Legal
Privacy Policy
This policy explains what personal data The Quick Repairs collects through this website and our software, why we collect it, and what rights you have over it.
Last updated:
Who we are
The Quick Repairs provides point-of-sale and management software for repair businesses. In this policy, "we" and "us" mean The Quick Repairs; "you" means a visitor to this website or a user of our software.
For data submitted through this website — contact enquiries, demo requests and account sign-ups — we are the data controller. Where our customers use our software to store records about their own customers, our customer is the controller of that data and we act as their processor.
What we collect
We collect only what the service needs to function. Specifically:
- Contact form: your name, email address, phone number and the message you send us.
- Demo request form: your name, email address, phone number, the repair category you work in and the plan you are interested in.
- Account data: the email address and hashed password used to sign in to the admin area. Passwords are stored hashed, never in plain text.
- Payment data: if you subscribe, payment is processed by Stripe. Card details are entered on Stripe's systems and are never stored by us — we retain only the subscription reference, amount, currency and status.
- Technical data: standard server logs including IP address, browser type and pages requested, used for security and diagnosing faults.
- Analytics: if Google Analytics is enabled for this site, aggregated usage data about pages visited and how visitors arrived.
How we use it
We use the data described above to respond to enquiries and demo requests, to provide and support the software, to process subscription payments, to keep the service secure, and to understand which parts of the site are useful so we can improve them.
We do not sell personal data. We do not share it with third parties for their own marketing.
Legal basis for processing
Where the UK or EU GDPR applies, we rely on the following bases: performance of a contract (providing the software you have subscribed to), legitimate interests (responding to an enquiry you sent us, keeping the service secure), consent (analytics cookies, marketing email), and legal obligation (retaining financial records).
Where you have given consent, you can withdraw it at any time without affecting processing carried out before withdrawal.
Who processes data on our behalf
We use a small number of third-party providers to run the service. Each processes data only on our instructions:
- Our hosting provider, for storing the application and its database.
- Stripe, for subscription payments and card processing.
- Our email provider, for sending transactional messages such as form notifications.
- Google Analytics, where enabled, for aggregated site usage statistics.
How long we keep it
Enquiry and demo request records are kept for as long as needed to deal with the enquiry and for a reasonable period afterwards for our own records.
Account data is retained while your account is active. Financial records are kept for the period required by applicable tax and accounting law.
If you ask us to delete your data and we have no legal obligation to retain it, we will do so.
Your rights
Depending on where you live, you may have the right to:
- Ask what personal data we hold about you and receive a copy of it.
- Ask us to correct data that is inaccurate or incomplete.
- Ask us to delete your data where we have no continuing basis to keep it.
- Object to, or ask us to restrict, certain processing.
- Ask us to transfer your data to another provider in a portable format.
- Withdraw consent where processing is based on consent.
- Complain to your local data protection authority.
Security
Access to the admin area requires authentication, and permissions are limited by user role. Passwords are hashed. Sensitive integration credentials stored in the system — payment and API keys — are encrypted at rest.
The site is served over HTTPS. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the data we hold.
International transfers
Our providers may process data in countries other than your own. Where data is transferred out of the UK or EEA, we rely on appropriate safeguards such as the provider's standard contractual clauses.
Children
This service is intended for businesses. It is not directed at children and we do not knowingly collect personal data from anyone under 16.
Changes to this policy
If we change this policy we will update the date at the top of the page. Material changes will be highlighted on the site.
Contact us
For any question about this policy, or to exercise any of the rights above, contact us using the details on our contact page. We aim to respond within 30 days.