1. Who we are

This site (epsppf.co.uk) is operated by Auto Wrap Lab Limited, trading as EPS PPF, registered in England & Wales. Our trading address is Unit G, 3 Regal Way, Watford, Hertfordshire, WD24 4YJ. We are part of the EPS Cars Group.

For data-protection purposes we are the data controller for any personal data you submit through this website.

2. What data we collect

When you submit the contact form

• Your name, email address, phone number (optional), vehicle make & model, the service you're enquiring about, and any message you choose to send.

Automatically when you browse the site

• Pages you view, time spent, referring website, approximate location (country/region), device type, browser, operating system — only if you accept analytics cookies.
• Aggregate traffic information (page views, bandwidth, country) is collected in a privacy-friendly form by Cloudflare without using cookies.

3. Why we collect it & legal basis

• Contact form data — to respond to your enquiry and provide a quote. Legal basis: your consent (you chose to send us the form) and our legitimate interest in running our business.
• Analytics data — to understand which pages and services people are interested in, so we can improve the site. Legal basis: your consent (the cookie banner).
• Aggregate Cloudflare metrics — to monitor site performance and security. Legal basis: legitimate interest; no personal data is processed.

4. Cookies & similar technologies

We use a small number of cookies. The banner you saw on first visit lets you choose which categories to allow; you can change your choice any time via the Cookie settings link.

Name	Set by	Purpose	Lifetime	Category
eps_cc_v1	This site	Remembers your cookie consent choice so we don't show the banner on every visit.	365 days	Strictly necessary
_ga, _ga_*	Google Analytics 4	Distinguishes unique visitors and sessions for traffic measurement.	Up to 13 months	Analytics (only if you accept)
_clck, _clsk	Microsoft Clarity	Heatmaps and session recordings of how visitors use the site. No personal data captured; sensitive fields are masked.	Up to 1 year	Analytics (only if you accept)
_gcl_*	Google Ads	Measures whether an ad click resulted in a phone call, form submission or booking. Powers remarketing audiences.	Up to 90 days	Marketing (only if you accept)
_fbp, fr	Meta Pixel (Facebook/Instagram)	Measures whether a Facebook or Instagram ad click resulted in a contact, booking or quote. Powers remarketing audiences on Meta platforms.	Up to 90 days	Marketing (only if you accept)

5. Who we share data with

• Google LLC / Google Ireland Ltd — Google Analytics 4 (if you accept analytics cookies) and Google Ads conversion tracking (if you accept marketing cookies). Data is processed within the EU and may be transferred to the US under Standard Contractual Clauses + the EU–US Data Privacy Framework.
• Microsoft Corporation — Microsoft Clarity for heatmaps and session recordings. Only fired if you accept analytics cookies. Data is processed under Microsoft's standard EU data protection terms.
• Meta Platforms Ireland Ltd — Meta Pixel for measuring Facebook and Instagram ad performance and building remarketing audiences. Only fired if you accept marketing cookies. Transfers to the US rely on Standard Contractual Clauses + the EU–US Data Privacy Framework.
• Formspree (Formspree Inc., USA) — processes contact, booking and newsletter form submissions as our form-relay provider. Submitted data is forwarded to sales@epsppf.co.uk and is retained by Formspree for delivery logging and spam protection. Transfers to the US rely on Standard Contractual Clauses and Formspree's Data Processing Addendum (formspree.io/legal/dpa).
• Cloudflare, Inc. — hosts and accelerates the site; sees IP addresses for security and routing. Acts as a data processor on our behalf.

We do not sell your data and do not share it with any third party not listed above.

6. How long we keep it

• Contact-form enquiries — up to 24 months after the last interaction, then deleted, unless we have an active job for you in which case we keep it as part of the customer record.
• Analytics data — 14 months in Google Analytics, then automatically deleted.

7. Your rights under UK GDPR

You have the right to:

• Ask what personal data we hold about you (right of access)
• Have inaccurate data corrected
• Have your data deleted ("right to be forgotten")
• Restrict or object to processing
• Receive a portable copy of your data
• Withdraw consent at any time
• Complain to the UK Information Commissioner's Office (ico.org.uk)

8. How to contact us

To exercise any of these rights, or with any privacy question, email sales@epsppf.co.uk or write to:

EPS PPF (Auto Wrap Lab Limited)
Unit G, 3 Regal Way
Watford, Hertfordshire
WD24 4YJ

We aim to respond within 30 days.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top reflects the most recent change. Significant changes will be highlighted in the cookie banner so you can review them.

Open cookie settings   Contact us