Garage terms · Deposit and refund policy · Privacy notice · Cookie notice · Website terms of use · Complaints
Privacy notice
1. Who we are
ONEFIX GARAGE LTD, trading as ONEFIX, is a company registered in England and Wales (company number 14716562). Registered office and workshop: Plas Acton Garage, 282 Chester Road, Wrexham, LL12 8DU. Telephone 01978 356983. Email hello@onefixuk.com.
We are the data controller for the personal data described in this notice and are registered with the Information Commissioner's Office. For anything about your personal data, or for any further information about the company, write to privacy@onefixuk.com or to the address above.
ONEFIX shares a customer record system with ONECARS Ltd (our sister used-car business). Where you are a customer of both, the two companies act as joint controllers only for the purpose of keeping one accurate record of who you are; each remains solely responsible for its own dealings with you.
2. What we collect
- Identity and contact — name, mobile number, email, address.
- Vehicle — registration, make, model and details we look up about it (MOT history and expiry, tax status, specification).
- Bookings and work — what you booked, what we found, photos we take during a health check, estimates, what you approved or declined and when, invoices.
- Payments — amount, date and payment reference. Card details are taken by our payment provider; we never see or store your full card number.
- Communications — messages between us by email, SMS or WhatsApp, and calls to our number (including missed calls, so we can call you back).
- Things you send us — photos or short videos of a fault you upload with a booking.
- Website use — pages viewed and actions taken, recorded against a hashed (one-way scrambled) IP address, not your identity. See our cookie notice.
3. Why we use it, and the lawful basis
| Purpose | Lawful basis |
|---|---|
| Taking and carrying out your booking, and keeping you informed about it (confirmation, reminder, "your car is ready") | Performance of a contract with you |
| Preparing estimates and recording your approval, including the time, the device address and an exact copy of what you approved | Performance of a contract; the record is our evidence of what was agreed |
| Invoicing, VAT and accounting records | Legal obligation (HMRC) |
| MOT and service reminders to existing customers | Legitimate interests, with the right to opt out at any time |
| Calling or messaging you back when we miss your call | Legitimate interests — responding to an enquiry you made |
| Following up work we advised and you chose not to have done yet | Legitimate interests — safety-relevant advice about your own vehicle |
| Looking up your vehicle with DVSA, DVLA and vehicle data providers | Legitimate interests — accurate, faster bookings and quotes |
| Marketing to people who have not been our customer | Consent, which you can withdraw at any time |
| Handling complaints | Legitimate interests and, where applicable, legal obligation |
| Preventing fraud and keeping our systems secure | Legitimate interests |
| Using AI tools to help draft messages and read supplier invoices | The same basis as the underlying purpose; see section 7 |
4. Who we share it with
Only what each needs, and only for the purposes above:
- Our payment provider, to take payments and deposits.
- Messaging and email providers, to send you SMS, WhatsApp and email.
- Our accounting software and accountant.
- Vehicle data providers (DVSA, DVLA and commercial vehicle-data services) — your registration is sent to look the vehicle up.
- Our hosting and infrastructure providers, who store data on our behalf in the United Kingdom.
- Our AI model provider, which processes text on our instructions and does not use it to train its models.
- Independent technicians who carry out work on our behalf receive the job reference, the vehicle and the work required — never your name, number, email or address.
- Professional advisers, insurers, and authorities where the law requires.
We do not sell personal data.
5. International transfers
Our systems and their data are hosted in London. Some of our providers (payments, messaging, email, AI) are based in, or support their services from, the United States. Where personal data leaves the UK we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses with that provider.
6. How long we keep it
| Data | Kept for | Why |
|---|---|---|
| Invoices, payments and VAT records | 6 years plus the current year | HMRC |
| Jobs, health checks and photos | 7 years | Product liability and warranty |
| Estimates and your approvals | 6 years | Limitation period for disputes |
| Messages between us | 3 years | Customer service and dispute defence |
| Website analytics | 26 months | Year-on-year comparison |
| Marketing preferences after you opt out | Indefinitely, as a suppression record only | So we do not contact you again |
7. Automated processing
We use AI tools to help draft routine messages and to read supplier invoices. No decision with a legal or similarly significant effect on you is made solely automatically. Every estimate, price, promise or offer is reviewed and approved by a member of our staff before it reaches you.
8. CCTV at the workshop
Plas Acton Garage is covered by CCTV, which records images and sound, for the safety of customers and staff, the security of vehicles in our care, and the prevention and investigation of crime. Signs at the premises say where recording takes place. The lawful basis is our legitimate interests in those purposes. Recordings are kept for 28 days unless they are needed for an incident, a claim or a request from the police, and are shared only with the police, our insurers or legal advisers when required. You may ask for footage of yourself under your right of access; contact privacy@onefixuk.com.
9. Your rights
You have the right to: access the personal data we hold about you; have inaccurate data corrected; have data erased where we no longer need it; restrict or object to processing, including objecting to marketing at any time; receive the data you gave us in a portable form; withdraw consent where consent is the basis; and not be subject to a solely automated decision with legal effect. To exercise any of these, contact us at privacy@onefixuk.com. We will respond within one month.
You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or 0303 123 1113.
10. Providing your data
Your name, a mobile number and your vehicle registration are needed to make a booking; without them we cannot take it. Everything else is optional.
11. Changes
We will post any change to this notice here, with the date it took effect.