GarageRevs Privacy Notice

This privacy notice for GarageRevs ("GarageRevs", "we", or "us"), describes how and why we might collect, store, use, and process personal data.

Here are a few terms you'll find throughout this notice:

• Website / Services. All information, software, and tools made available to you at garagerevs.com and its subdomains.
• Users. Independent garages and their staff who have registered for a GarageRevs account.
• Customers. Vehicle owners whose information is processed by Users within the GarageRevs platform.
• Viewers. People who visit the Website, but may not be a User or Customer.

How we collect your information

We collect information that you voluntarily provide to us when you:

• Register as a GarageRevs User,
• Express interest in obtaining information about us, or
• Otherwise contact us.

The personal information we collect may include:

• Names
• Email addresses
• Passwords
• Contact preferences
• Business details (e.g., garage name, address, VAT number)

We may combine information automatically collected with other information we collected about you including from publicly available sources. We do not process any sensitive information (as per the UK GDPR Article 9). We do not rent, buy, or sell personal information.

As a User, you will input data regarding your Customers and their vehicles (e.g., names, contact details, vehicle registration marks, service history) into the GarageRevs platform. We act as a data processor for this Customer data, storing and processing it solely to provide the Services to you. We do not use your Customer data for our own marketing purposes.

If you purchase a paid version of GarageRevs, our payment processor (Stripe) will collect and store your billing address and credit card information. You may find their privacy notice on their website.

Legal basis for processing

The UK General Data Protection Regulation (UK GDPR) requires us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases:

Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time.

Performance of a contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.

Legitimate interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms.

Legal obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

How we process your information

We process personal data for a variety of reasons, depending on how you interact with GarageRevs.

Account registration. When you sign up for GarageRevs, we collect your name, email address, and password to create an account.

Service delivery. We may process your information to provide you with the GarageRevs service, including: facilitating workshop management, managing your account, and responding to your inquiries.

Subscription management. We use the payment information you provide to us in order to alert you of past, current, and upcoming charges, to allow us to present the billing history to you, and to perform internal financial processes.

Administrative communications. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.

Feedback. We may process your information when necessary to request feedback and to contact you about your use of GarageRevs.

Marketing communications. We may process your personal information to notify you about new product features from time-to-time or other information we believe is relevant to you. You may opt out of receiving these communications at any time.

Legal compliance. We may process your information to comply with applicable legal or regulatory obligations.

How we share your information

We may share your information with trusted parties in order to deliver our products and services to you. These parties include:

• Data processors (e.g., hosting providers, payment processors, API providers like UKVehicleData)
• Legal professionals
• Our accountant
• Public authorities (when we are required to report to them)

We require these parties to agree to take reasonable steps to keep the Personal Data that we provide to them secure. We do not authorize them to use or disclose your Personal Data except in connection with providing their services.

We do not sell your information to any third parties or disclose it in exchange for money or other valuable consideration.

In the event of a merger, sale of company assets, financing, or acquisition of all or a portion of our company, we may share or transfer your information to the acquiring company.

Transfer of data internationally

GarageRevs is based in the United Kingdom and primarily targets the UK market. Our application and database servers are located in the UK or the European Economic Area (EEA). If we transfer your data outside the UK or EEA, we will take all necessary measures to protect your personal information in accordance with this privacy notice and applicable UK data protection laws, such as using Standard Contractual Clauses or the UK International Data Transfer Agreement.

Your privacy rights

You have the right to:

• Request access and obtain a copy of your personal information,
• Request rectification or erasure,
• Restrict the processing of your personal information,
• In certain circumstances, transfer your data to you or another organization, and
• In certain circumstances, object to the processing of your personal information.

Under UK data protection laws, we will consider and act upon any request in accordance with these laws. If you believe we are unlawfully processing your personal information, you also have the right to complain to the Information Commissioner's Office (ICO). We encourage you to reach out to us first so we can work to resolve the matter with you.

Your account

In order to keep your Personal Data accurate and complete, you can log in to review and update your account information via your account settings page. If you would like to make a request, cancel your account or request we delete or no longer use your account information to provide you our Website, contact us at support@garagerevs.com.

Promotional email

You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us at support@garagerevs.com. However, we may still communicate with you to send you service-related, transactional messages that are necessary for the administration and use of your account.

Cookies

You may refrain from providing or may withdraw your consent for Cookies via your browser settings. Please keep in mind that Cookies are required to authenticate GarageRevs Users as well as perform some actions within GarageRevs, so in order to use the Website, some Cookies are often required.

Security measures

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process.

We take the security of your personal information very seriously. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. You should only access GarageRevs within a secure environment.

Policy regarding children

We do not knowingly solicit data from or market to children under 18 years of age. By using GarageRevs, you represent that you are at least 18. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records.

Changes to this notice

We may update this privacy notice from time to time. The updated version will be indicated by a revised "Last updated" date and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

Contacting us

If you have any questions or comments about this notice or any other matters, please contact us at support@garagerevs.com.