1. Introduction
At QuickStart, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our roadside assistance services.
QuickStart is operated by QuickStart, registered in England and Wales (Company Number: [COMPANY REGISTRATION NUMBER]), with registered office at QuickStart, 7 Felstead Close.
We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller: QuickStart is the data controller responsible for your personal information.
Contact: For privacy questions, email us at privacy@quickstartcars.co.uk or write to QuickStart, 7 Felstead Close.
2. Information We Collect
2.1 Information You Provide to Us
When you book our services, we collect:
Personal Details
- Full name
- Email address
- Phone number (mobile preferred for service updates)
- Billing address
Vehicle Information
- Vehicle registration number
- Make, model, and year (auto-populated from registration)
- Battery specifications (auto-determined from registration)
- Vehicle mileage (optional)
Location Information
- Service address (where you need assistance)
- Postcode
- Specific location details (parking information, building access)
Payment Information
- Billing name and address
- Payment card details (last 4 digits only - full details handled by Stripe)
- Transaction history
Service Information
- Service type selected (jump start, battery replacement)
- Appointment date and time preferences
- Special requirements or notes
- Communication preferences
2.2 Information We Collect Automatically
When you visit our website or use our booking system:
Technical Information
- IP address
- Browser type and version
- Operating system
- Device type (desktop, mobile, tablet)
- Screen resolution
Usage Information
- Pages visited
- Time spent on pages
- Booking journey progression
- Referral source (how you found us)
- Cookies and similar technologies (see Section 10)
2.3 Information from Third Parties
Vehicle Data API: When you enter your vehicle registration, we query the UK Driver and Vehicle Licensing Agency (DVLA) database through an authorized third-party API to retrieve:
- Vehicle make and model
- Year of manufacture
- Engine size
- Fuel type
- Vehicle colour
This helps us ensure we bring the correct battery for your vehicle.
Payment Processor (Stripe): We receive confirmation of payment status, transaction IDs, and limited payment card information (last 4 digits, expiry date, card brand) from Stripe.
2.4 Information We Don't Collect
We do not collect:
- Sensitive personal data (race, religion, health information, political opinions) unless you voluntarily provide it in service notes
- Full payment card details (these go directly to Stripe)
- Social media information
- Driving licence or insurance details
3. How We Use Your Information
We use your personal information for the following purposes:
3.1 Service Delivery (Legal Basis: Contract Performance)
- Processing and confirming your booking
- Assigning a technician to your appointment
- Communicating appointment details and updates
- Providing roadside assistance at your location
- Sending service reminders and follow-ups
- Processing payments and issuing receipts
3.2 Customer Support (Legal Basis: Contract Performance & Legitimate Interests)
- Responding to your inquiries and support requests
- Handling complaints and disputes
- Providing warranty support
- Improving service quality based on feedback
3.3 Business Operations (Legal Basis: Legitimate Interests)
- Managing technician schedules and routing
- Inventory management (ensuring correct batteries available)
- Quality assurance and training
- Fraud prevention and security
- Business analytics and reporting
- Improving our website and booking system
3.4 Marketing Communications (Legal Basis: Consent or Legitimate Interests)
With your consent, we may send you:
- Promotional offers and discounts
- Service reminders and maintenance tips
- Company news and updates
- Customer surveys
You can opt out of marketing communications at any time (see Section 8).
3.5 Legal Compliance (Legal Basis: Legal Obligation)
- Complying with legal and regulatory requirements
- Responding to lawful requests from authorities
- Maintaining records for tax and accounting purposes
- Enforcing our Terms of Service
3.6 Aggregated Data (Legal Basis: Legitimate Interests)
We may use anonymized, aggregated data (not identifying individuals) for:
- Business reporting and analysis
- Service area planning
- Peak demand forecasting
- Industry benchmarking
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
5.1 Security Measures
Technical Safeguards
- Encryption of data in transit (SSL/TLS)
- Encryption of sensitive data at rest
- Secure payment processing (PCI DSS compliant via Stripe)
- Regular security audits and updates
- Firewall protection and intrusion detection
Organizational Safeguards
- Access controls (role-based data access)
- Staff training on data protection
- Confidentiality agreements with employees
- Incident response procedures
- Regular backups with secure storage
5.2 Data Breach Notification
In the unlikely event of a data breach affecting your personal information, we will:
- Notify the Information Commissioner's Office (ICO) within 72 hours if required
- Notify affected individuals without undue delay if there is a high risk
- Take immediate steps to contain and remediate the breach
5.3 Your Responsibility
You are responsible for:
- Keeping your booking reference and account credentials confidential
- Using secure internet connections when accessing our services
- Notifying us if you suspect unauthorized access
6. Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this policy:
6.1 Retention Periods
| Data Type | Retention Period |
|---|---|
| Active bookings | Duration of service relationship |
| Completed bookings | 7 years (for warranty, legal, and accounting purposes) |
| Cancelled bookings | 2 years |
| Payment records | 7 years (HMRC requirement for tax and accounting) |
| Marketing communications | Until you opt out or 3 years of inactivity |
| Support and complaints | 6 years from resolution (legal limitation period) |
| Website analytics and cookies | Up to 26 months (Google Analytics default) |
6.2 Deletion
After retention periods expire, we will:
- Securely delete or anonymize your personal information
- Remove identifiers so data cannot be linked back to you
- Maintain anonymized data for statistical purposes only
7. International Data Transfers
7.1 Data Location
Your data is primarily stored and processed in the United Kingdom. Our servers and databases are located in UK/EU data centres.
