Privacy Policy

Your Data: Key Summary

  • Metalflake is a trading name for Calbrook Cars Ltd, who acts as the data controller. That means we’re responsible for all of the information you share with us when shopping on our site.
  • We never sell your data onto third parties, and only collect as much as we need communicate with you or deliver your orders.
  • We make every effort to protect your information, and won’t store it for longer than we need to.
  • You are in control of any marketing messages we send you. These marketing messages are treated separately to other emails we have to send you, such as order confirmations and delivery updates.

Payment Security

All our credit card data is actually handled directly by Sage Pay and your issuing bank. Metalflake at no time actually stores or even has access to your credit card details.  This is in line with PCI regulations and means your credit card security is preserved at all times.

How We Use Your Data

Your personal details, including name, email address and contact addresses

We use these to deliver your order to you, to keep you informed on its progress, for fraud prevention and detection, to personalise your web experience, and for customer services purposes.

With your permission, we may also use this information to keep you up to date about our new products and services, in our referral scheme, or in other marketing messages. If you do not wish to receive marketing messages, you can either unsubscribe using the link on our website or contact us directly.

Our payment details

We keep a record of the billing address you supply to us as part of our fraud prevention work and for future customer service enquiries, such as to give a refund. If you have paid through a third party payment provider like Paypal, we will keep a record of your email address and the payment reference. For payments with a credit or debit card, we only store the last four digits of your card for fraud and customer service reasons. Because we use SagePay to process our payments, our system never actually even has access to your other card details. This is in line with PCI regulations and means your credit card security is preserved at all times.

Information about your device and how you use our site

We may also collect information about how you move around our website, what you look at or search for, and how you shop. This may be anonymised to make improvements, or through the use of cookies, pixels, advert tags and other digital marketing technologies, may be used to create banners and ads relevant to you. These may be used on our own website or across the wider internet. We may collect information about the devices you shop on, such as your mobile or browser.

Your data; your rights

As a responsible retailer, we want to keep you informed about how we use your information. You have a right to know this, and you should also be able to ask any retailer to detail it. In line with GDPR guidelines, you have a right to request details about the data we have on you, the right to request we correct any inaccurate personal information, the right to no longer receive direct marketing messages and the right to have some or all of your data forgotten or deleted.


Metalflake may make use of ‘Cookies’ which is a file of information which we store on your computer to identify you to the site. The cookie is used to improve your future visits to Metalflake because it enables us to potentially provide you with information most relevant to you. We understand that you may object to this and therefore do not insist that you enable your cookies and indeed the site works perfectly well without them. Please refer to your individual browser's help file for instructions regarding how to disable cookies.