Simple site. Minimal data.

Privacy notice

Afiléon Motorsport uses personal information only where it is needed to answer enquiries, provide services, administer bookings, process purchases, prevent fraud, meet safety requirements and operate Afiléon Pitlane. The website does not require a customer account and Afiléon Motorsport does not receive or store raw payment-card numbers.

Information we may receive

Depending on what you use, this can include your name, email address, telephone number, booking or delivery address, vehicle details, service selections, gift-voucher details, order history, messages you send us, transaction references, and a driving-licence image for the BMW E46 hire eligibility check.

Road-route estimate postcodes

When you request an indicative combined track-day support and transport route calculation, we send only the collection, circuit, return and operational base postcodes to Google Maps Platform Routes API to calculate driving distances. We do not send your name, full street address or payment details to that routing API as part of the estimator. If the service is unavailable, you can still request a manual quotation. Please see Google’s published privacy information for how Google handles routing requests.

Email verification and transactional messages

We may use your email address to send one-time six-digit verification codes, booking confirmations, order updates, gift-voucher messages, payment reminders and other service messages. These are operational messages rather than marketing.

Driving-licence images

A driving-licence image may be requested for the BMW E46 hire service so we can check identity and eligibility. It is used only for the booking, safety, fraud-prevention and related record-keeping purposes, is restricted to people who need it for those purposes, and is kept no longer than reasonably necessary for the booking, any dispute or legal requirement.

Pitlane precise location

During an active GPS timing session, Afiléon Pitlane uses precise location to detect start/finish and checkpoint crossings and calculate lap times. The continuous driven route is processed temporarily for timing and is not uploaded as leaderboard history. Pitlane keeps lap results and a limited number of circuit anchor points on the device. Eligible leaderboard submissions send only the information needed for the lap submission and validation. Pitlane does not use precise location for advertising.

Service providers

For Track-Day Support and Transport, we share the collection and return postcodes with Postcodes.io for Kent/Medway eligibility checks, and route postcodes with Google Routes to calculate road mileage. These lookups do not include customers' names or full street addresses. Stripe processes payments. Production and delivery providers may receive customer and delivery details needed to complete merchandise orders. SMTP2GO is used to send transactional email. Render hosts the booking and order API, Neon hosts the associated PostgreSQL database, and Cloudflare delivers the public website and related network services. These providers process information under their own terms and security arrangements where relevant.

Workshop vehicle and repair records

When we inspect, maintain or repair a vehicle, we may record the customer's contact details, registration and vehicle identification details, reported faults, inspection findings, photographs of condition or damage, agreed costs, completion notes, signatures and the time of each action. These records support service delivery, accurate job histories, customer authorisation and dispute handling. The private workshop app encrypts local records, and confirmed synchronised records are transmitted over HTTPS to our access-controlled Render API and stored in encrypted form in our Neon database. Customers do not have access to the internal workshop application or its log dashboard.

Retention and security

We keep personal information only for as long as it is reasonably needed for the purpose it was collected, including service delivery, accounting, safety, fraud prevention, dispute handling and legal obligations. Access to administrative systems is restricted and payment-card data is handled by Stripe rather than stored by Afiléon Motorsport.

Your rights

UK data-protection law may give you rights to ask for access to your personal data, correction, deletion, restriction, portability or to object to certain processing. These rights depend on the circumstances and legal basis. You can also complain to the UK Information Commissioner’s Office if you believe your data has been handled unlawfully.

For privacy requests, email team@afileonmotorsport.co.uk.