Privacy Policy

This Privacy Policy explains how GarageOS ("we", "us") collects, uses and protects personal data when you use our platform. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who is the controller?

GarageOS is the data controller for Partner account data and for any data we process to run and improve the platform. Partners are the data controllers of the Customer data they collect through their own booking pages; we act as a processor on their behalf.

2. What data we collect

• Account data: name, email, phone, password (hashed), garage details.
• Customer booking data: name, contact details, vehicle registration, service notes, photos.
• Usage data: IP address, device, browser, pages viewed, timestamps.
• Legal acceptance records: date, time, version of documents accepted, IP, user agent.

3. How we use it

• To provide and operate the booking platform.
• To authenticate users and prevent fraud or abuse.
• To send service messages and account notifications.
• To comply with legal obligations.

4. Sharing

We do not sell personal data. We share data only with sub-processors strictly needed to run the platform (hosting, email delivery, error monitoring) and with authorities where legally required.

5. Retention

We keep account data for the lifetime of the account plus a reasonable period afterwards. Booking and customer history is retained while the Partner account is active. Legal acceptance records are retained for at least 7 years.

6. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, and to data portability. To exercise these rights contact us at privacy@garageos.app.

7. Security

We use industry-standard encryption in transit and at rest, role-based access controls, and tenant data isolation enforced at the database layer.

8. International transfers

Data is hosted in the UK / EEA wherever practicable. When transfers outside the UK / EEA are necessary we use Standard Contractual Clauses or equivalent safeguards.

9. Complaints

If you believe we have not handled your data properly you may complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.