Scuff Off Body Repairs respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, contact us, request a quotation, book a repair or otherwise communicate with us.
For the purposes of UK data protection law, Scuff Off Body Repairs is the data controller responsible for the personal information described in this policy.
1. Who We Are
Business name: Scuff Off Body Repairs
Website: www.scuffoffbodyrepairs.co.uk
Address: [INSERT BUSINESS / WORKSHOP ADDRESS]
Email: [INSERT PRIVACY OR BUSINESS EMAIL ADDRESS]
Telephone: [INSERT TELEPHONE NUMBER]
If you have any questions about this Privacy Policy or how your personal information is used, please contact us using the details above.
2. Information We May Collect
Depending on how you interact with us, we may collect the following information.
Contact Information
This may include:
- Your name
- Email address
- Telephone number
- Postal address or general location
- Preferred method of contact
Vehicle and Repair Information
When you request a quotation or book a repair, we may collect:
- Vehicle make and model
- Vehicle registration number
- Vehicle age or year
- Details of damage
- Repair requirements
- Photographs or videos of vehicle damage
- Repair history relevant to your enquiry
- Your location where a mobile repair is requested
Vehicle photographs may sometimes contain identifying information, including vehicle registration plates or surroundings visible in the image.
Enquiry and Booking Information
We may collect information relating to:
- Quotation requests
- Booking dates and times
- Messages sent through the website
- WhatsApp enquiries
- Email correspondence
- Telephone enquiries
- Details of work requested or completed
Payment and Transaction Information
Where payment is required, we may collect or receive information relating to:
- Payments made
- Invoice details
- Transaction references
- Refunds or outstanding balances
We do not normally store full debit or credit card details ourselves where payment is processed through a third-party payment provider.
Website Usage Information
When you use our website, certain technical information may be collected automatically, including:
- IP address
- Browser type
- Device type
- Operating system
- Pages visited
- Referring website
- Approximate location
- Date and time of visits
- Website interaction information
This may be collected through server logs, cookies, analytics services or similar technologies.
3. How We Collect Your Information
We may collect personal data when you:
- Complete a quotation or contact form
- Upload photographs
- Contact us by telephone
- Contact us by email
- Contact us through WhatsApp
- Make a booking
- Visit our workshop
- Request a mobile repair
- Interact with us through social media
- Use our website
- Make a payment
- Leave a review or testimonial
We may also receive information from third-party platforms where you choose to contact us through those platforms.
4. How We Use Your Information
We may use your personal information to:
- Respond to enquiries
- Assess vehicle damage
- Prepare repair quotations
- Arrange appointments
- Provide repair services
- Communicate with you about an existing booking
- Attend your location for a mobile repair
- Issue invoices and process payments
- Maintain business and accounting records
- Handle complaints or disputes
- Improve our website and services
- Protect our website and systems from misuse
- Comply with legal and regulatory obligations
- Send marketing communications where permitted by law
We will only use personal data where we have a lawful basis for doing so.
5. Our Lawful Bases for Processing
Under the UK GDPR, we must have a lawful basis for processing your personal data.
Depending on the circumstances, we may rely on the following.
Contract
We may process your information where it is necessary to:
- Provide a quotation at your request
- Arrange a booking
- Carry out a repair
- Process payments
- Fulfil our contractual obligations
Legitimate Interests
We may rely on legitimate interests where it is reasonably necessary for operating and improving our business.
This may include:
- Responding to general enquiries
- Maintaining customer records
- Preventing fraud or misuse
- Improving our services
- Managing customer relationships
- Defending legal claims
Where we rely on legitimate interests, we consider whether our interests are balanced against your privacy rights.
Legal Obligation
We may process information where necessary to comply with legal duties, including:
- Tax and accounting obligations
- Financial record keeping
- Responding to lawful requests from authorities
- Complying with legal claims or court orders
Consent
We may rely on your consent where required, including for certain:
- Marketing communications
- Non-essential cookies
- Analytics or advertising technologies
- Publication of customer testimonials, photographs or other content where consent is appropriate
Where we rely on consent, you may withdraw it at any time.
6. Vehicle Photographs
Photographs are often an important part of assessing damage and preparing an accurate quotation.
Images you send us may be used to:
- Assess repair requirements
- Prepare a quotation
- Plan repair work
- Maintain a record of work undertaken
- Compare before-and-after condition
We will not ordinarily use identifiable customer photographs for advertising or social media without permission where such use would involve personal data.
Where possible, registration plates or other identifying information may be obscured before images are used publicly.
7. Before-and-After Photographs and Social Media
Scuff Off Body Repairs may photograph completed repairs for:
- Our portfolio
- Recent Repairs pages
- Social media
- Website galleries
- Promotional material
Where those photographs identify you or otherwise amount to personal data, we will only use them where we have an appropriate lawful basis.
We will not publish your name alongside a repair photograph without your permission.
8. Sharing Your Personal Information
We do not sell your personal information.
We may share information with trusted third parties where necessary, including:
- Website hosting providers
- Email providers
- Payment processors
- Accounting or bookkeeping providers
- IT support providers
- Website developers
- Form or enquiry service providers
- Cloud storage providers
- Google services
- Meta, Instagram, Facebook or other social platforms where applicable
- WhatsApp / Meta where you contact us through WhatsApp
- Legal or professional advisers
- Government, regulatory or law enforcement authorities where legally required
Third parties are only given access to information where necessary for the relevant service or legal requirement.
9. Google Maps
Our website may use Google Maps to display the location of our workshop or provide directions.
When a Google Map is loaded, Google may receive information including your:
- IP address
- Browser information
- Device information
- Interaction with the embedded map
Google may also use cookies or similar technologies depending on your browser settings and consent choices.
Google operates independently as a third-party service provider and its own privacy terms apply to its processing.
10. WhatsApp
If you contact us through WhatsApp, your message and associated account information will also be processed by WhatsApp and Meta under their own privacy terms.
Information sent through WhatsApp may include:
- Your telephone number
- Account name
- Profile information
- Messages
- Vehicle photographs
- Videos
- Documents
Please avoid sending information that is not necessary for your repair enquiry.
11. Cookies and Similar Technologies
Our website may use cookies and similar technologies.
These may include:
- Strictly necessary cookies
- Security cookies
- Preference cookies
- Analytics cookies
- Marketing cookies
- Embedded third-party content technologies
Under PECR, website visitors must be told about cookies and similar technologies. Non-essential technologies generally require valid consent before they are used.
Strictly necessary cookies may be used without consent where they are required to provide a service requested by the user.
Where the website uses non-essential cookies, you should be given the ability to accept or reject them through the website’s cookie controls.
Further information should be provided in our separate Cookie Policy.
12. Analytics
We may use analytics services to understand how visitors use the website and to help us improve its performance.
Depending on the services enabled, analytics information may include:
- Pages viewed
- Time spent on the website
- General geographic location
- Device type
- Browser
- Website interactions
- Referring source
Where analytics require consent under PECR, they will only be activated after valid consent has been obtained.
13. Marketing
We may occasionally contact customers about our services where permitted by law.
Where consent is required for electronic marketing, we will obtain it before sending such communications.
You can withdraw your consent or opt out of marketing at any time by contacting us or using any unsubscribe mechanism included in the communication.
We will not sell your information to third parties for marketing purposes.
14. How Long We Keep Your Information
We only retain personal data for as long as reasonably necessary.
Retention periods will depend on the type of information and why it was collected.
For example:
- General enquiries that do not lead to work may normally be retained for up to 12 months
- Quotation information may normally be retained for up to 24 months
- Customer and repair records may normally be retained for up to 6 years
- Invoice and accounting records may normally be retained for at least 6 years where required for tax or accounting purposes
- Marketing information may be retained until you withdraw consent or object to further marketing
- Website security logs may be retained for a shorter period where appropriate
We may retain information for longer where necessary to establish, exercise or defend legal claims.
15. How We Protect Your Information
We take reasonable technical and organisational measures to protect personal information against:
- Unauthorised access
- Loss
- Misuse
- Disclosure
- Alteration
- Destruction
Measures may include secure website hosting, restricted administrative access, account passwords, software updates, backups and appropriate access controls.
However, no internet-based system can be guaranteed to be completely secure.
16. International Transfers
Some third-party technology providers may process personal information outside the United Kingdom.
Where personal data is transferred internationally, we will take reasonable steps to ensure appropriate protections are in place as required by UK data protection law.
Depending on the destination and provider, these protections may include:
- UK adequacy regulations
- Approved contractual safeguards
- The UK International Data Transfer Agreement
- The UK Addendum to EU Standard Contractual Clauses
- Other legally recognised safeguards
17. Your Data Protection Rights
Depending on the circumstances, you may have the right to:
- Request access to personal information we hold about you
- Ask us to correct inaccurate information
- Ask us to delete personal information
- Ask us to restrict how information is used
- Object to certain types of processing
- Request transfer of certain information to another provider
- Withdraw consent where processing is based on consent
- Object to direct marketing
These rights depend partly on the lawful basis being used for the processing. The ICO specifically requires organisations to explain applicable rights and clearly bring the right to object to people’s attention.
Your Right to Object
You have the right to object to the processing of your personal data where we rely on legitimate interests.
You also have an absolute right to object to your personal information being used for direct marketing.
To exercise any of your rights, contact us using the details at the beginning of this policy.
We may need to confirm your identity before dealing with a request.
18. Complaints
If you are unhappy with how we have handled your personal information, please contact us first so that we have an opportunity to resolve the matter.
You also have the right to complain to the UK supervisory authority:
Information Commissioner’s Office (ICO)
The ICO provides information and complaint services through its official website.
Information Commissioner’s Office
19. Third-Party Websites
Our website may contain links to third-party websites or services including social-media platforms.
We are not responsible for the privacy practices of third-party websites.
You should review the privacy information provided by those organisations before supplying them with personal information.
20. Children
Our services are not specifically directed at children.
We do not knowingly seek to collect personal information from children through the website.
If you believe a child has supplied personal information to us without appropriate authority, please contact us.
21. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to:
- Our services
- Website functionality
- Third-party providers
- Data protection law
- Regulatory guidance
The latest version will always be published on this website with the date it was last updated.
Contact Us About Privacy
If you have any questions about this policy, would like to exercise your rights or want to raise a privacy concern, please contact:
Scuff Off Body Repairs
Email:
Telephone: 07807 028080