This Privacy Policy explains how CHIPSTRIKE LTD (“ChipStrike”, “Company”, “we”, “us”, or “our”) collects, uses, processes, and protects personal data in connection with the use of the website https://chipstrike.com/ and the services provided through it.
By accessing the Website, creating an account, uploading files, purchasing credits, or otherwise using the Services, you acknowledge that your personal data will be processed in accordance with this Privacy Policy.
Company Number: 17066730
Registered Address: 5 Hammersmith Road, London, United Kingdom, W14 8UX
Email: [email protected]
This Privacy Policy applies to all interactions between the User and ChipStrike, including account registration, file uploads, order placement, communication with support, and general use of the Website.
It governs the processing of personal data collected directly from Users as well as data generated through the use of the platform. By using the Website, you confirm that you understand how your data is handled and agree to such processing where permitted by applicable law.
In order to provide the Services, ChipStrike collects and processes personal data that is necessary for account management, service delivery, and communication.
This may include identifying information such as your name and email address, as well as account-related data such as login credentials and user preferences. In addition, when placing an order, Users may provide technical and vehicle-related information, including ECU details, engine specifications, VIN, and other data required for file processing.
We also process files uploaded by Users, including original ECU files and related technical data. These files may contain embedded information related to the vehicle, but are processed strictly for the purpose of delivering the requested service.
Technical data such as IP address, browser type, device information, and usage logs may also be collected automatically to ensure proper operation, security, and performance of the Website.
ChipStrike does not collect, store, or process payment card details or financial account information.
All payments are carried out through independent third-party payment providers. These providers are responsible for processing payment data in accordance with their own privacy and security policies.
ChipStrike may receive limited information related to payment status, transaction confirmation, or payment reference identifiers, which is used solely for account management and order processing.
Personal data is processed for the purpose of providing and maintaining the Services. This includes creating and managing user accounts, processing orders, delivering files, handling support requests, managing credits, and ensuring proper communication with Users.
In addition, data may be used to improve the Website, monitor system performance, detect fraudulent or unauthorized activity, and comply with legal obligations.
Uploaded ECU files are processed exclusively for the purpose of fulfilling the requested service and are not used for any unrelated commercial or analytical purposes.
Where applicable under UK GDPR, ChipStrike processes personal data on the basis of contractual necessity, as processing is required to provide the Services requested by the User. In certain cases, processing is based on legitimate interests, such as maintaining platform security, improving functionality, and preventing abuse.
Processing may also be required to comply with legal obligations. Where consent is required, such as for the use of certain cookies or optional features, it will be obtained in accordance with applicable laws.
ChipStrike applies a range of technical and organisational measures to protect personal data against unauthorised access, misuse, loss, or alteration. These measures include secure system architecture, controlled access to data, and ongoing monitoring of system integrity.
Access to personal data is limited to authorised personnel who require such access for operational purposes. Internal procedures are designed to ensure that data is handled responsibly and in accordance with applicable data protection standards.
While we take reasonable steps to protect data, Users acknowledge that no online system can be entirely free from risk, and absolute security cannot be guaranteed.
ChipStrike adheres to the principles of the General Data Protection Regulation (GDPR) and applies appropriate safeguards to ensure the confidentiality, integrity, and availability of personal data.
This includes implementing internal data protection policies, conducting periodic reviews of data handling practices, and ensuring that staff are trained in data protection responsibilities. We aim to process only the data that is necessary and to retain it only for as long as required for the purposes for which it was collected.
Files uploaded by Users are treated as confidential and are processed solely for the purpose of delivering the requested Services.
Access to uploaded and processed files is restricted to the User and authorised personnel within ChipStrike who require access for file processing, support, or system maintenance. In certain cases, access may also be granted to trusted technical service providers where necessary for storage or infrastructure purposes, subject to strict confidentiality obligations.
ChipStrike does not use uploaded files for resale, redistribution, or independent commercial purposes.
In the course of providing Services, personal data may be transferred to or processed in countries outside the United Kingdom or the European Economic Area.
Where such transfers occur, ChipStrike ensures that appropriate safeguards are in place, including recognised legal mechanisms such as standard contractual clauses or equivalent protections, to ensure that personal data remains adequately protected.
To enhance the security of online transactions, ChipStrike operates in accordance with Strong Customer Authentication (SCA) requirements where applicable.
SCA is implemented by payment providers and requires Users to verify their identity using multiple authentication factors during the payment process. This provides an additional layer of protection against unauthorised transactions.
ChipStrike complies with the requirements of the Payment Services Directive 2 (PSD2), which governs secure electronic payments within the United Kingdom and the European Economic Area.
As part of this framework, Users may be required to complete two-factor authentication when making payments. This process is managed by the payment provider and is designed to improve transaction security.
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including service delivery, account management, legal compliance, and dispute resolution.
Uploaded files and account data may be stored for a limited period to support re-download, technical review, or support requests. ChipStrike does not guarantee permanent storage of files unless explicitly stated.
Users have the right to request access to their personal data, to request correction of inaccurate data, and to request deletion of data where applicable. They may also request restriction of processing or object to certain types of processing where permitted by law.
Requests should be submitted to [email protected] and will be handled in accordance with applicable data protection regulations.
The Website may contain links to external websites. ChipStrike is not responsible for the privacy practices or content of third-party sites. Users are advised to review the privacy policies of those websites independently.
ChipStrike reserves the right to update this Privacy Policy at any time. Updated versions will be published on the Website, and continued use of the Services constitutes acceptance of any changes.
This Privacy Policy, as well as any processing of personal data carried out by ChipStrike in connection with the Website and Services, shall be governed by and construed in accordance with the laws of the United Kingdom.
Any disputes, claims, or matters arising out of or in connection with this Privacy Policy, including issues relating to data protection, privacy rights, or the processing of personal data, shall be subject to the jurisdiction of the courts of England and Wales.
For any questions regarding this Privacy Policy or the processing of personal data, please contact: