Your data matters

Committed to your information security

Your data matters

Understanding our commitment

Privacy Policy

Last updated: 10/12/2025

This Privacy Policy explains how we collect, use, store and protect your personal information when you use our recovery, roadside assistance, and vehicle transport services. We are committed to complying with the UK General General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services or accessing our website, you agree to the practices described in this Privacy Policy.

1. Who We Are

We are a UK-based vehicle recovery and breakdown assistance company providing support to drivers across the region.
For the purpose of data protection laws, we are the Data Controller responsible for handling your personal information.

Contact details for data protection enquiries:
Email: hadinharem@gmail.com
Phone: 07473070476
Address: Derby, UK

2. What Personal Data We Collect

We may collect the following types of information:

Information you provide directly

  • Full name
  • Contact number
  • Email address
  • Home/billing address
  • Vehicle details (make, model, registration)
  • Breakdown or recovery location
  • Payment details (processed securely through third-party processors)
  • Any additional information needed to deliver our service

Information collected automatically

When using our website, we may collect:

  • IP address
  • Device information
  • Browser type
  • Cookies and usage data
  • Website interaction behaviour

Information collected during service delivery

  • GPS or location information (when needed for recovery assistance)
  • Call recordings (for training, monitoring and safety)
  • Dashcam/CCTV footage where applicable

3. How We Use Your Information

We use your personal data for the following lawful purposes:

Service Delivery (Legitimate Interest / Contractual Obligation)

  • To respond to your recovery request
  • To locate you during a breakdown
  • To dispatch recovery vehicles or mechanics
  • To communicate with you about service updates
  • To complete billing and invoicing

Customer Support & Business Operations

  • Handling enquiries and complaints
  • Quality monitoring and staff training
  • Verifying identity where required
  • Maintaining internal records

Marketing (Consent or Legitimate Interest)

  • Sending service updates or promotional offers
  • Providing information about new services

You may opt out of marketing at any time.

Legal & Safety Obligations

  • Fraud prevention
  • Insurance claims
  • Compliance with law enforcement requests
  • Protecting our staff and customers

4. Legal Bases for Processing Data

We process your personal data under UK GDPR on the following grounds:

  • Contract – to provide the service you requested
  • Legitimate Interests – to operate, improve, and protect our business
  • Consent – for marketing communications
  • Legal Obligation – when required by law or regulatory bodies

5. How We Share Your Information

We may share your data with trusted third parties, including:

  • Recovery subcontractors or partner mechanics
  • Payment processors (e.g., Stripe, PayPal)
  • Insurance companies (when related to a claim)
  • Law enforcement or emergency services
  • IT, hosting and website service providers
  • Regulatory authorities where legally required

We do not sell, trade or rent your personal data to unauthorised third parties.

All partners must comply with GDPR and confidentiality standards.

6. International Transfers

If any service provider processes data outside the UK, we ensure adequate safeguards are in place, such as:

  • UK GDPR-approved contracts
  • Adequacy regulations
  • Secure transfer protocols

7. Data Retention

We only keep your personal data for as long as necessary, including:

  • Service records: up to 6 years (for tax, legal and insurance purposes)
  • Call recordings: up to 12 months, unless required longer for legal reasons
  • CCTV/dashcam footage: 30–90 days, unless required for incidents or investigations
  • Marketing data: until you opt out

After these periods, data is securely deleted or anonymised.

8. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Erase your data (right to be forgotten)
  • Restrict processing
  • Object to processing (including marketing)
  • Data Portability
  • Withdraw consent at any time

To exercise your rights, contact us at:
Email: hadinharem@gmail.com

You also have the right to complain to the Information Commissioner’s Office (ICO):
https://ico.org.uk

9. Cookies & Website Tracking

Our website may use cookies to:

  • Improve website performance
  • Track analytics (e.g., Google Analytics)
  • Enable core functionality

You can disable cookies in your browser settings, but some functions may not work fully.

A full cookie policy can be provided on request.

10. Security Measures

We take data protection seriously and use:

  • Encrypted databases
  • Secure servers
  • Firewalls and anti-malware tools
  • Access controls and staff training
  • Secure payment gateways

While we take all reasonable steps to protect data, no method of transmission is 100% secure.

11. Call Recording & CCTV

For safety and quality purposes, we may record:

  • Calls to our office
  • CCTV at our premises
  • Dashcam footage from recovery vehicles

This is processed under legitimate interests and safety obligations.

12. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of other websites.

13. Updates to This Privacy Policy

We may update this policy occasionally. Any changes will be posted on this page with a revised “Last Updated” date.

14. Contact Us

If you have any questions, requests or concerns about this Privacy Policy or how we handle your personal data, please contact:

Data Protection Officer
Email: hadinharem@gmail.com
Phone: 07473070476
Address: Derby, UK