Your data, your control.

From your workshop's diary or directly during check-in we hold the minimum needed to look after your car and tell you about it:

• Contact: your first & last name, mobile phone number, email address.
• Vehicle: registration plate, make, model, year, mileage.
• Service: work description, technician notes, photos & short videos taken during inspection, your responses to our pre-work questionnaire.
• Decisions: which items you approved or declined, any notes you typed, and any reminders you scheduled for future work.
• Messages: texts, WhatsApps and quote-page messages you send us about your service, and our replies (including replies written by our AI assistant — see section 3).
• Calls & voicemail: if you ring the workshop line and choose to leave a message, we store the recording and a text transcript so the team can call you back. The call itself is not recorded — only the message you leave after the tone.
• Payments: if you pay through the platform, the payment is processed by Stripe. We receive only a confirmation, the amount, and the last four digits of the card — never the full card number.
• Consent record: the date and time you ticked the data-processing & marketing checkboxes (audit trail).

We do not collect: full bank card numbers, government IDs or biometric data.

• Performance of contract — to carry out the service you booked, answer your questions about it, and take payment.
• Consent — to text and email you about today's service (you tick a box).
• Legitimate interest — to remind you about advisory work you asked us to flag for later (you can opt out anytime), and to store a voicemail you chose to leave so we can return your call.
• Legal obligation — UK tax law requires us to keep invoicing records for up to six years.
• Separate marketing consent (optional) — only if you tick the second box, we may send MOT / service reminders & offers. You can opt out at any time by replying STOP to any message.

Some workshops switch on our AI assistant to answer simple questions about your quote by text, and an automated receptionist on their phone line. Under UK GDPR (Article 22) you have the right to know when you're dealing with a machine, so:

• The assistant always introduces itself as the workshop's AI assistant on its first reply, and the phone receptionist says it is automated at the start of the call.
• It can only tell you what is already on your quote — the items, prices and urgency your technician recorded, and where your car is in the workshop. It cannot approve or decline work, agree a price, book you in or make any decision about you. Those always go to a person.
• If you'd rather speak to a human at any point, say so (or press 1 on the phone) and it hands over immediately. Every AI reply is visible to the workshop's staff, who can take over the conversation.
• To generate a reply, the text of your message and the relevant quote details are processed by our AI provider (Anthropic Claude / OpenAI, accessed through our hosting partner Emergent). These providers do not use your data to train their models and do not retain it beyond the request.
• Voicemails are transcribed automatically by Twilio so staff can read them quickly; the audio is deleted after 30 days.

• Hosted on UK / EU cloud infrastructure with encryption in transit (TLS) and at rest.
• Only your workshop's authorised staff, plus the platform engineers for technical support, can access your data. Staff access is logged.
• We never sell your data and never share it with advertisers.
• Sub-processors (each under a GDPR-compliant contract, with UK International Data Transfer Addendum where data leaves the UK): Twilio (SMS, WhatsApp, phone line, voicemail transcription) · IONOS (email delivery) · Emergent (cloud hosting and AI gateway) · Anthropic and OpenAI (AI language and vision models, via Emergent) · Stripe (card payments).

• Live job data (name, contact, quote, messages, photos, video): for the duration of the service and up to 24 months afterwards so the workshop can honour warranties, reminders and repeat work — or until you ask us to erase it.
• Voicemail audio: 30 days, then deleted from Twilio automatically. The transcript stays with the job and is erased with it.
• Invoice / approval trail: anonymised and kept for 6 years (UK tax law). Your name, phone and email are removed from it if you erase your data.
• Consent and audit records: 6 years, so the workshop can demonstrate compliance.
• Internal alert feeds (e.g. "customer replied" notifications shown to staff): 7 days.

Under UK GDPR you have the right to:

• Access — see exactly what we hold on you.
• Rectification — fix anything that's wrong.
• Erasure ("right to be forgotten") — ask us to delete your personal data. We'll keep an anonymised record where the law requires (e.g. invoice trails), but your name, phone, email, messages, voicemails and transcripts will be wiped.
• Restrict / object — stop further processing for marketing or any non-essential purpose, including asking that the AI assistant never replies to you.
• Portability — receive your data in machine-readable form.
• Not to be subject to purely automated decisions — our assistants never make decisions with legal or similar effect about you; a person always does.
• Withdraw consent — at any time, without affecting work already in flight.
• Complain — to the UK Information Commissioner's Office (ICO) at ico.org.uk/concerns.

If your workshop sent you a quote link (typically /j/...), you can self-serve:

• Open your quote link → scroll to the footer → tap "Download my data" for an immediate JSON copy of what we hold for that job.
• Open your quote link → tap "Delete my data" at the bottom of the page to trigger the right to be forgotten for that job (or for every job held against your phone/email).
• For broader requests (marketing opt-out across the board, a human-only conversation), email or text your workshop directly — they're your data controller.

Most requests are honoured within a few seconds; statutory deadlines are 30 days.

We use the bare minimum to keep you logged in and remember your preferences. We do not use advertising or analytics cookies that track you across other sites.

Platform operator (data processor):
ServiceSellPro Limited
Registered in England & Wales · Company No. 17211707
Registered office: 25 Meadow Park, Kirkheaton, Huddersfield HD5 0HX
ICO Data Protection Registration: ZC144538 (renews 11 May 2027)
Email: Info@servicesellpro.co.uk

Data Protection Officer:
Mr Steve Kirby
25 Meadow Park, Kirkheaton, Huddersfield HD5 0HX
Email: steve.kirby21@gmail.com
Telephone: 07885 735028

Your data controller is the workshop you booked with — their name and contact details appear at the top of every quote we send.

For technical/platform questions email Info@servicesellpro.co.uk.