Privacy Policy

1. Information We Collect

We collect various types of information to provide and improve our automotive repair services:

Personal Information

• Name and contact details (address, phone number, email)
• Vehicle information (make, model, registration number, VIN)
• Insurance details and claim information
• Payment information and billing details
• Service history and repair records
• Communication preferences

Automatically Collected Information

• IP address and browser information
• Website usage data and analytics
• Device information and operating system
• Cookies and similar tracking technologies
• Location data (with your consent)

Information from Third Parties

• Insurance company details and claims data
• Vehicle history reports
• Credit reference information (for business accounts)
• Marketing partner referrals

2. How We Use Your Information

We use your personal information for the following purposes:

Service Delivery

• Processing and completing vehicle repairs
• Managing appointments and scheduling
• Providing customer support and communication
• Processing payments and invoicing
• Managing warranty and guarantee claims

Business Operations

• Maintaining service records and history
• Quality assurance and service improvement
• Compliance with legal obligations
• Fraud prevention and security measures
• Insurance claim processing and liaison

Marketing and Communications

• Sending service reminders and maintenance notifications
• Marketing communications (with your consent)
• Customer satisfaction surveys
• Industry news and updates
• Promotional offers and special deals

3. Legal Basis for Processing

Under UK GDPR, we process your personal information based on the following legal grounds:

Contract Performance

Processing necessary to perform our services contract with you, including vehicle repairs, maintenance, and related customer support.

Legitimate Interests

Processing for our legitimate business interests, such as improving services, preventing fraud, maintaining security, and direct marketing to existing customers.

Legal Compliance

Processing required to comply with legal obligations, including tax records, insurance requirements, and regulatory compliance.

Consent

Processing based on your explicit consent, such as marketing communications, cookies, and location tracking.

4. Information Sharing and Disclosure

We may share your information with third parties in the following circumstances:

Service Providers

• Insurance companies and assessors
• Parts suppliers and manufacturers
• Payment processors and financial institutions
• IT service providers and cloud storage
• Professional advisors (legal, accounting)

Legal Requirements

• Law enforcement and regulatory authorities
• Court orders and legal proceedings
• Tax authorities and auditors
• Professional regulatory bodies

Business Transfers

In the event of a merger, acquisition, or sale of business assets, your information may be transferred to the new entity, subject to the same privacy protections.

5. Data Security

We implement robust security measures to protect your personal information:

Technical Measures

• SSL encryption for data transmission
• Secure database storage with access controls
• Regular security audits and vulnerability assessments
• Firewall and intrusion detection systems
• Multi-factor authentication for staff access

Organizational Measures

• Staff training on data protection and privacy
• Regular review of access permissions
• Incident response and breach notification procedures
• Data protection impact assessments
• Regular policy updates and compliance reviews

6. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

• Customer records: 7 years after last service for warranty and legal compliance
• Financial records: 7 years for tax and accounting requirements
• Marketing consent is withdrawn or 3 years of inactivity
• Website analytics: 26 months from collection date
• CCTV footage: 30 days unless required for investigation
• Communication records: 3 years for quality and training purposes