Privacy notice

Who is responsible for your data

The controller is the licensed entity that operates this workshop. Its registered legal name, trade licence number and tax registration number are not printed here yet. We will not print a company name we cannot evidence, so this section is deliberately incomplete and will be completed before this notice is finalised.

Until then, a privacy question sent through the enquiry form reaches the people who will be responsible for answering it.

What we collect

We collect what a workshop needs to identify you, identify your car, do the work and invoice it. Concretely:

• Your name, mobile number, and the language you asked us to reply in.
• Your email address, if you give us one.
• What you told us the car is doing, in your own words.
• Vehicle details: make, model, year, plate number, VIN, odometer reading and service history with us.
• Photographs and measurements taken of your vehicle, on a pre-purchase inspection and wherever else a finding is recorded.
• The lines of work you approved and the lines you declined, with the time each decision was recorded.
• Invoices, payments and the payment method used. We do not store full card numbers.
• Messages between us, including WhatsApp messages, kept with the job they relate to.

Photographs of your vehicle

A photograph of your car is personal data, so it gets its own section. Photographs are taken on a pre-purchase inspection, and otherwise where a finding is worth recording. They are taken to evidence a condition, attached to your job record, and shown to you.

We do not publish a photograph of your car, or of its number plate, anywhere public — not on this website, not on social media, not in a case study — unless you have said yes to that specific use in writing. Saying no does not affect your work or your price.

Why we are allowed to hold it

Under Article 4 of the PDPL, personal data is processed with consent or on one of the listed alternative bases. Ours are:

• Performance of a contract — doing the work you asked for and invoicing it.
• Legal obligation — UAE tax law requires invoices and supporting records to be kept.
• Our legitimate interest — keeping a vehicle history so the next inspection can be compared with the last, and defending ourselves if a job is later disputed.
• Your consent — for anything else, such as marketing messages or publishing a photograph. Consent is asked for separately, and you can withdraw it at any time without giving a reason.

Who else sees it

We do not sell personal data, and we do not share it for anyone else’s marketing.

Data is shared only where a job requires it: a parts supplier needs a VIN to supply the right part; your insurer needs the file if you are claiming; a payment provider processes the card; a specialist subcontractor needs the vehicle details for the part of the work they carry out. Our hosting and IT providers hold the data because the systems run on their infrastructure.

The specific suppliers and processors have not been finalised. When they are, they will be named here, and each will be under a written agreement limiting them to our instructions.

Whether it leaves the UAE

Articles 22 and 23 of the PDPL restrict transferring personal data outside the UAE. Where our systems or their backups are hosted has not been finalised, so we are not going to tell you it all stays in the country when we have not yet proved that.

This section will state the hosting location, and the transfer safeguard relied on if any data does leave the UAE, before this notice is finalised.

How long we keep it

Invoices and the records supporting them are kept for the period UAE tax law requires. Job records, inspections and their photographs are kept for as long as the vehicle history is useful to you and to us — that is what allows a part to be compared with its own reading from a previous visit.

Enquiries that never became a job are kept for a short period and then deleted. The exact retention periods are being set and will be stated here as a table before this notice is finalised.

Your rights

Under the PDPL you can require us to do all of the following, free of charge, and we must respond within the period the law sets:

• Ask for a copy of the personal data we hold about you, and be told how it is processed.
• Have inaccurate data corrected, and incomplete data completed.
• Have data erased, except where we are legally required to keep it — a tax invoice cannot be deleted on request.
• Restrict or object to processing in the circumstances the law allows.
• Receive your data in a structured, machine-readable form, or have it sent to another provider.
• Withdraw consent you previously gave, at any time.
• Complain to the UAE Data Office if you are not satisfied with how we handled any of the above.

Keeping it safe

Access to job records is limited to the people who need it to do the work or to invoice it. Accounts are individual, so an action in the system is attributable to a person rather than to a shared login.

If a breach occurs that is likely to prejudice your privacy, we will notify the UAE Data Office and, where the law requires it, you.

Cookies and this website

As this site currently stands it sets no advertising or analytics cookies, embeds no third-party map, and loads its fonts from its own server rather than from a font provider. There is nothing here for you to consent to, which is why there is no consent banner.

If that changes — if we add analytics, or a booking widget that sets a cookie — this notice will be updated to say what is set and why before it goes live, and consent will be asked for where the law requires it.

Children

This is a workshop. Our services are for adults, and we do not knowingly collect personal data from anyone under 18.

Changes to this notice

When this notice is reviewed and approved it will carry a version and a date at the top, and material changes will be highlighted rather than slipped in.

Until then, the draft notice at the top of this page is the accurate statement of its status.