Privacy Policy

1. Introduction

Jack's Repairs ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our services or visit our website.

We are the data controller for the personal information we process about you. Our contact details are provided at the end of this policy.

2. Information We Collect

2.1 Information You Provide

We collect information you provide when you:

• Book a repair service
• Contact us via phone, email, or contact forms
• Create an account on our website
• Subscribe to our newsletter
• Leave reviews or feedback

This information may include:

• Name and contact details (phone, email, address)
• Device information (make, model, issue description)
• Payment information (processed securely via Square)
• Appointment preferences and special requirements

2.2 Information We Collect Automatically

When you visit our website, we automatically collect:

• IP address and browser information
• Pages visited and time spent on our website
• Referring website information
• Device and operating system information

2.3 Device Information

When you bring a device for repair, we may need to access certain information on your device to diagnose and repair issues. We only access what is necessary for the repair.

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Provision

• Processing and managing your repair bookings
• Communicating about your repair status
• Providing customer support
• Processing payments and refunds

3.2 Business Operations

• Maintaining business records
• Improving our services
• Website analytics and optimization
• Fraud prevention and security

3.3 Marketing (with consent)

• Sending promotional emails about our services
• Informing you about special offers
• Newsletter communications

4. Legal Basis for Processing

We process your personal information based on:

• Contract: To fulfill our repair services agreement with you
• Consent: For marketing communications (you can withdraw consent anytime)
• Legitimate Interest: For business operations, fraud prevention, and website analytics
• Legal Obligation: To comply with accounting and tax requirements

5. Information Sharing

5.1 Third-Party Service Providers

We may share your information with trusted third parties who help us provide our services:

• Payment Processors: Square (for payment processing)
• Email Services: For sending appointment confirmations and updates
• Website Analytics: Google Analytics (anonymized data)
• Parts Suppliers: When ordering specific parts for your device

5.2 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights and safety.

5.3 Business Transfers

In the event of a business sale or merger, your information may be transferred to the new owners.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Secure Socket Layer (SSL) encryption for data transmission
• Secure payment processing via PCI-compliant providers
• Regular security assessments and updates
• Access controls and staff training
• Secure disposal of devices and data

7. Data Retention

We retain your personal information for:

• Customer Records: 7 years (for accounting and tax purposes)
• Marketing Data: Until you unsubscribe or withdraw consent
• Website Analytics: 26 months (Google Analytics default)
• CCTV Footage: 30 days (if applicable)

8. Your Rights

Under UK GDPR, you have the following rights:

8.1 Right of Access

You can request a copy of the personal information we hold about you.

8.2 Right to Rectification

You can ask us to correct inaccurate or incomplete information.

8.3 Right to Erasure

You can request deletion of your personal information in certain circumstances.

8.4 Right to Restrict Processing

You can ask us to limit how we use your information.

8.5 Right to Data Portability

You can request your data in a portable format.

8.6 Right to Object

You can object to processing based on legitimate interests or for marketing purposes.

8.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time.

9. Cookies and Website Technologies

9.1 Essential Cookies

We use essential cookies that are necessary for our website to function properly.

9.2 Analytics Cookies

With your consent, we use Google Analytics to understand how visitors use our website.

9.3 Cookie Management

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., Google Reviews). We are not responsible for their privacy practices. Please review their privacy policies.

11. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal information from children under 16 without parental consent.

12. International Transfers

Some of our service providers may be located outside the UK. We ensure appropriate safeguards are in place for international data transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on our website with a new "last updated" date.

15. Complaints

If you are not satisfied with how we handle your personal information, you can make a complaint to:

16. Data Processing Summary

Purpose	Legal Basis	Retention
Repair Services	Contract	7 years
Marketing	Consent	Until withdrawal
Website Analytics	Legitimate Interest	26 months