Agra Repairs ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data controller: Agra Repairs, 11 Winchester Rd, Burnham-on-Sea, TA8 1HY, United Kingdom. Contact: [email protected]
1. What Data We Collect
We collect and process the following categories of personal data:
- Contact information: Name, email address, phone number, and postal address, provided when you contact us, submit a repair enquiry, or use our contact form.
- Service information: Details about the device you bring in for repair, the fault reported, and the work carried out.
- Communication records: Copies of emails and messages exchanged between you and Agra Repairs for the purpose of managing your enquiry or repair.
- Website usage data: If you consent, we may collect anonymised analytics data about how visitors use our website (pages visited, time on site, referring source) via cookies. No personally identifiable information is collected through analytics.
2. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract performance: Processing necessary to carry out the repair services you have requested.
- Legitimate interests: Processing necessary to respond to enquiries and manage our business operations.
- Consent: Where you have given explicit consent (for example, subscribing to our newsletter or accepting optional cookies).
- Legal obligation: Where we are required to retain records for tax or regulatory purposes.
3. How We Use Your Data
- To respond to enquiries and provide quotes for repair services
- To carry out, communicate about, and invoice for repair work
- To send service-related communications (e.g. repair status updates)
- To send our newsletter if you have subscribed (you can unsubscribe at any time)
- To comply with legal and regulatory obligations
- To improve our website and services using aggregated, anonymised analytics
4. Data Sharing
We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data with:
- Parts suppliers or third-party repair specialists, where necessary to complete your repair and with your knowledge
- Regulatory bodies or law enforcement authorities, where required by law
5. Data Retention
We retain personal data only for as long as necessary. Contact and repair records are typically retained for 6 years to comply with HMRC record-keeping requirements. Newsletter subscriber data is retained until you unsubscribe. Website analytics data is aggregated and anonymised; no individual records are retained.
6. Your Rights
Under UK GDPR, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate or incomplete data.
- Erasure: Request deletion of your data where we no longer have a legal basis to retain it.
- Restriction: Ask us to restrict processing in certain circumstances.
- Portability: Request your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Withdraw consent: Where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
7. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Access to personal data is restricted to staff who need it to perform their role.
8. Changes to This Policy
We may update this Privacy Policy from time to time. The current version will always be available at this URL. We encourage you to review it periodically.