Privacy Policy

Last updated: August 2026 · Applies to nhraceengine.nl and all orders placed with NH Race Engine

NH Race Engine ("we", "us") respects your privacy and processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act (UAVG). This policy explains what we collect, why, how long we keep it, and who we share it with. Your rights — and how to exercise them — are explained on our GDPR Compliance page; cookies are covered in our Cookie Policy.

2. What We Collect & Why

• Orders: name, billing/shipping address, email, phone, order contents and payment status — to process, deliver and support your order and to meet tax obligations. Legal basis: contract and legal obligation.
• Quote & contact forms: the details you submit (including vehicle/engine details and optional photos) — solely to answer your request. We never use form submissions for marketing. Legal basis: pre-contractual steps / consent.
• Customer account: login details, order history, saved addresses — to operate your account and speed up checkout. Legal basis: contract.
• Warranty & core returns: serial numbers, order numbers and product condition — to administer warranties and core deposits. Legal basis: contract.
• Newsletter: your email address — only if you explicitly subscribe; every email contains an unsubscribe link. Legal basis: consent.
• Analytics & marketing cookies: anonymised usage data — only after your consent via the cookie banner. Legal basis: consent. See the Cookie Policy.
• Security & fraud prevention: IP address and technical logs. Legal basis: legitimate interest.

3. Payment Data

Payments are processed by our PCI-DSS-compliant payment provider over an encrypted (HTTPS) connection. We never see or store your full card details. For bank transfers we store only the payment reference needed to match your payment to your order.

4. Who We Share Data With

Only the parties needed to run your order, each under a written data-processing agreement:

• Payment provider — to process your payment
• Carriers & freight companies — name, address and phone number, to deliver your order
• Hosting & IT suppliers — to operate this website
• Email service — to send order confirmations and replies
• Tax advisor / authorities — where Dutch law requires

We never sell personal data. Data is stored within the EU/EEA wherever possible; where a provider processes data outside the EEA, this happens under EU Standard Contractual Clauses.

5. How Long We Keep Your Data

• Order, invoice and warranty data: 7 years (Dutch tax law)
• Quote and contact requests: up to 2 years
• Customer accounts: until you ask us to delete them
• Newsletter: until you unsubscribe
• Security logs: up to 12 months

6. Your Rights

You have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent at any time. The full procedure is on our GDPR Compliance page — or simply email info@nhraceengine.nl with the subject "GDPR Request". We respond within 30 days, free of charge.

7. Security

The site runs over HTTPS/SSL; access to personal data is limited to staff who need it; systems and software are kept updated. If a data breach risks your rights or freedoms, we notify the Autoriteit Persoonsgegevens within 72 hours and affected individuals without undue delay.

8. Cookies

We use essential cookies (cart, checkout, login) and — only with your consent — analytical and marketing cookies. Full list and settings: Cookie Policy.

9. Changes to This Policy

We may update this policy when our processing or the law changes. The current version, with its revision date, is always published on this page. Material changes are announced on the website before they take effect.

10. Complaints