Privacy policy

1. Introduction

This privacy policy explains how Workshop Buddy handles personal data when you access, use, or administer the Workshop Buddy platform. It is intended to give workshop owners and users a clear overview of how data is processed in connection with the service.

2. Data controller

Workshop Buddy Ltd is the data controller for account, service administration, and billing information processed in connection with Workshop Buddy. If you have questions about this policy or want to exercise your data rights, contact support@workshopbuddy.co.uk. Our registered business address is [Add registered business address].

3. Data we collect

• Account information such as names, email addresses, and workshop details
• Workshop operational data entered by users, including customer details, vehicle records, bookings, and job notes
• Billing information and payment-related details handled through Stripe
• Technical and usage data needed to operate, secure, and support the platform

4. How data is used

We use personal data to provide and operate Workshop Buddy, manage subscriptions and billing, provide customer support, and maintain the reliability, availability, and security of the platform.

5. Data roles

Workshops using Workshop Buddy act as the data controller for the customer, vehicle, and job information they choose to store in the platform. In relation to that workshop operational data, Workshop Buddy acts as a data processor on behalf of the workshop. For account administration and billing information about our own customers, Workshop Buddy acts as data controller.

6. Third-party processors

Workshop Buddy uses a small number of trusted service providers to help deliver the service. These include Clerk for authentication, Supabase for database hosting, and Stripe for payment processing. These providers may process personal data on our behalf as part of providing their services.

7. Data retention

We retain personal data for as long as necessary to provide the service, manage subscriptions, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary depending on the type of data and the legal or operational purpose involved.

8. Security

We use reasonable technical and organisational measures designed to help protect personal data against unauthorised access, loss, misuse, or disclosure. No system can be guaranteed completely secure, but protecting customer data is an important part of how we operate the platform.

9. User rights

Depending on the circumstances, individuals may have rights under UK GDPR, including the right to access, correct, delete, or restrict the processing of personal data. Requests can be sent to support@workshopbuddy.co.uk.

10. Changes to this policy

We may update this privacy policy from time to time. The latest version will always be published on the website, and continued use of the service after an update means the revised policy will apply.