Privacy policy

Last updated: 27 August 2026.

1. Who is responsible for your information

Caine Performance Ltd is the controller of personal information used by CP Tuning Tools and CP Datalogger. We are registered in England and Wales under company number 13104244. Our registered office is 48 Abbots Vale, Barrow-In-Furness, Cumbria, United Kingdom, LA13 9PA. Privacy enquiries can be sent to privacy@cptuningtools.co.uk.

2. Information we collect

We collect the name, business name and email address you provide; account-verification and password-reset records; subscription, invoice and payment status received from Stripe; support correspondence; software version and activation information; a protected machine fingerprint; and security information such as login times, IP-derived security hashes and audit events.

We receive information directly from you, from the CP Datalogger application when it contacts the licensing service, and from service providers such as Stripe when they process a payment or subscription event. We do not receive or store your complete payment-card number.

3. Why we use it

We use account, subscription and activation information to provide the contract you ask us to perform: creating your account, taking payment, supplying downloads, applying the two-machine allowance and validating the software licence. We use transaction and invoicing information to meet tax, accounting and legal obligations.

We use proportionate security logs, audit records and support correspondence for our legitimate interests in preventing fraud, protecting the service, diagnosing faults and resolving disputes. Where consent is required for an optional activity, you may withdraw it at any time.

4. Machine activations

The application creates a one-way machine fingerprint. The licensing service applies an additional keyed hash before storage. The stored value is used to distinguish activated machines and enforce the licence; it is not designed to reveal your Windows serial numbers to staff or other customers.

5. Who receives information

We share only what is necessary with providers that help us operate the service, including Stripe for payments and billing, our UK hosting and email providers, and professional advisers or authorities where required by law. These providers act under their own legal duties or our instructions. We do not sell personal information.

6. International transfers

Some providers may process information outside the United Kingdom. Where that happens, we rely on an adequacy decision, approved contractual safeguards or another lawful transfer mechanism. You can contact us for more information about the safeguards relevant to your data.

7. How long we keep information

We keep account and licence records while your account is open and normally remove or anonymise information that is no longer needed within 24 months after closure. Transaction, invoice and tax records are normally retained for at least six years to meet legal and accounting obligations. Routine security and login records are normally kept for up to 12 months, while short-lived verification and reset records are removed after expiry. We may retain relevant records longer where needed for a legal claim, fraud investigation or legal requirement.

8. Cookies

The website uses a strictly necessary session cookie named cptt_session to keep you signed in, protect forms and maintain account security. It is marked Secure, HttpOnly and SameSite=Lax. If you choose to stay signed in, its lifetime may be extended for up to 30 days. We do not currently use advertising or non-essential analytics cookies.

9. Security

We use access controls, encrypted connections, password hashing, request protection, rate limiting and limited-access service credentials. No internet service can guarantee absolute security, so please use a unique password and notify us promptly if you suspect unauthorised access.

10. Your rights

Depending on the circumstances, you may ask for access to your personal information, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may also withdraw consent where processing relies on consent. We may need to verify your identity and may retain information that the law requires us to keep.

11. Complaints

Please contact privacy@cptuningtools.co.uk first so we can try to resolve a concern. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.

12. Changes to this policy

We may update this policy when our services or legal obligations change. The latest version is published here, and material changes may also be notified by email or through your account.