Privacy Policy
CPR Car Body Repairs Limited
Last updated: August 2025
At CPR Car Body Repairs Limited (“we”, “our”, or “us”), we are committed to protecting your personal data, respecting your privacy, and being fully transparent about how we collect, use, and safeguard information.
This Privacy Policy explains how we handle your personal data when you:
Visit our website
Contact us by phone, email, or in person
Use our repair, restoration, or related vehicle services
It also explains your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR), all as updated and applicable in 2025.
By using our website or services, you acknowledge this Privacy Policy and agree to the practices described.
1. Who We Are
CPR Car Body Repairs Limited is a UK-registered company specialising in car body repairs, accident damage, resprays, classic car restoration, alloy wheel repairs, campervan/motorhome resprays, fleet/commercial repairs, and related services.
We act as the data controller for personal data collected via our website and during service delivery.
Contact Details:
CPR Car Body Repairs Limited
Unit 2, 4 Blackstock Street, Liverpool, L3 6EP
Email: info@cprcarbodyrepairliverpool.co.uk
Tel: 0151 909 3457 | Mobile: 07802 348096
2. What Data We Collect
We may collect and process the following categories of personal data:
Identity Data – name, title
Contact Data – postal address, email address, telephone number
Vehicle Data – registration number, make, model, year, service or repair requirements
Transaction Data – details of payments made for services provided (note: card payments are processed securely by third parties; CPR does not store full card details)
Technical Data – IP address, browser type/version, device type, operating system, browsing patterns, and usage data when interacting with our website
Communication Data – records of your communications with us, including emails, call notes, quotes, and bookings
Marketing & Preferences Data – information about your preferences in receiving marketing from us, if consented
We do not intentionally collect special category data (e.g. health, religion, biometrics).
3. How We Collect Your Data
Direct Interactions – when you request a quote, book a service, call, email, or visit us.
Website Use – via cookies, forms, and analytics.
Third Parties – from payment providers, insurers, or subcontractors supporting our services.
4. How We Use Your Data
We use personal data to:
Provide and manage our vehicle repair and restoration services
Process service bookings, quotes, invoices, and payments
Communicate with you regarding enquiries, service progress, or aftercare
Improve our services and website functionality
Meet legal and regulatory obligations (e.g. financial and tax record-keeping)
Protect our business, detect fraud, and resolve disputes
Send marketing communications about CPR services (where you have provided consent)
We will never sell or rent your personal data.
5. Lawful Bases for Processing
We process personal data under:
Performance of Contract – to provide the services you request
Legitimate Interests – to manage operations, maintain service quality, and prevent fraud
Consent – for marketing and non-essential cookies (you may withdraw consent at any time)
Legal Obligation – to comply with tax, accounting, and regulatory requirements
6. How We Share Your Data
We may share data with:
Service Providers – IT support, hosting, insurers, payment processors, subcontractors
Analytics Providers – e.g. Google Analytics
Legal or Regulatory Authorities – where disclosure is required by law
All third parties are required to process your data securely and lawfully.
7. International Transfers
Some providers (e.g. Google, Microsoft) may process data outside the UK. Where this occurs, we ensure safeguards such as:
UK adequacy regulations, or
Standard Contractual Clauses (SCCs) approved by the ICO.
8. Data Security
We use appropriate technical and organisational measures to secure personal data, including:
Encrypted storage and secure servers
Restricted staff access to personal data
Regular reviews and staff training
While no system is fully secure, we minimise risks of unauthorised access or misuse.
9. Data Retention
We retain data only as long as necessary:
Customer and vehicle records – up to 6 years (legal/accounting compliance)
Marketing data – until you opt out or withdraw consent
Technical data (logs, analytics) – shorter operational periods
When no longer required, data is securely deleted or anonymised.
10. Your Rights
Under UK GDPR, you have the right to:
Access – request a copy of your data
Rectification – correct inaccurate or incomplete data
Erasure – request deletion, where lawful grounds permit
Restriction – ask us to limit processing in certain cases
Portability – request transfer of your data to another provider
Object – to processing based on legitimate interests or for marketing
Withdraw Consent – at any time for consent-based processing
We aim to respond to valid requests within one month.
11. Cookies
Our website uses cookies to improve functionality and analyse site traffic. See our Cookie Policy for full details.
12. Children’s Data
Our services are aimed at adults. We do not knowingly collect or process personal data of children under 16. If such data is provided to us, it will be deleted promptly.
13. Changes to this Policy
We may update this Privacy Policy to reflect changes in law or practice. Updates will appear on this page with a revised “last updated” date. Where significant, we will notify you by email or website notice.
14. Complaints
If you have concerns about how we handle your data, please contact us first.
You also have the right to complain to the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk