Who we are

The data controller for personal data described in this policy is FleetFixer (trading as FleetFixer), with registered office at United Kingdom (contact us for current registered office details). For privacy enquiries, use our Contact page and mark your message "Data protection".

Personal data we collect

Depending on how you use the platform, we may process:

• Identity and account data — name, email address, password or sign-in provider details (for example Google), account type (client or mechanic), and verification status.
• Profile and business data — phone number, bio, trade or skills, years of experience, service area, and documents you submit for mechanic verification.
• Location data — town, city, postcode, or coordinates you provide for matching, job sites, or workshop addresses. Full street addresses may be shared only when needed for a specific job you are party to.
• Job and transaction data — job titles, descriptions, vehicle details (including registration where you enter it), photos, budgets, bids, quotes, status, reviews, and dispute records.
• Communications — in-platform messages, support requests, and notification preferences.
• Technical and usage data — IP address, browser and device type, log data, security signals, and aggregated usage to operate and improve the service. We use cookies and similar technologies as described below.

We do not ask you to provide special category data (such as health information) through the platform. Please avoid sharing unnecessary sensitive information in job descriptions or messages unless it is genuinely needed for the repair.

How we use personal data and our lawful bases

Under UK GDPR we must have a lawful basis for each purpose. We rely on the following:

• Contract — to create and manage your account, post or respond to jobs, messaging, notifications about your activity, and provide support related to the service you request.
• Legitimate interests — to operate and improve the marketplace, prevent fraud and misuse, maintain security, show relevant listings, handle disputes at a platform level, and understand aggregate usage (balanced against your rights).
• Consent — where required for optional marketing emails or non-essential cookies; you may withdraw consent at any time without affecting core account functions.
• Legal obligation — where we must retain or disclose data to comply with UK law, court orders, or regulators.

Who we share data with

FleetFixer is a marketplace: profile and job information is visible to other users when needed to quote, hire, message, or complete work. We do not sell your personal data.

We use trusted processors to run the platform, including providers for hosting, authentication, database and file storage, email delivery, maps, and (where enabled) analytics or AI-assisted help. They process data only on our instructions and under appropriate contracts. Some providers may process data outside the UK; where they do, we use safeguards recognised under UK law (such as the UK International Data Transfer Agreement or adequacy regulations).

We may disclose data if required by law, to protect users and the public, or in connection with a business sale or restructuring (with appropriate protections).

Cookies and similar technologies

We use cookies and similar technologies in line with the Privacy and Electronic Communications Regulations (PECR):

• Strictly necessary — sign-in, security, and core site operation (no consent required).
• Functional — preferences and features you expect (for example staying signed in).
• Analytics — where used, to understand how the site is used; we will ask for consent where UK law requires it.

You can control cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the site from working.

How long we keep data

We keep personal data only as long as needed for the purposes above, including:

• Account data — while your account is active and for a reasonable period after closure.
• Job, bid, and message records — to support disputes, reviews, and legal claims.
• Security and audit logs — typically up to 12 months unless a longer period is required.
• Marketing preferences — until you unsubscribe or withdraw consent.

We may retain anonymised or aggregated data that no longer identifies you.

Security and breaches

We implement appropriate technical and organisational measures for a marketplace of our size, including access controls and reputable infrastructure providers. No system is completely secure. If we become aware of a personal data breach that poses a risk to your rights, we will notify you and the Information Commissioner's Office (ICO) where UK law requires.

Automated processing and AI assistance

We may offer an optional AI chat assistant to answer general questions about the platform. It does not make decisions with legal or similarly significant effects about you. Job matching and hiring remain under human control. Do not share passwords or unnecessary personal data in chat.

Your rights under UK law

Subject to exemptions, you have the right to:

• Access a copy of your personal data.
• Rectify inaccurate data (much of this is editable in your profile).
• Erase data in certain circumstances ("right to be forgotten").
• Restrict or object to processing in certain circumstances.
• Data portability for data you provided, where processing is automated and based on contract or consent.
• Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us via Contact with "Data protection" in the subject. We will respond within one month in most cases. You also have the right to lodge a complaint with the ICO: ico.org.uk/make-a-complaint. If we are required to pay a data protection fee, details are on the ICO register.

Children

The platform is for adults (18 and over) running fleets or working as mechanics. We do not knowingly collect personal data from anyone under 18. Contact us if you believe a child has provided data and we will delete it.

Marketing

We may send service-related messages about your account, jobs, bids, and security without separate marketing consent. Promotional emails, where we send them, will comply with PECR — we will only email you with consent or an existing customer relationship as permitted by law, and every marketing email will include a way to opt out.

Changes to this policy

We may update this policy from time to time. We will post the new version here and change the "Last updated" date. For material changes we will take reasonable steps to notify you (for example a notice on the site or email). Continued use after the effective date means you accept the updated policy where the law allows.

Contact us

Privacy and data protection: Contact FleetFixer. See also our Terms of Service.