Privacy Policy

01. Who is responsible for your data?

The data controller for this website is KillerBrothers Motorsport SRL, operating under the trading name KillerBrakes, established in Romania.

Please use the email address above for all requests relating to personal data. If a Data Protection Officer is appointed and disclosure of their contact details is required, those details will also be made available.

02. Personal information we collect

Depending on how you use the website, we may process:

• Contact information: name, email address, telephone number, billing or shipping address and company information where provided.
• Account details: account identifiers, login-related information, saved addresses, preferences and order history.
• Order and transaction information: items purchased, prices, order status, transaction references, invoices, delivery information, refunds and support records.
• Enquiries and vehicle information: messages sent via forms, email or other contact channels, including car model, year, wheel or brake specifications and photographs if supplied for fitment advice.
• Technical information: IP address, browser and device details, server access or security logs, and cookie-related information when applicable.
• Marketing preferences: subscriptions and relevant consent or opt-out records, if you choose to receive marketing communications.

We normally obtain this data directly from you, automatically through operation of the website, or from transaction partners such as payment providers and carriers when needed to complete a purchase. Please avoid sending sensitive personal information unless strictly necessary.

03. Why we use your information and our legal bases

We use personal data only when there is an appropriate legal basis under Article 6 GDPR. The main purposes and bases are:

Where we rely on legitimate interests, we consider their impact on your rights and freedoms. You may object to processing based on legitimate interests in the circumstances described below.

04. Orders, payments and customer accounts

When you place an order, we need enough information to identify the purchaser, take or confirm payment, prepare the invoice, dispatch the goods, and manage any return or warranty enquiry.

Online payments may be processed by third-party payment services. Depending on the payment method, the provider may collect payment details directly and supply us with the payment status and transaction reference. Its own privacy notice may also apply to the data it independently processes.

Where a website account is available, account information is used to support access to your order history and relevant account functions.

Information essential to fulfil an order, provide an invoice, or meet applicable legal obligations must be supplied. If you choose not to provide it, we may be unable to process the transaction or deliver the order.

05. Contact forms and fitment assistance

If you contact us using the Contact page, email or another supported channel, we use the information you provide to address your request.

For technical product or wheel-clearance questions, we may ask for relevant vehicle specifications and photographs. Such information is used to provide an informed response and, where appropriate, prepare an offer. Please do not include unrelated identification documents or sensitive personal details.

06. Marketing communications

If you subscribe to promotional emails or otherwise give valid marketing consent, we may contact you about products, offers and relevant updates. We record your preferences where necessary to demonstrate compliance.

You may withdraw marketing consent at any time by following an unsubscribe instruction where provided or contacting office@killerbrakes.com. Withdrawal does not affect processing carried out lawfully before you withdrew consent.

07. Cookies, analytics and similar technologies

The website uses technologies such as cookies that can support shopping-cart functions, session management, security and user preferences. Some cookies are strictly necessary to provide the service you request.

Where non-essential analytics, advertising or similar tracking technologies are used, we seek consent where required before activating them. You can change your choices using the website’s cookie-preference controls, if available, or by using your browser settings. Browser controls may not replace consent mechanisms required for certain technologies.

See our Cookies Policy for more information about cookie types, purposes, lifetimes and third-party tools. The cookie inventory and consent interface must reflect the technologies actually active on the website.

08. Who may receive your data?

We do not sell customer personal data. We may disclose only the information reasonably needed to relevant categories of recipients, including:

• Website hosting, IT maintenance, security and infrastructure providers.
• Payment service providers and banks involved in a transaction.
• Delivery and logistics partners, including couriers such as UPS or FedEx where selected for an order.
• Accounting, invoicing, professional advisory or customer support service providers.
• Marketing or analytics providers, only where the relevant services are active and the applicable legal basis is satisfied.
• Public authorities or courts when disclosure is required by applicable law.

Service providers acting on our instructions should process personal data under appropriate contractual and security safeguards. Some recipients, such as certain financial institutions or shipping companies, may act as independent data controllers for their own obligations.

09. Transfers outside the European Economic Area

Some technology, payment, communication or delivery providers may process data outside the European Economic Area (EEA). Where such transfers occur, we take account of the destination and the safeguards required by GDPR.

Depending on the recipient and circumstances, safeguards may include an applicable European Commission adequacy decision or Standard Contractual Clauses, supplemented by appropriate measures when necessary. You can contact us for information about the safeguards relevant to your personal data and, where applicable, how to obtain a copy.

10. How long do we keep information?

We do not apply one fixed retention period to every category of data. Retention depends on the processing purpose, the dates of the relevant transactions, legal requirements and the need to address claims or disputes.

These are the retention criteria. The specific periods applied to each system should be set out in our internal retention schedule, and we can provide applicable details in response to a valid privacy request.

11. How we protect personal information

We use technical and organisational measures appropriate to the nature and risks of the processing, which may include access controls, encrypted connections, software maintenance, backups, service-provider controls and monitoring for abusive activity.

No internet service can guarantee absolute security. Where a personal data breach occurs, we assess it and make notifications to the competent authority and affected individuals when required by GDPR.

12. Your GDPR rights

Depending on the circumstances and applicable exceptions, you may have the right to:

• Request access to your personal data and information about how it is used.
• Request correction of inaccurate or incomplete personal data.
• Request erasure of data when the legal conditions are met.
• Request restriction of certain processing activities.
• Object to processing based on legitimate interests, and object at any time to direct marketing.
• Receive and transmit relevant data in a structured, commonly used, machine-readable format where the portability right applies.
• Withdraw consent at any time, without affecting earlier lawful processing.
• Benefit from protections concerning qualifying decisions based solely on automated processing, including profiling, where Article 22 applies.

To exercise a right, contact office@killerbrakes.com and describe the request. We may need reasonable information to verify your identity, especially before releasing personal data.

We generally respond within one month of receiving a valid request. Where permitted for complex or multiple requests, this period may be extended by up to two further months, and we will explain the extension within the initial month. Requests are ordinarily handled without charge, subject to applicable GDPR exceptions.

13. Questions and complaints

If you have concerns about how your personal data is processed, please contact us first at office@killerbrakes.com so that we can review them.

You also have the right to lodge a complaint with the competent data-protection supervisory authority. In Romania, this is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP).

Official website: www.dataprotection.ro. You may also contact the supervisory authority in the EU/EEA country of your habitual residence or workplace when applicable.

14. Children, external services and policy updates

Children: Our products and shopping services are aimed at adult customers. If we discover personal data was collected from a child in a manner that requires parental authorisation, we will take appropriate steps under applicable law.

External websites: Links to third-party services may lead to independently operated websites with their own privacy notices. We encourage you to read those notices.

Changes: We may update this policy when our processing practices, service providers or legal obligations change. The date at the top indicates the latest published revision. Where required, we will provide additional notice or seek new consent.