Home › Privacy Policy

Privacy Policy

How we collect, use and protect your personal information.

Last updated:

This policy explains how David Forrester Auto Services (trading as DF Auto Services), 16 Maple Drive, Penrith, Cumbria, CA11 8TU, VAT No. 253 4238 17 ("we", "us", "our") collects and uses personal data when you use our website or contact us. We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

1. What Information We Collect

We may collect the following personal information:

  • Contact details — name, email address, phone number, postal address
  • Enquiry information — details of your vehicle, the parts or services you require, and any messages you send us
  • Technical data — IP address, browser type, pages visited and time spent on our website (collected via cookies — see Section 7)
  • Transaction data — if you purchase through our online store, order details and payment information (processed securely by our payment provider; we do not store card details)

2. How We Collect Information

  • When you fill in our contact or enquiry form
  • When you call or email us directly
  • When you place an order through our online store
  • When you interact with our Facebook page
  • Automatically via cookies and analytics tools when you browse our website

3. How We Use Your Information

We use your personal data to:

  • Respond to your enquiries and provide quotations
  • Process and fulfil orders for parts and services
  • Maintain records of work carried out on your vehicle
  • Send you information about your order or appointment
  • Comply with legal and regulatory obligations (including VAT record-keeping)
  • Improve our website and services

We will only contact you for marketing purposes if you have given your consent, and you may withdraw that consent at any time.

4. Legal Basis for Processing

  • Contract performance — to process orders and deliver services you have requested
  • Legitimate interests — to respond to enquiries and improve our business
  • Legal obligation — to comply with tax, accounting and regulatory requirements
  • Consent — for any marketing communications

5. Sharing Your Information

We do not sell or rent your personal data to third parties. We may share data with:

  • Delivery and courier services — where goods are dispatched to you
  • Payment processors — to handle transactions securely (e.g. Ecwid's payment partners)
  • IT and website service providers — who support the operation of this website
  • HMRC and regulatory bodies — where required by law

All third parties are required to handle your data securely and in accordance with UK data protection law.

6. How Long We Keep Your Data

  • Enquiry records: up to 2 years from last contact
  • Order and transaction records: 7 years (HMRC requirement)
  • Vehicle service records: [CLIENT TO CONFIRM — e.g. 7 years]
  • Website analytics: as per cookie settings (typically 13 months)

7. Cookies

Our website uses cookies to help it function and to understand how visitors use it. Cookies we use include:

  • Essential cookies — required for the site to work (e.g. shopping cart, translate widget)
  • Analytics cookies — [CLIENT TO CONFIRM if Google Analytics or similar is added]

You can control cookies through your browser settings. Disabling cookies may affect some site functionality.

8. Your Rights

Under UK GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data in certain circumstances
  • Restriction — ask us to limit how we use your data
  • Portability — receive your data in a structured, machine-readable format
  • Object — object to processing based on legitimate interests or for direct marketing
  • Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at dave.j40@talktalk.net or by post to the address above. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled unlawfully.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. Our website is served over HTTPS. Payment transactions are handled by our payment provider's secure, PCI-compliant infrastructure.

10. Third-Party Links

Our website may contain links to third-party sites (e.g. Facebook). We are not responsible for the privacy practices of those sites and recommend you review their policies separately.

11. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with a revised date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data: