Privacy Policy — OFM4x4 EU

Last updated: 22 September 2025 • Framework: GDPR (EU), EU Data Protection Regulation, Romanian Law 190/2018

1. Who we are (Controller)

OFM Automotive Ltd operates ofm4x4.eu and is the data controller for this website.

Registered details: Companies House company number 14827896 · Company number 14827896 · 84 Balmoral Road, Watford, England, WD24 4ET, United Kingdom.

Contact: privacy@ofm4x4.eu

2. Personal data we process

• Orders & account data: name, email, phone, billing/shipping address, company details, order history, payment references (no full card data stored).
• Support: messages, attachments, returns (RMA).
• Marketing: newsletter preferences, campaign interactions (with consent).
• Usage data: device, browser, pages visited, events (via cookies/analytics).

3. Purposes & legal bases

• Contract (Art. 6(1)(b)): account management, order processing, deliveries, returns, warranties.
• Legal obligation (Art. 6(1)(c)): invoicing, tax compliance, consumer protection.
• Legitimate interests (Art. 6(1)(f)): site security, fraud prevention, service improvements, B2B communications relevant to your relationship.
• Consent (Art. 6(1)(a)): newsletter, analytics cookies, marketing/remarketing.

Consent can be withdrawn anytime (see Section 9).

4. Cookies & tracking

We use cookies for essential functions, preferences, analytics and marketing. See our Cookie Policy.

5. Sharing & processors

We share data with trusted providers, acting as processors or controllers: hosting/CDN, payment gateways (Revolut, bank transfer; future: EuPlatesc/Plăți Online), couriers, analytics and advertising (with consent), fraud/security tools, email/CRM services.

6. International transfers

Some providers may process data outside the EEA. Safeguards include adequacy decisions or Standard Contractual Clauses (SCCs) with supplementary measures.

7. Retention

Data is retained as long as necessary: order data by law; accounts while active; marketing until consent withdrawal; analytics per cookie choices.

8. Security

We use appropriate measures: encryption in transit, access controls, backups, least-privilege. No method is 100% secure but we continuously improve safeguards.

9. Your GDPR rights

• Access, rectification, erasure
• Restriction, objection (incl. marketing)
• Data portability
• Withdraw consent (for consent-based processing)

Request via privacy@ofm4x4.eu. We may verify your identity.

10. Children’s data

Our website is intended for adults. We do not knowingly collect children’s data.

11. Contact & complaints

Email: privacy@ofm4x4.eu

You may also lodge a complaint with ANSPDCP (Romania) or your local EU authority.