1. Who we are
Sheffield Auto Care Ltd (“we”, “us”) operates the garage at 47 Penistone Road, Sheffield, S7 1ER and this website. We are the data controller for the personal data described in this policy. Our contact details are at the bottom of this page.
We are committed to protecting your privacy and to handling your data transparently, lawfully and only for as long as we genuinely need it.
2. What data we collect
Information you give us
- Booking and enquiry forms: your name, email address, telephone number, vehicle registration, vehicle make and model, your preferred date, the service you are interested in and whatever you tell us in the message field.
- In the garage or over the phone: the same contact details, plus your vehicle’s service and repair history and any payment reference.
Information collected automatically
- Essential technical data required to serve the website securely (such as your IP address in server logs).
- Optional analytics data, only if you accept optional cookies. See our Cookie Policy.
We do not knowingly collect data from children, and we do not collect special category data through this website.
3. Why we use it and our lawful basis
- To respond to your booking request and arrange the work , lawful basis: consent (you tick the box when you submit the form) and, once you become a customer, performance of a contract.
- To keep a service and repair history for your vehicle, lawful basis: legal obligation (MOT and trading records) and legitimate interests in honouring our warranty.
- To keep accounting and VAT records, lawful basis: legal obligation.
- To understand how the website is used, lawful basis: consent, withdrawable at any time.
We do not send marketing emails unless you have specifically asked us to, and we never sell your data to anybody.
4. Who we share it with
We share the minimum necessary with: our IT and hosting providers (who store the website and the booking database on our behalf under a written processing agreement); DVSA, where an MOT result must be recorded; parts suppliers, where a warranty claim requires it; our payment processor and our accountants. We may also disclose data where we are legally required to.
Where a provider stores data outside the UK, we rely on an adequacy decision or the UK International Data Transfer Addendum to keep your data protected to the same standard.
5. How long we keep it
- Website enquiries that do not become bookings: 12 months, then deleted.
- Customer and vehicle service records: 7 years, to support warranty claims and our legal record-keeping duties.
- Accounting and VAT records: 6 full financial years, as HMRC requires.
6. Your rights under the UK GDPR
You have the right to:
- be informed about how your data is used (this policy);
- request a copy of the data we hold about you (a subject access request);
- have inaccurate data corrected;
- ask us to erase your data where there is no overriding legal reason to keep it;
- restrict or object to our processing;
- data portability, where processing is based on consent or contract;
- withdraw consent at any time, without affecting processing already carried out.
To exercise any of these, email contact@sheffieldautocare.co.uk or write to us at the address below. We will respond within one calendar month and there is no charge.
If you are unhappy with how we have handled your data you may complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
7. Security
The website is served over HTTPS and booking submissions are stored in an access-controlled database. Access is limited to the staff who need it to do their job. No system is perfectly secure, but we take appropriate technical and organisational measures and we will notify you and the ICO of any breach that is likely to affect your rights.
8. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top always reflects the current version. See also our Cookie Policy and Terms of Service.