Legal document
Customer Privacy Notice
How WeFix Motors uses customer, vehicle, booking, evidence and website information.
- Version
- 2026-07-21.1
- Effective
- Last updated
Who we are
Trading name: WeFix Motors.
Telephone: 07508 200 425.
Information we use
- Name, telephone, email, service address and postcode.
- Vehicle registration, make, model, vehicle facts, modifications, reported faults and provider lookup results.
- Quotes, customer-facing totals, booking and appointment history, consent records and policy versions.
- Payment status, amounts, payment provider references and reconciliation records; WeFix does not store card details.
- Mechanic allocation, exact operational location available to authorised staff, and an approximate latest journey location shown through the secure customer link.
- Vehicle-condition photographs, repair evidence, parts records, receipts, signatures and completion records.
- Communications, complaints, privacy requests, reviews, security events, IP-derived rate-limit data and audit records.
Purposes and lawful bases
We use necessary information to take steps at your request, form and perform the service contract, arrange a mechanic, collect payment, provide tracking, communicate, and handle warranties and complaints (contract). We use records to meet tax, accounting, consumer, data-protection and legal obligations (legal obligation).
We use proportionate security, fraud-prevention, service-quality, evidence, defence-of-claims and operational analytics measures where our legitimate interests are not overridden by your rights. Optional website analytics runs only after your cookie choice in this implementation (consent). Optional electronic marketing requires a separate lawful permission and is never required to book.
Who receives information
Information is shared only as needed with the allocated mechanic, authorised WeFix staff, hosting and database infrastructure, configured email/SMS providers, configured payment provider, configured vehicle-data provider, configured private object-storage provider, professional advisers, insurers, authorities where legally required, and a replacement contractor where necessary to supply the service.
We may use the following providers when they are switched on: Vercel hosting, Neon/Postgres databases, Resend email, Twilio SMS, Check Car Details vehicle data, S3-compatible file storage (including Cloudflare R2 when configured), Umami analytics, Google Places reviews and OpenStreetMap map tiles. A provider is only treated as active once it is switched on in our live configuration; the current provider list is confirmed before launch.
International transfers
Some configured providers may process information outside the UK. Before enabling one, WeFix must record the destination and use an adequacy regulation or appropriate safeguards such as the UK International Data Transfer Agreement or approved UK Addendum, together with a transfer risk assessment where required. Contact us for a copy or description of the relevant safeguard.
Retention
We keep each category only as long as needed for the stated purpose, legal limitation periods, tax/accounting rules, warranty and complaint handling, safety, fraud prevention and evidence. Short-lived tracking tokens expire or are revoked; customer location output uses only the latest approximate journey point. Exact periods are set by our internal retention schedule and storage rules, which must be approved before launch.
Your rights and complaints
Depending on the processing, you may have rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Make a request or data-protection complaint on 07508 200 425. We will provide a clear complaint route, acknowledge a data-protection complaint within 30 days, investigate and communicate the outcome without undue delay.
You may complain to the Information Commissioner’s Office at ico.org.uk or by using the contact routes published by the ICO. We ask that you contact us first so we have an opportunity to resolve the issue, but this does not limit your ICO rights.
Required information and automated decisions
Contact, vehicle and service-location details are needed to quote, book and supply the service. Without them we may be unable to proceed. Eligibility and dispatch use fixed rules, but this release does not authorise solely automated decisions with legal or similarly significant effects based on customer profiling.