Who we are

The data controller for personal data described in this policy is FleetFixer (trading as FleetFixer), with registered office at United Kingdom — contact us for current registered office details. For privacy enquiries, email info@fleetfixer.co.uk or use our contact form and mark your message "Data protection".

Personal data we collect

Depending on how you use the platform, we may process:

• Identity and account data — name, email address, password or sign-in provider details (for example Google), account type (client or mechanic), and verification status.
• Profile and business data — phone number, bio, trade or skills, years of experience, service area, and documents you submit for mechanic verification.
• Location data — town, city, postcode, or coordinates you provide for matching, job sites, or workshop addresses. Full street addresses may be shared only when needed for a specific job you are party to.
• Job and transaction data — job titles, descriptions, vehicle details (including registration where you enter it), photos, budgets, bids, quotes, status, reviews, and dispute records.
• Communications — in-platform messages, support requests, and in-app notifications. If you enable browser push notifications, we store a device token (FCM) to deliver alerts about bids, messages, and job activity.
• Technical and usage data — IP address, browser and device type, security signals, and server logs to operate and protect the service. We do not currently run third-party analytics on the website. We use cookies and similar technologies as described below.

We do not ask you to provide special category data (such as health information) through the platform. Please avoid sharing unnecessary sensitive information in job descriptions or messages unless it is genuinely needed for the repair.

How we use personal data and our lawful bases

Under UK GDPR we must have a lawful basis for each purpose. We rely on the following:

• Contract — to create and manage your account, post or respond to jobs, messaging, notifications about your activity, and provide support related to the service you request.
• Legitimate interests — to operate and improve the marketplace, prevent fraud and misuse, maintain security, show relevant listings, handle disputes at a platform level, and understand aggregate usage (balanced against your rights).
• Consent — where required for optional marketing emails or non-essential cookies; you may withdraw consent at any time without affecting core account functions.
• Legal obligation — where we must retain or disclose data to comply with UK law, court orders, or regulators.

Who we share data with

FleetFixer is a marketplace: profile and job information is visible to other users when needed to quote, hire, message, or complete work. We do not sell your personal data.

We use trusted processors to run the platform, including providers for hosting, authentication, database and file storage, email delivery, maps, push notifications (Firebase Cloud Messaging), and our optional AI help assistant. They process data only on our instructions and under appropriate contracts. Some providers may process data outside the UK; where they do, we use safeguards recognised under UK law (such as the UK International Data Transfer Agreement or adequacy regulations). We do not process card payments on the platform today — repair payments are arranged directly between clients and mechanics.

We may disclose data if required by law, to protect users and the public, or in connection with a business sale or restructuring (with appropriate protections).

Cookies and similar technologies

We use cookies and similar technologies in line with the Privacy and Electronic Communications Regulations (PECR):

• Strictly necessary — Firebase authentication session, security, and core site operation (no consent required).
• Functional — preferences you choose, such as cookie consent choice (stored locally) and optional chatbot layout position.
• Analytics and marketing — we do not use analytics or advertising cookies on the public site at present. If we add them later, we will update this policy and ask for consent where required.

When you first visit, a banner lets you accept all cookies we use today or continue with essential cookies only. You can also control cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the site from working.

How long we keep data

We keep personal data only as long as needed for the purposes above, including:

• Account data — while your account is active and for a reasonable period after closure.
• Job, bid, and message records — to support disputes, reviews, and legal claims.
• Security and audit logs — typically up to 12 months unless a longer period is required.
• Marketing preferences — we do not send promotional email campaigns through the platform today; service-related messages about your account and jobs are not marketing.

We may retain anonymised or aggregated data that no longer identifies you.

Security and breaches

We implement appropriate technical and organisational measures for a marketplace of our size, including access controls and reputable infrastructure providers. No system is completely secure. If we become aware of a personal data breach that poses a risk to your rights, we will notify you and the Information Commissioner's Office (ICO) where UK law requires.

Automated processing and AI assistance

We may offer an optional AI chat assistant to answer general questions about the platform. It does not make decisions with legal or similarly significant effects about you. Job matching and hiring remain under human control. Do not share passwords or unnecessary personal data in chat.

Your rights under UK law

Subject to exemptions, you have the right to:

• Access a copy of your personal data.
• Rectify inaccurate data (much of this is editable in your profile).
• Erase data in certain circumstances ("right to be forgotten").
• Restrict or object to processing in certain circumstances.
• Data portability for data you provided, where processing is automated and based on contract or consent.
• Withdraw consent at any time where processing is based on consent.

Signed-in users can download a JSON export or request self-service account deletion from Profile → Privacy & data. To exercise other rights, email info@fleetfixer.co.uk or use our contact form with "Data protection" in the subject. We will respond within one month in most cases. When you delete your account, we remove your sign-in, delete personal preferences (saved searches, templates, push tokens, notifications), and anonymise your profile and display names on historical job records where needed. You also have the right to lodge a complaint with the ICO: ico.org.uk/make-a-complaint. If we are required to pay a data protection fee, details are on the ICO register.

Children

The platform is for adults (18 and over) running fleets or working as mechanics. We do not knowingly collect personal data from anyone under 18. Email info@fleetfixer.co.uk if you believe a child has provided data and we will delete it.

Marketing

We send service-related messages about your account, jobs, bids, messages, and security (in-app and, where enabled, browser push). We do not run a marketing email programme through the platform at present. If we introduce promotional emails in future, we will comply with PECR and provide a clear opt-out.

Changes to this policy

We may update this policy from time to time. We will post the new version here and change the "Last updated" date. For material changes we will take reasonable steps to notify you (for example a notice on the site or email). Continued use after the effective date means you accept the updated policy where the law allows.

Contact us

Privacy and data protection: info@fleetfixer.co.uk · contact form. See also our Terms of Service.