Privacy Policy for BookMyGarage

BookMyGarage is a trading name of The Motorists Organisation Ltd and takes the privacy of your information very seriously. We are committed to protecting and respecting your Personal Data. Our privacy policy below explains how we will collect and use the information you give us. We may vary this policy from time to time and the current version will be that published on this site. The word 'we' refers to BookMyGarage, unless otherwise indicated.

What information do we collect?

From time to time, you will be asked to submit personal information about yourself in order to receive or use services on our platform. The information includes: name, email address, phone number, postal address, vehicle registration number.

We collect, use and are responsible for certain personal data about you. When we do so we are subject to the UK General Data Protection Regulation (UK GDPR).

We do not collect or request Sensitive Personal Data from you. Sensitive Personal Data includes personal data revealing racial or ethnic origin, political opinions, religious beliefs, philosophical beliefs or trade union membership; genetic and biometric data (when processed to uniquely identify an individual) and data concerning health or sexual orientation.

Users aged 16 years and under

If you are 16 or under you must have permission from a parent or guardian before you give us personal information. If we find that we have received information from you without the appropriate consent, we reserve the right to cancel all transactions and services and remove all personal data that you have supplied. You will be able to re-submit the information when you have the required permission.

How do we collect information from you?

We ask you for information about you, your location and your vehicle when you use our platform, email or call us.

How and why your personal information will be used?

Under data protection law, we can only use your personal data if we have a proper reason, e.g.:

  • where you have given consent;
  • to comply with our legal and regulatory obligations;
  • for the performance of a contract with you or to take steps at your request before entering into a contract; or
  • for our legitimate interests or those of a third party

A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. We will carry out an assessment when relying on legitimate interests, to balance our interests against your own.

We will use information collected when you use the website for price enquiry and/or make a booking on our platform:

  • to present you with garages and services relevant to you;
  • to ensure that the service you have asked for is correctly delivered and managed;
  • to maintain your account on BookMyGarage;
  • to ask you to review the service you received. You are under no obligation to respond to this invitation;
  • We would like to share with participating garages you have had a previous relationship with, your registration number, postcode and relevant data to allow them to offer you products and other promotions that they feel may be of benefit. We require your consent for this purpose.

The table below explains in more detail what we use your personal data for and why.

What we use your personal data forOur reasons
Providing services to youTo perform our contract with you or to take steps at your request before entering into a contract
Preventing and detecting fraud against you or usFor our legitimate interests or those of a third party, i.e. to minimise fraud that could be damaging for you and/or us
Ensuring business policies are adhered to, e.g. policies covering security and internet useFor our legitimate interests or those of a third party, i.e. to make sure we are following our own internal procedures so we can deliver the best service to you
Operational reasons, such as improving efficiency, training and quality controlFor our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best service to you at the best price
Ensuring the confidentiality of commercially sensitive informationFor our legitimate interests or those of a third party, i.e. to protect trade secrets and other commercially valuable information to comply with our legal and regulatory obligations
Statistical analysis to help us manage our business, e.g. in relation to our financial performance, customer base, product range or other efficiency measuresFor our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best service to you at the best price
Preventing unauthorised access and modifications to systemsFor our legitimate interests or those of a third party, i.e. to prevent and detect criminal activity that could be damaging for you and/or us to comply with our legal and regulatory obligations
Updating customer recordsTo perform our contract with you or to take steps at your request before entering into a contract to comply with our legal and regulatory obligations for our legitimate interests or those of a third party, e.g. making sure that we can keep in touch with our customers about existing orders and new products

Marketing our services to:

  • existing and former customers;
  • third parties who have previously expressed an interest in our services;
  • third parties with whom we have had no previous dealings;
For our legitimate interests or those of a third party, i.e. to promote our business to existing and former customers

Marketing

We may use your personal data to send you updates (by email, text message, telephone or post):-

  • about our products and services that we think may be of interest to you including exclusive offers, promotions or new services; and
  • to provide you with reminders when your car’s next service or MOT is due

We have a legitimate interest in using your personal data for marketing purposes. This means we do not usually need your consent to send you marketing information. However, where consent is needed, we will ask for this separately and clearly.

You have the right to opt out of receiving marketing communications at any time by:

  • contacting us at info@bookmygarage.com
  • using the ‘unsubscribe’ link in emails or ‘STOP’ number in texts

We may ask you to confirm or update your marketing preferences if you ask us to provide further services in the future, or if there are changes in the law, regulation, or the structure of our business.

Where do we store your data?

Personal data may be held at our offices and those of our service providers such as our data storage service providers and email marketing provider.

Our service providers may be based outside the UK/EEA.

Under data protection law, we can only transfer your personal data to a country or international organisation outside the UK/EEA where:

  • the UK government or, where the EU GDPR applies, the European Commission has decided the particular country or international organisation ensures an adequate level of protection of personal data (known as an ‘adequacy decision’);
  • there are appropriate safeguards in place, together with enforceable rights and effective legal remedies for data subjects; or
  • a specific exception applies under data protection law

These are explained below.

Adequacy decision

We may transfer your personal data to certain countries, on the basis of an adequacy decision. These include:

  • all European Union countries, plus Iceland, Liechtenstein and Norway (collectively known as the ‘EEA’);
  • Gibraltar; and
  • Andorra, Argentina, Canada, Faroe Islands, Guernsey, Israel, Isle of Man, Japan, Jersey, New Zealand, Switzerland and Uruguay.

The list of countries that benefit from adequacy decisions will change from time to time. We will always seek to rely on an adequacy decision, where one exists.

Other countries we are likely to transfer personal data to do not have the benefit of an adequacy decision. This does not necessarily mean they provide poor protection for personal data, but we must look at alternative grounds for transferring the personal data, such as ensuring appropriate safeguards are in place or relying on an exception, as explained below.

Transfers with appropriate safeguards

Where there is no adequacy decision, we may transfer your personal data to another country if we are satisfied the transfer complies with data protection law, appropriate safeguards are in place, and enforceable rights and effective legal remedies are available for data subjects.

The safeguards will usually include using legally-approved standard data protection contract clauses

To obtain a copy of the standard data protection contract clauses and further information about relevant safeguards please contact us (see ‘How to contact us’ below).

Transfers under an exception

In the absence of an adequacy decision or appropriate safeguards, we may transfer personal data to a third country or international organisation where an exception applies under relevant data protection law, e.g.:

  • you have explicitly consented to the proposed transfer after having been informed of the possible risks;
  • the transfer is necessary for the performance of a contract between us or to take pre-contract measures at your request;
  • the transfer is necessary for a contract in your interests, between us and another person; or
  • the transfer is necessary to establish, exercise or defend legal claims

We may also transfer information for the purpose of our compelling legitimate interests, so long as those interests are not overridden by your interests, rights and freedoms. Specific conditions apply to such transfers and we will provide relevant information if and when we seek to transfer your personal data on this ground.

Who Do We Share Your Data With?

When you make a booking or make an enquiry including but not restricted to the entry of a registration number, we share this data and where required to make a booking any personal information you have provided with a garage. The garage receiving either the registration number or personal data is responsible for handling your information in accordance with the law. We remind all garages subscribing to our platform of their responsibilities to you. By submitting your registration number and any personal data to us, you consent to such transfers taking place.

With the exception of garages we may share your data with service providers, suppliers and sub-contractors, including but not limited to TekCor4, where we may receive a payment. Where any data is shared we will have in place agreements that require them to keep your data secure under the required data laws.

We may share your information with others/third parties, where lawful to do so, to enable them to meet their legitimate interests.

We may transfer your personal information and car registration number to a third party as part of a sale of some or all of our business and assets to any third party, or if we are under a duty to disclose or share your personal data in order to comply with any legal obligation or to enforce or apply our terms of use or to protect the rights, property or safety of our customers. In such case, we will take steps to ensure that your privacy rights continue to be protected.

How Long Do We Keep Your Data?

When you create an account on BookMyGarage, we retain your personal data until such time as you close your account or the personal data which we have collected from you is no longer required in order to perform the action or supply the service which you originally requested. Thereafter, we will keep your personal data for as long as is necessary:

  • to respond to any questions, complaints or claims made by you or on your behalf;
  • to show that we treated you fairly;
  • to keep records required by law.

We will delete or anonymise your personal data within a reasonable period where you have not created an account.

What are your data protection rights?

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request us for copies of your personal data.

The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request us to complete the information you believe is incomplete.

The right to erasure – You have the right to request that we erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email address:
info@bookmygarage.com

Or write to us at:
The Data Controller, The Motorists’ Organisation Ltd, 1000 Lakeside, North Harbour, Portsmouth, PO6 3EN

Cookies

Like many other providers, our platform uses cookies. Cookies are small pieces of text data sent from a platform and stored on your browser. This allows our platform to recognise you when you visit the site again. They are used to collect statistical information about visits to our platform, or to remember your preferences from previous visits. Cookies do not store personally identifiable information.

If you refuse a cookie it may prevent the proper operation of the site or even prevent your access to certain areas.

For more details, please see our Cookie Policy.

Links to other platforms

Our platforms may contain links to other sites outside the group. BookMyGarage is not responsible for the privacy and security of these sites. This privacy policy applies only to this platform.

Your Responsibilities

If you communicate with us by email over the Internet you should be aware that the nature of the Internet is such that unencrypted communication may not be secure and may pass through several different countries en route to us. Please do not email us with confidential or sensitive information such as your credit card details. We cannot accept responsibility for unauthorised access to your information that is outside our control.

When you create an account on BookMyGarage, you should use a password that provides an adequate level of security. You are responsible for keeping your password safe, and we ask you not to share your password with anyone.

We do not have access to your password, but if you lose it you may ask us to reset the password on your account.

How to access your personal information

If you believe that any of the data we hold about you is incorrect or being misused or want further information you may contact us at the below address:

The Data Controller, The Motorists’ Organisation Ltd, 1000 Lakeside, North Harbour, Portsmouth, PO6 3EN

How to contact the appropriate authority

Should you wish to report a complaint or if you feel that we have not addressed your concern in a satisfactory manner, you may contact the Information Commissioner’s Office.

Website:
https://ico.org.uk/

Address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Policy Date

We review our Privacy Policy regularly. This Policy was updated on 1st. August 2023.