Privacy policy

Who we are

RaceHub is an online store operated by LLC RaceHub, a limited liability company registered in Kazakhstan ([BIN: to be filled in]). When you place an order or open an account, we decide what happens to your personal data, which makes us the controller of it.

Write to [email protected] about anything on this page.

What we collect

We collect what an order needs and very little beyond that.

Account details: your email address and a password. Passwords are stored as hashes, so nobody here can read yours.
Order details: first and last name, delivery address, city, postal code, country, phone number, the items you bought and any note you added to the order.
Payment status: whether an order is paid and by which method. Card numbers never reach our servers. You enter them on the payment provider's page and they stay with the provider.
Vehicle details you choose yourself: make, model, generation and engine, kept so the catalogue keeps showing parts that fit your car.
Technical data: IP address and browser user agent land in server logs, which is unavoidable for a site that has to defend itself.

We run no analytics, no advertising pixels and no third party trackers. Nothing on these pages is building a profile of you.

Why we use it

To take, pack and ship your order and to talk to you about it. Without this there is no order to fulfil.
To run your account, your order history and your saved addresses.
To meet accounting and tax obligations in Kazakhstan, which dictate how long order records must be kept.
To keep the store secure and to look into fraud and abuse.
To send the newsletter, and only if you asked for it. Every issue carries an unsubscribe link that works immediately.

If you are in the European Union or the United Kingdom, these map to Article 6(1)(b) for the contract, 6(1)(c) for our legal obligations, 6(1)(f) for security, and 6(1)(a) consent for the newsletter.

Who else sees it

Only those who have to move the parcel or the money:

The carrier delivering your order, which needs your name, address and phone number.
Customs authorities in your country, which receive the declaration travelling with the parcel.
The payment provider handling your payment.
Our hosting and CMS infrastructure, which stores the data on our instructions.

We do not sell personal data and we do not hand it to anyone for their marketing.

Sending data abroad

We operate from Kazakhstan and our servers sit outside the European Economic Area. Ordering from the EU or the UK means your data is transferred to Kazakhstan so that we can perform your order. Kazakhstan is not covered by an EU adequacy decision, and this transfer relies on Article 49(1)(b) of the GDPR, which allows a transfer that is necessary to perform a contract you asked for.

How long we keep it

Order and accounting records: for the period Kazakhstan tax law requires, currently five years from the end of the reporting period.
Account data: until you ask us to close the account.
Newsletter subscription: until you unsubscribe.
Server logs: a rolling window measured in weeks.

Your rights

You can ask to see the data we hold about you, to correct it, to delete it, to limit what we do with it, to receive it in a portable format, or to object to processing we base on our legitimate interest. In the EU and the UK these are Articles 15 to 21 of the GDPR. In Kazakhstan the Law on Personal Data and its Protection gives you equivalent rights, including withdrawing consent at any time.

Write to [email protected] and we will answer within 30 days. We may first ask you to confirm that you are the account holder, because handing account data to whoever asks for it would be the worse mistake.

Closing your account does not erase invoices we are legally required to keep. Those remain until their retention period runs out and are not used for anything else.

If you think we have handled your data badly, tell us and we will try to put it right. You can also complain to your national data protection authority, or in Kazakhstan to the authorised body for personal data protection.

Children

This store is not meant for children and we do not knowingly collect their data.

Changes

When this policy changes we update the date below, and for anything that materially affects you we say so by email.

Last updated: 19 August 2026