Close Menu

    GDPR Privacy Policy

    GDPR Privacy Policy

    Last Updated: July 3, 2026

    1. GDPR Introduction

    This GDPR Privacy Policy applies to residents of the European Economic Area (EEA) and explains how WheelXpress (https://wheelxpress.com) collects, processes, and protects your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

    We are committed to ensuring that your personal data is handled lawfully, fairly, and transparently.

    2. Data Collection

    We may collect the following categories of personal data:

    Category Examples
    Identity Data Name (if provided via contact form)
    Contact Data Email address (if provided)
    Technical Data IP address, browser type, device information
    Usage Data Pages visited, time on site, referring URLs
    Marketing Data Preferences regarding communications
    Cookie Data Advertising and analytics cookies (see Cookie Policy)

    3. Legal Basis for Processing

    Under the GDPR, we process your personal data on the following legal bases:

    • Consent — Where you have explicitly consented (e.g., newsletter subscription, cookie acceptance)
    • Legitimate Interests — To operate and improve our website, prevent fraud, and analyze traffic
    • Legal Obligation — Where we are required by law to process your data
    • Contract — Where processing is necessary to fulfill a service you have requested

    4. Data Processing

    We process your personal data for the following purposes:

    • Operating and maintaining the WheelXpress website
    • Responding to your inquiries and support requests
    • Sending newsletters and updates (where you have opted in)
    • Displaying personalized advertising via Google AdSense
    • Analyzing website performance using Google Analytics
    • Complying with legal obligations

    5. Your Rights Under GDPR

    As an EEA resident, you have the following rights regarding your personal data:

    Right Description
    Right of Access Request a copy of the personal data we hold about you
    Right to Rectification Request correction of inaccurate or incomplete data
    Right to Erasure Request deletion of your personal data (“right to be forgotten”)
    Right to Restriction Request that we limit the processing of your data
    Right to Data Portability Receive your data in a structured, machine-readable format
    Right to Object Object to processing based on legitimate interests or for direct marketing
    Right to Withdraw Consent Withdraw previously given consent at any time
    Right to Complain Lodge a complaint with your national data protection authority

    To exercise any of these rights, contact us at: contact@wheelxpress.com with the subject line “GDPR Request.”

    We will respond within 30 days of receiving a verifiable request.

    6. Data Retention

    We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

    • Contact form data: Retained for up to 12 months after the last correspondence
    • Analytics data: Retained according to Google Analytics data retention settings (default: 14 months)
    • Newsletter subscriptions: Retained until you unsubscribe
    • Legal compliance data: Retained as required by applicable law

    7. International Data Transfers

    Some of our third-party service providers (such as Google Analytics and Google AdSense) may process your personal data outside the EEA. When this occurs, we ensure that appropriate safeguards are in place, such as:

    • Standard Contractual Clauses (SCCs) approved by the European Commission
    • Adequacy decisions covering the recipient country

    8. Data Security

    We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These include:

    • Secure HTTPS encryption for all data transmitted through the Site
    • Limited access to personal data on a need-to-know basis
    • Regular review of our data security practices

    9. Contact & Data Controller Information

    If you have questions about this GDPR Privacy Policy or wish to exercise your rights:

    You also have the right to lodge a complaint with your local supervisory authority. In the EU, you can find your national authority at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

    Frequently Asked Questions

    Q: Does GDPR apply to me if I’m outside the EU?
    A: This GDPR policy specifically covers EEA residents. If you are outside the EEA, please refer to our main Privacy Policy and applicable regional policies.

    Q: How long does it take to respond to a GDPR request?
    A: We aim to respond within 30 days. For complex requests, we may extend this by an additional 2 months, and we will notify you if this is the case.

    Q: Can I withdraw consent for cookies?
    A: Yes. You can manage cookie consent at any time through your browser settings. See our Cookie Policy for details.

    Q: Who can I complain to about how you handle my data?
    A: You can contact us directly or file a complaint with your national data protection authority within the EU.