GDPR is not as scary as it sounds. For a small garage there are really only five things to have in place.
1. A privacy notice
One page describing what data you hold, why, and how long. Link it in your booking flow.
2. A lawful basis per activity
Bookings and invoices are 'contract'. Marketing SMS is 'consent'. Keep them separate.
3. Deletion on request
A customer can ask you to delete their data. You should be able to do it in minutes, not weeks.
4. Data export on request
You should be able to export their bookings, vehicles and invoices to a file.
5. A breach process
If data is exposed, you have 72 hours to notify the ICO. Write down your process before you need it.
Frequently asked questions
- Do I need to register with the ICO?
- Yes — most garages holding customer records need to pay the ICO fee (usually £40–£60/year).
Try GarageOS free
Modern garage management software built for UK independent workshops.