Legal

Privacy Policy

How we handle personal information when you use our website or services.

Last updated: 25 July 2026

Who controls your information

NG Autos Repairs is responsible for the personal information described here. Privacy questions and rights requests can be sent to info@ngautosrepairs.co.uk.

Information we collect

We collect information needed to respond to enquiries, arrange and perform vehicle services, manage accounts, issue quotes and invoices, process payments, and meet legal obligations.

  • Identity and contact details, including name, email, phone number and service address.
  • Vehicle, booking, diagnostic, job, quote, invoice and payment-status information.
  • Messages, uploaded photographs or documents, reviews and support history.
  • Security and technical records such as IP-derived rate-limit identifiers and authentication logs.

Why we use it

We use information to perform a requested contract, take steps before entering a contract, comply with law, protect our services, and pursue legitimate interests such as customer support and fraud prevention. We request consent where the law requires it.

Service providers and transfers

We use specialist providers for hosting and authentication (Supabase), payments (Stripe), and transactional email (Resend). They process only the information needed to provide their service under their own contractual and security safeguards. Some processing may occur outside the UK using legally recognised transfer safeguards.

Retention and security

We keep records only as long as needed for service delivery, warranties, accounting, disputes and legal duties. Access is role-restricted, payment card details are handled by Stripe, and uploaded files are stored privately. No internet service can guarantee absolute security.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction, portability, or object to processing. You may also complain to the UK Information Commissioner’s Office. We may need to verify your identity before acting on a request.