7.2 Transfers Outside the UK/EU
Some service providers may process data outside the UK/EEA (e.g., Stripe's global infrastructure). When we transfer data internationally, we ensure:
- Adequacy decisions: Transfers to countries deemed adequate by the UK government
- Standard Contractual Clauses (SCCs): Approved by the ICO for transfers to non-adequate countries
- Additional safeguards: Encryption, pseudonymization, and access controls
Stripe complies with international data transfer requirements. See their privacy policy for details.
8. Your Rights
Under UK GDPR, you have the following rights regarding your personal information:
8.1 Right of Access
You can request a copy of the personal information we hold about you. We will provide this within one month, free of charge.
How to request: Email privacy@quickstartcars.co.uk with "Subject Access Request" in the subject line.
8.2 Right to Rectification
You can ask us to correct inaccurate or incomplete information.
How to request: Email privacy@quickstartcars.co.uk or update your details through your booking confirmation link.
8.3 Right to Erasure ("Right to be Forgotten")
You can request deletion of your personal information in certain circumstances:
- Information no longer necessary for the purpose collected
- You withdraw consent (where consent is the legal basis)
- You object to processing and there are no overriding legitimate grounds
- Information was unlawfully processed
Exceptions: We may retain information where required by law (e.g., tax records) or for legal claims.
8.4 Right to Restrict Processing
You can ask us to restrict processing of your information if you contest its accuracy, the processing is unlawful, or you need it for legal claims.
8.5 Right to Data Portability
You can request your personal information in a structured, commonly used, machine-readable format (e.g., CSV, JSON) and transfer it to another service provider.
8.6 Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes.
Direct marketing: We will stop immediately upon request. Click "Unsubscribe" in marketing emails or email privacy@quickstartcars.co.uk.
8.7 Rights Related to Automated Decision-Making
We do not use fully automated decision-making or profiling that produces legal or similarly significant effects. Technician assignment is based on availability and location but subject to human oversight.
8.8 Right to Withdraw Consent
Where processing is based on consent, you can withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.
8.9 Exercising Your Rights
To exercise any of these rights:
- Email: privacy@quickstartcars.co.uk
- Write: Data Protection Officer, QuickStart, QuickStart, 7 Felstead Close
- We may request proof of identity to prevent unauthorized access
- We will respond within one month (extended to two months for complex requests)
- No fee applies unless requests are manifestly unfounded or excessive
9. Complaints
If you believe we have not handled your personal information correctly, you have the right to complain to:
Information Commissioner's Office (ICO)
- Website: ico.org.uk/make-a-complaint/
- Phone: 0303 123 1113
- Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
We encourage you to contact us first so we can address your concerns directly.
11. Children's Privacy
Our services are not directed at children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us immediately at privacy@quickstartcars.co.uk, and we will delete it.
12. Links to Other Websites
Our website may contain links to third-party websites (e.g., review platforms, social media). We are not responsible for the privacy practices of these sites. Please review their privacy policies.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in:
- Our business practices
- Legal or regulatory requirements
- Technology and security standards
Notification
We will post changes on our website with a new "Last Updated" date. For material changes, we will notify you by:
- Email (to your registered address)
- Prominent notice on our website
- Pop-up notification on next login/visit
Continued Use: Using our services after changes take effect constitutes acceptance. If you don't agree, please stop using our services and request data deletion.
14. Contact Us
For questions, requests, or concerns about this Privacy Policy or our data practices:
- Email: privacy@quickstartcars.co.uk
- Phone: 020 8058 8161
- Address: Data Protection Officer, QuickStart, QuickStart, 7 Felstead Close
- Email: help@quickstartcars.co.uk
- Website: https://www.quickstartcars.co.uk
We aim to respond to all privacy inquiries within 5 working days and resolve requests within one month.
This Privacy Policy is effective as of the "Last Updated" date above. By usingQuickStart services, you acknowledge that you have read and understood this Privacy Policy.