Privacy Policy
Last Updated: June 2025
1. WHO WE ARE
Jack's Repairs is committed to protecting your privacy and personal data. We are the data controller for the personal information you provide to us.
Our Details:
- Business Name: Jack's Repairs
- Address: 38 Middlegate, Penrith, CA11 7PT
- Email: info@repaircenter.co.uk
- Phone: 01768 899278
- Website: www.repaircenter.co.uk
This privacy policy explains how we collect, use, store and protect your personal information when you use our repair services or visit our website.
2. WHAT PERSONAL INFORMATION WE COLLECT
2.1 Information You Give Us
When you use our services, we may collect:
Contact Details:
- Full name
- Phone number(s)
- Email address
- Home or business address
Service Information:
- Device details (make, model, IMEI/serial numbers)
- Description of fault or repair required
- Device passcodes (where necessary for testing)
- Repair history and service records
- Communication preferences
Payment Information:
- Payment method details
- Billing address
- Transaction records
2.2 Information We Collect Automatically
Website Usage:
- IP address and browser information
- Pages visited and time spent on site
- Device type and operating system
- Referral sources
CCTV Recordings:
- Security footage from our premises (for security purposes)
- Audio may be recorded in public areas
Service Records:
- Appointment dates and times
- Repair completion records
- Quality control testing results
3. HOW WE USE YOUR PERSONAL INFORMATION
3.1 Providing Our Services
We use your personal information to:
- Process your repair requests and bookings
- Communicate about your device and repair status
- Perform diagnostic tests and repairs
- Arrange collection and delivery
- Process payments and issue receipts
- Provide customer support and after-sales service
- Maintain warranty and service records
Legal Basis: Contract performance and legitimate business interests
3.2 Business Operations
We may use your information for:
- Quality control and service improvement
- Staff training and development
- Business planning and analysis
- Compliance with legal obligations
- Fraud prevention and security
Legal Basis: Legitimate business interests and legal compliance
3.3 Marketing Communications
With your explicit consent, we may:
- Send promotional offers and service updates
- Inform you about new services or products
- Provide technical tips and device care advice
- Send customer satisfaction surveys
Legal Basis: Consent (you can withdraw this at any time)
5. HOW LONG WE KEEP YOUR INFORMATION
5.1 Retention Periods
- Customer records: 7 years (for tax and business records)
- Repair records: 7 years (for warranty and liability purposes)
- Payment records: 7 years (for accounting requirements)
- CCTV footage: 30 days (unless required for security incident)
- Marketing data: Until you withdraw consent or 3 years of inactivity
- Website analytics: 26 months
5.2 Secure Disposal
When retention periods expire, we securely delete or destroy personal information in accordance with data protection standards.
6. YOUR RIGHTS
Under UK data protection law, you have the following rights:
6.1 Access Rights
- Right to access: Request a copy of personal information we hold about you
- Right to rectification: Ask us to correct inaccurate information
- Right to erasure: Request deletion of your personal data (subject to legal requirements)
6.2 Control Rights
- Right to restrict processing: Limit how we use your information
- Right to data portability: Receive your data in a structured format
- Right to object: Object to processing based on legitimate interests
6.3 Marketing Rights
- Right to withdraw consent: Opt out of marketing communications at any time
- Right to object to direct marketing: Stop all marketing communications
6.4 How to Exercise Your Rights
Contact us using the details in Section 11. We'll respond within one month and won't charge a fee unless your request is clearly unfounded or excessive.
7. DATA SECURITY
7.1 Protecting Your Information
We implement appropriate technical and organisational measures to protect your personal data:
Physical Security:
- Secure premises with controlled access
- Locked filing cabinets for paper records
- CCTV monitoring of business premises
- Secure disposal of confidential waste
Digital Security:
- Encrypted data transmission
- Secure password policies
- Regular security updates and patches
- Backup and recovery procedures
- Staff training on data protection
7.2 Data Breaches
If a data breach occurs that poses a risk to your rights and freedoms, we will:
- Report to the Information Commissioner's Office within 72 hours
- Notify affected individuals without undue delay
- Take immediate steps to contain and remedy the breach
8. INTERNATIONAL DATA TRANSFERS
8.1 UK and EU Transfers
We primarily store and process your data within the UK. Occasionally, data may be transferred to:
- EU countries (considered adequate by UK law)
- Service providers with appropriate safeguards in place
8.2 Safeguards
Any international transfers will be protected by:
- Adequacy decisions by the UK government
- Standard contractual clauses
- Binding corporate rules
- Approved certification schemes
10. CHILDREN'S PRIVACY
10.1 Age Restrictions
Our services are not specifically directed at children under 13. We do not knowingly collect personal information from children under 13 without parental consent.
10.2 Parental Responsibility
If a parent or guardian books repair services for a child's device, they are responsible for providing consent for data processing.
10.3 School and Educational Devices
For devices owned by schools or educational institutions, we process data according to their instructions and data protection policies.
11. CONTACT US
11.1 General Data Protection Queries
For any questions about this privacy policy or how we handle your personal data:
Jack's Repairs
38 Middlegate, Penrith, CA11 7PT
Email: info@repaircenter.co.uk
Phone: 01768 899278
11.2 Data Protection Officer
For complex data protection matters, you can contact our designated data protection contact at the same details above.
11.3 Regulatory Authority
If you're not satisfied with our response to your data protection concerns, you can complain to:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
12. CHANGES TO THIS POLICY
12.1 Policy Updates
We may update this privacy policy to reflect:
- Changes in the law
- New business practices
- Feedback from customers
- Regulatory guidance
12.2 Notification of Changes
We will notify you of significant changes by:
- Updating the "Last Updated" date
- Posting notices on our website
- Emailing registered customers (for material changes)
- Providing information when you next visit our premises
12.3 Previous Versions
You can request previous versions of this policy by contacting us.
13. LEGAL BASIS SUMMARY
14. DATA PROTECTION PRINCIPLES
We process your personal data in accordance with the following principles:
- Lawfully, fairly and transparently
- For specified, explicit and legitimate purposes
- Adequate, relevant and limited to what's necessary
- Accurate and kept up to date
- Not kept longer than necessary
- Processed securely
- Accountable for compliance
This privacy policy complies with the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
Contact us if you have any questions about how we protect your privacy.