Privacy Policy

1. Information We Collect

We collect the following types of personal data:

• Customer details: Name, email address, phone number, postal address, and postcode.
• Business details: Company name, VAT registration number, and company registration number (for business customers).
• Vehicle information: Registration number, make, model, year, VIN, mileage, MOT and service due dates. Some of this data may be auto-populated using the DVLA Vehicle Enquiry Service.
• Job and service records: Descriptions of work required, scheduled dates, assigned mechanic, parts used, labor costs, and job notes.
• Financial data: Invoice and quote details, payment method (cash, card, or transfer), and transaction amounts. We do not store full card numbers — card payments are processed securely by our payment provider.
• Account data: Email address and authentication details for users who log in to manage the workshop.

2. How We Use Your Information

We use your personal data to:

• Create and manage customer accounts and vehicle records.
• Schedule, track, and complete repair and service work.
• Generate quotes, invoices, and related financial documents.
• Process payments and manage outstanding balances.
• Communicate with you about your bookings, invoices, and MOT/service reminders.
• Maintain inventory and supplier records.
• Comply with legal, tax, and accounting obligations.

3. Legal Basis for Processing

We process your personal data under the UK General Data Protection Regulation (UK GDPR) on the following lawful bases: (a) performance of a contract for the services you request; (b) compliance with legal obligations such as tax and accounting records; and (c) our legitimate interests in operating and improving the workshop business.

4. Data Sharing and Third Parties

We do not sell your personal data. We may share it with the following third parties where necessary:

• DVLA Vehicle Enquiry Service — to retrieve vehicle details (make, model, MOT status) from a registration number.
• Payment providers — to process card and other electronic payments securely.
• Email service providers — to send you invoices, quotes, and reminders.
• Accounting and tax authorities — where required by law.

5. Data Storage and Security

Your data is stored securely on cloud-based servers provided by our platform provider. Access is restricted to authorised personnel and protected by authentication controls. We apply appropriate technical and organisational measures to safeguard your data against unauthorised access, loss, or misuse. Payment card details are never stored by us — they are handled entirely by our PCI-compliant payment processor.

6. Data Retention

We retain customer, vehicle, and financial records for as long as necessary to provide our services and to comply with legal and tax record-keeping requirements (typically a minimum of six years for financial records under HMRC rules). After this period, data is securely deleted or anonymised.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data (subject to legal retention requirements).
• Object to or restrict certain types of processing.
• Request data portability.
• Withdraw consent for processing based on consent.
• Lodge a complaint with the Information Commissioner's Office (ICO).

8. Children's Privacy

The App is not directed at children under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted within the App with an updated "Last updated" date. We encourage you to review this page periodically.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: