Car Body Repair Liverpool

Privacy Policy

CPR Car Body Repairs Limited
Last updated: August 2025

At CPR Car Body Repairs Limited (“we”, “our”, or “us”), we are committed to protecting your personal data, respecting your privacy, and being fully transparent about how we collect, use, and safeguard information.

This Privacy Policy explains how we handle your personal data when you:

  • Visit our website

  • Contact us by phone, email, or in person

  • Use our repair, restoration, or related vehicle services

It also explains your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR), all as updated and applicable in 2025.

By using our website or services, you acknowledge this Privacy Policy and agree to the practices described.

1. Who We Are

CPR Car Body Repairs Limited is a UK-registered company specialising in car body repairs, accident damage, resprays, classic car restoration, alloy wheel repairs, campervan/motorhome resprays, fleet/commercial repairs, and related services.

We act as the data controller for personal data collected via our website and during service delivery.

Contact Details:
CPR Car Body Repairs Limited
Unit 2, 4 Blackstock Street, Liverpool, L3 6EP
Email:
info@cprcarbodyrepairliverpool.co.uk
Tel: 0151 909 3457 | Mobile: 07802 348096

2. What Data We Collect

We may collect and process the following categories of personal data:

  • Identity Data – name, title

  • Contact Data – postal address, email address, telephone number

  • Vehicle Data – registration number, make, model, year, service or repair requirements

  • Transaction Data – details of payments made for services provided (note: card payments are processed securely by third parties; CPR does not store full card details)

  • Technical Data – IP address, browser type/version, device type, operating system, browsing patterns, and usage data when interacting with our website

  • Communication Data – records of your communications with us, including emails, call notes, quotes, and bookings

  • Marketing & Preferences Data – information about your preferences in receiving marketing from us, if consented

We do not intentionally collect special category data (e.g. health, religion, biometrics).

3. How We Collect Your Data

  • Direct Interactions – when you request a quote, book a service, call, email, or visit us.

  • Website Use – via cookies, forms, and analytics.

  • Third Parties – from payment providers, insurers, or subcontractors supporting our services.

4. How We Use Your Data

We use personal data to:

  • Provide and manage our vehicle repair and restoration services

  • Process service bookings, quotes, invoices, and payments

  • Communicate with you regarding enquiries, service progress, or aftercare

  • Improve our services and website functionality

  • Meet legal and regulatory obligations (e.g. financial and tax record-keeping)

  • Protect our business, detect fraud, and resolve disputes

  • Send marketing communications about CPR services (where you have provided consent)

We will never sell or rent your personal data.

5. Lawful Bases for Processing

We process personal data under:

  • Performance of Contract – to provide the services you request

  • Legitimate Interests – to manage operations, maintain service quality, and prevent fraud

  • Consent – for marketing and non-essential cookies (you may withdraw consent at any time)

  • Legal Obligation – to comply with tax, accounting, and regulatory requirements

6. How We Share Your Data

We may share data with:

  • Service Providers – IT support, hosting, insurers, payment processors, subcontractors

  • Analytics Providers – e.g. Google Analytics

  • Legal or Regulatory Authorities – where disclosure is required by law

All third parties are required to process your data securely and lawfully.

7. International Transfers

Some providers (e.g. Google, Microsoft) may process data outside the UK. Where this occurs, we ensure safeguards such as:

  • UK adequacy regulations, or

  • Standard Contractual Clauses (SCCs) approved by the ICO.

8. Data Security

We use appropriate technical and organisational measures to secure personal data, including:

  • Encrypted storage and secure servers

  • Restricted staff access to personal data

  • Regular reviews and staff training

While no system is fully secure, we minimise risks of unauthorised access or misuse.

9. Data Retention

We retain data only as long as necessary:

  • Customer and vehicle records – up to 6 years (legal/accounting compliance)

  • Marketing data – until you opt out or withdraw consent

  • Technical data (logs, analytics) – shorter operational periods

When no longer required, data is securely deleted or anonymised.

10. Your Rights

Under UK GDPR, you have the right to:

  • Access – request a copy of your data

  • Rectification – correct inaccurate or incomplete data

  • Erasure – request deletion, where lawful grounds permit

  • Restriction – ask us to limit processing in certain cases

  • Portability – request transfer of your data to another provider

  • Object – to processing based on legitimate interests or for marketing

  • Withdraw Consent – at any time for consent-based processing

We aim to respond to valid requests within one month.

11. Cookies

Our website uses cookies to improve functionality and analyse site traffic. See our Cookie Policy for full details.

12. Children’s Data

Our services are aimed at adults. We do not knowingly collect or process personal data of children under 16. If such data is provided to us, it will be deleted promptly.

13. Changes to this Policy

We may update this Privacy Policy to reflect changes in law or practice. Updates will appear on this page with a revised “last updated” date. Where significant, we will notify you by email or website notice.

14. Complaints

If you have concerns about how we handle your data, please contact us first.

You also have the right to complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk