Privacy Policy

Last updated: 11 July 2026

1. Our approach to privacy

GTBackup collects and processes personal data only where necessary to operate the website, process orders, deliver digital products, manage customer accounts, provide customer support, ensure website security and comply with applicable legal obligations.

This Privacy Policy explains what personal data we collect, why we process it, how long it is retained and the rights available to data subjects under applicable data protection law.

2. Who is responsible for your data

The data controller for the personal data processed under this Privacy Policy is the legal entity operating under the commercial name GTBackup, as identified in our Legal Notice.

For any privacy-related request, you can contact us through our contact form.

3. What personal data we collect

We collect and process only the personal data necessary for the operation of the store, order fulfilment, customer support and compliance with applicable legal obligations:

• Order data: name, email address, order number, purchased products, order date and order status.
• Billing data: billing information required to issue invoices and comply with accounting and tax obligations.
• Account data: if a customer account is created, it may contain your name, email address, hashed password, order history and available downloads.
• Payment data: payments are processed by Stripe. GTBackup does not collect or store full payment card details.
• Support data: information you provide when contacting customer support through the contact form.
• Technical data: IP address, browser information, security logs, download logs and other limited technical information necessary for website security, fraud prevention, payment validation, delivery evidence and proper operation of the website.

4. Why we use your data

We use your personal data only for specific, legitimate and necessary purposes:

• To process and deliver your orders — performance of a contract.
• To provide access to downloads and customer accounts — performance of a contract.
• To issue invoices and comply with accounting and tax obligations — legal obligation.
• To answer support requests submitted through the contact form — legitimate interest.
• To secure the website, prevent fraud and protect payment transactions — legitimate interest.
• To manage payment disputes, chargebacks and delivery evidence — legitimate interest.

5. Digital products and order delivery

GTBackup supplies digital products and services, including ECU backup files, original ORI files, technical calibration references and custom digital file sourcing services.

Depending on the type of product or service ordered, digital files may be delivered by download, through customer account access or through a custom processing workflow. Order, delivery and download records may be retained to provide customer support, manage downloads, demonstrate delivery and handle possible payment disputes.

6. Cookies

We currently use only cookies and similar technologies considered necessary for the operation and security of the website, including those required for the shopping cart, checkout, customer account login, payment processing, fraud prevention and website security.

We do not currently use cookies for advertising tracking, retargeting or other non-essential marketing purposes.

If analytics, advertising pixels, retargeting tools or other non-essential tracking technologies are introduced in the future, this Privacy Policy will be updated and consent will be requested where required by applicable law.

7. Marketing emails

8. Who has access to your data

GTBackup does not sell personal data. Personal data may be shared only with service providers, professional advisers or authorities where necessary to operate the store or comply with legal obligations:

• Hosting provider: the website is hosted by Hostinger International Ltd.
• Payment provider: payments are processed by Stripe through the website’s WooCommerce payment integration.
• Website software: WordPress and WooCommerce are used to process website, account, order and download information.
• Email delivery providers: transactional emails may be processed through the website, the hosting provider or another SMTP or email delivery provider used by GTBackup.
• Professional advisers: accountants, legal advisers or other professional advisers may receive data where reasonably necessary.
• Public authorities: data may be disclosed where required by applicable law, a valid legal request or accounting, tax or regulatory obligations.

9. International transfers

Some hosting, payment, email or technical service providers may process personal data outside the European Economic Area. Where such transfers occur, they are based on an adequacy decision, Standard Contractual Clauses or another valid safeguard or legal mechanism recognised under applicable data protection law.

10. How long we keep your data

Invoices, accounting records and supporting documents are retained for the period required by French accounting and tax law. Such records are generally retained for 10 years.

Other order and delivery records are retained for as long as reasonably necessary to perform the contract, provide customer support, demonstrate delivery and establish, exercise or defend legal claims, subject to applicable legal retention requirements.

Customer account data is retained while the account remains active. You may request deletion of your account at any time, subject to data that must be retained for legal, accounting, tax, fraud-prevention or dispute-management purposes.

Support messages sent through the contact form are retained only for as long as reasonably necessary to handle the request and protect legitimate interests in the event of a dispute.

Technical logs, security logs and download logs are retained only for as long as reasonably necessary for website security, fraud prevention, delivery evidence, dispute management and legal protection.

11. Your rights

You have the rights provided by applicable data protection law, including, where applicable, the rights to access, rectify or erase your personal data, restrict or object to its processing, and request data portability.

You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise your rights, contact us through our contact form. We may request reasonable information to verify your identity before responding.

We will respond without undue delay and within the timeframe required by applicable data protection law.

You also have the right to lodge a complaint with the French data protection authority, the CNIL.

12. Security

We implement reasonable technical and organisational measures to protect personal data, including secure hosting, HTTPS encryption, restricted access to administration tools and payment processing through Stripe.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

13. Changes to this policy

We may update this Privacy Policy to reflect changes to our practices, service providers, technical infrastructure or legal requirements. The “Last updated” date displayed at the top of this page identifies the current version.

14. Contact

For any question regarding this Privacy Policy, the processing of your personal data or the exercise of your rights, please contact us through our contact form.