Privacy Policy

This Privacy Policy explains how HomeFit Vehicle Services collects, uses and protects your personal data when you visit homefitmobilerepairs.co.uk or contact us. We are committed to handling your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

HomeFit Vehicle Services is a mobile vehicle repair and servicing business based in Saffron Walden (CB10). We are the data controller for the personal data we process.

[TO CONFIRM: legal entity name & type (e.g. sole trader trading as HomeFit Vehicle Services, or limited company name & number)]

[TO CONFIRM: registered/trading address]

Contact us about your data: info@homefitmobilerepairs.co.uk or call 07981 134754.

ICO registration: [TO CONFIRM: ICO registration number, if registered — check at ico.org.uk/ESDWebPages/Search]

2. What personal data we collect

a) Information you give us

When you fill in the quote/contact form on our website, or when you call or email us directly, we may collect:

• Your name
• Phone number
• Postcode
• Vehicle details (make, model, year, registration)
• Description of the work or fault
• Email address (if you provide it)

b) Analytics data (only with your consent)

If you accept analytics cookies, we collect information about how you use our website via Google Analytics 4 (provided by Google) and PostHog (EU-hosted). This may include: pages visited, time spent, device and browser type, and approximate location derived from your IP address. Your IP address is anonymised before storage. This data is used solely to improve the website and is never used for advertising. For details, see our Cookie Policy.

c) Server and security logs

Our hosting provider automatically records basic server logs (IP addresses, page requests, error codes) for security and operational purposes. We do not routinely review these unless investigating a security incident.

3. Why we use your data and our lawful basis

• To respond to your enquiry and provide a quote — lawful basis: performance of a contract (or steps taken prior to entering a contract) and legitimate interests.
• To carry out the agreed work and communicate with you about it — lawful basis: performance of a contract.
• To improve our website — lawful basis: consent (analytics cookies only load after you click Accept).
• To maintain security and prevent fraud — lawful basis: legitimate interests.

We do not use your data for automated decision-making or profiling.

4. Cookies

We use strictly necessary cookies (to remember your cookie choice) and, with your consent, optional analytics cookies. Full details are in our Cookie Policy.

5. Who we share your data with

We do not sell your personal data. We may share it only with the following service providers acting on our instructions:

• Website hosting: [TO CONFIRM: hosting provider name, e.g. Vercel / Netlify / GitHub Pages]
• Analytics (consent only): Google LLC (Google Analytics 4) and PostHog Inc (EU-hosted analytics).
• Map tiles: OpenStreetMap contributors (map tiles rendered by a third-party tile provider — no personal data is sent, only your browser's IP address when loading map images).
• Quote form delivery: [TO CONFIRM: how enquiries are delivered — e.g. Netlify Forms, Formspree, direct email via SMTP]

All processors are contractually required to handle your data only on our instructions and in line with data protection law.

6. International transfers

Google Analytics 4 may involve transfers of data outside the UK and European Economic Area. Google relies on the UK International Data Transfer Agreement and Standard Contractual Clauses as appropriate safeguards. PostHog is hosted in the EU (Frankfurt) and does not transfer data outside the EEA.

7. How long we keep your data

• Enquiry and quote data: [TO CONFIRM: retention period — e.g. "for as long as needed to fulfil the enquiry and for up to X months thereafter", or until you ask us to delete it]
• Analytics data: retained according to each provider's settings (Google Analytics default retention is 14 months; PostHog default is 1 year).
• Server logs: typically retained for a short period (usually up to 30 days) by the hosting provider.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Rectification of inaccurate or incomplete data.
• Erasure ("right to be forgotten") in certain circumstances.
• Restriction of processing in certain circumstances.
• Object to processing based on legitimate interests.
• Data portability where processing is automated and based on consent or contract.
• Withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal). To withdraw analytics consent, clear this site's cookies/local storage in your browser settings — the cookie banner will reappear.

To exercise any of these rights, email us at info@homefitmobilerepairs.co.uk or call 07981 134754. We will respond within one calendar month.

9. Right to complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk/make-a-complaint .

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

Any questions? Contact us at info@homefitmobilerepairs.co.uk or call 07981 134754.