Privacy Policy

Last Updated: 1st January 2026

1. Introduction

Auto Repair Centre (Loughton) Ltd ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We may collect and process the following personal data:

2.1 Identity Data

• Name, title
• Date of birth (for age verification if required)

2.2 Contact Data

• Address
• Email address
• Telephone numbers

2.3 Vehicle Data

• Vehicle registration number
• Make, model, and year
• VIN (Vehicle Identification Number)
• MOT and service history
• Mileage records

2.4 Transaction Data

• Details of services provided
• Payment information and history
• Invoices and receipts

2.5 Technical Data

• IP address
• Browser type and version
• Device information
• Pages visited on our website

3. How We Use Your Data

Purpose	Legal Basis
Providing MOT testing, servicing, and repairs	Contract performance
Processing payments	Contract performance
Sending service reminders (MOT due, service due)	Legitimate interest
Responding to enquiries	Contract performance / Legitimate interest
Legal and regulatory compliance (DVSA records)	Legal obligation
Marketing communications (with your consent)	Consent
Improving our website and services	Legitimate interest

4. Who We Share Your Data With

We may share your personal data with:

• DVSA (Driver and Vehicle Standards Agency): MOT test results are submitted electronically to the DVSA database as required by law.
• Parts suppliers: For warranty claims and parts ordering.
• Payment processors: To process card payments securely.
• Professional advisers: Accountants, lawyers, insurers for business purposes.
• HMRC: For tax and legal compliance.

We do not sell your personal data to third parties.

5. Data Retention

We retain your personal data for the following periods:

Data Type	Retention Period
Customer records and service history	7 years after last service
MOT records	7 years (as required by DVSA)
Invoice and payment records	7 years (tax requirements)
Marketing consent records	Until consent is withdrawn
Website analytics data	26 months

6. Your Rights

Under UK GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your data (subject to legal retention requirements).
• Right to Restrict Processing: Request limitation of how we use your data.
• Right to Data Portability: Request your data in a portable format.
• Right to Object: Object to processing based on legitimate interests or for marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details above. We will respond within one month.

7. Data Security

We implement appropriate security measures to protect your personal data, including:

• SSL encryption on our website
• Secure payment processing
• Restricted access to personal data
• Regular security reviews
• Staff training on data protection

8. Cookies

Our website uses cookies. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies.

10. Children's Privacy

Our services are not directed at children under 18. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on our website with the "Last Updated" date shown above.

12. Complaints

If you have concerns about how we handle your personal data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

13. Contact Us

For any questions about this Privacy Policy or your personal data: