Privacy Policy

1. Introduction

Motorbay Online ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our garage management software and related services.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email address, phone number, business name)
• Customer data you enter into the system (customer names, addresses, contact details, vehicle information)
• Job and service records, estimates, invoices, and related business data
• Payment information processed through our secure payment providers
• Communications with our support team

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Send promotional communications (you can opt out at any time)
• Monitor and analyse trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions

4. Data Storage and Security

Your data is stored on secure servers located in the United Kingdom. We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

We use industry-standard encryption (TLS/SSL) for data in transit and encryption at rest for sensitive data. Regular backups are performed and stored securely.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With service providers who assist in operating our platform (payment processors, hosting providers)
• To comply with legal obligations
• To protect and defend our rights and property
• With your explicit consent

6. Sub-Processors

We use trusted third-party service providers to help operate our platform. These sub-processors handle data on our behalf under data processing agreements that ensure GDPR compliance:

• Neon (Database hosting, EU-West-2 London) - Stores application data
• Amazon Web Services (Cloud infrastructure, EU regions) - Hosts our application
• Neon Auth (Authentication services) - Manages secure login
• Resend (Email delivery) - Sends transactional emails
• Stripe (Payment processing) - Handles payment transactions

All sub-processors are SOC 2 compliant or equivalent. Data is stored within the UK/EU unless otherwise specified above.

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Request data portability
• Withdraw consent at any time

To exercise these rights, please contact us at privacy@motorbayonline.co.uk.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. If you cancel your account, we will retain your data for 30 days before deletion, allowing you to reactivate if desired. Certain data may be retained longer if required by law.

9. Cookies

We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

10. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: privacy@motorbayonline.co.uk
• Phone: 0800 123 4567
• Post: Motorbay Online, 123 Business Park, London, UK