, the service you're enquiring about, and any message you choose to send.
Automatically when you browse the site
- Pages you view, time spent, referring website, approximate location (country/region), device type, browser, operating system — only if you accept analytics cookies.
- Aggregate traffic information (page views, bandwidth, country) is collected in a privacy-friendly form by Cloudflare without using cookies.
3. Why we collect it & legal basis
- Contact form data — to respond to your enquiry and provide a quote. Legal basis: your consent (you chose to send us the form) and our legitimate interest in running our business.
- Analytics data — to understand which pages and services people are interested in, so we can improve the site. Legal basis: your consent (the cookie banner).
- Aggregate Cloudflare metrics — to monitor site performance and security. Legal basis: legitimate interest; no personal data is processed.
4. Cookies & similar technologies
We use a small number of cookies. The banner you saw on first visit lets you choose which categories to allow; you can change your choice any time via the Cookie settings link.
| Name | Set by | Purpose | Lifetime | Category |
|---|---|---|---|---|
eps_cc_v1 | This site | Remembers your cookie consent choice so we don't show the banner on every visit. | 365 days | Strictly necessary |
_ga, _ga_* | Google Analytics 4 | Distinguishes unique visitors and sessions for traffic measurement. | Up to 13 months | Analytics (only if you accept) |
_clck, _clsk | Microsoft Clarity | Heatmaps and session recordings of how visitors use the site. No personal data captured; sensitive fields are masked. | Up to 1 year | Analytics (only if you accept) |
_gcl_* | Google Ads | Measures whether an ad click resulted in a phone call, form submission or booking. Powers remarketing audiences. | Up to 90 days | Marketing (only if you accept) |
_fbp, fr | Meta Pixel (Facebook/Instagram) | Measures whether a Facebook or Instagram ad click resulted in a contact, booking or quote. Powers remarketing audiences on Meta platforms. | Up to 90 days | Marketing (only if you accept) |
5. Who we share data with
- Google LLC / Google Ireland Ltd — Google Analytics 4 (if you accept analytics cookies) and Google Ads conversion tracking (if you accept marketing cookies). Data is processed within the EU and may be transferred to the US under Standard Contractual Clauses + the EU–US Data Privacy Framework.
- Microsoft Corporation — Microsoft Clarity for heatmaps and session recordings. Only fired if you accept analytics cookies. Data is processed under Microsoft's standard EU data protection terms.
- Meta Platforms Ireland Ltd — Meta Pixel for measuring Facebook and Instagram ad performance and building remarketing audiences. Only fired if you accept marketing cookies. Transfers to the US rely on Standard Contractual Clauses + the EU–US Data Privacy Framework.
- Formspree (Formspree Inc., USA) — processes contact, booking and newsletter form submissions as our form-relay provider. Submitted data is forwarded to sales@epsppf.co.uk and is retained by Formspree for delivery logging and spam protection. Transfers to the US rely on Standard Contractual Clauses and Formspree's Data Processing Addendum (formspree.io/legal/dpa).
- Cloudflare, Inc. — hosts and accelerates the site; sees IP addresses for security and routing. Acts as a data processor on our behalf.
We do not sell your data and do not share it with any third party not listed above.
6. How long we keep it
- Contact-form enquiries — up to 24 months after the last interaction, then deleted, unless we have an active job for you in which case we keep it as part of the customer record.
- Analytics data — 14 months in Google Analytics, then automatically deleted.
7. Your rights under UK GDPR
You have the right to:
- Ask what personal data we hold about you (right of access)
- Have inaccurate data corrected
- Have your data deleted ("right to be forgotten")
- Restrict or object to processing
- Receive a portable copy of your data
- Withdraw consent at any time
- Complain to the UK Information Commissioner's Office (ico.org.uk)
8. How to contact us
To exercise any of these rights, or with any privacy question, email sales@epsppf.co.uk or write to:
EPS PPF (Auto Wrap Lab Limited)
Unit G, 3 Regal Way
Watford, Hertfordshire
WD24 4YJ
We aim to respond within 30 days.
9. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top reflects the most recent change. Significant changes will be highlighted in the cookie banner so you can review them.