Privacy Policy

This Privacy Policy explains how KD Breakdown Recovery Plymouth ("we", "us", "our") collects, uses, stores and protects your personal data when you use our website or contact us for vehicle breakdown recovery or roadside assistance.

We are committed to protecting your privacy and handling your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are (data controller)

The data controller responsible for your personal data is:

• Business name: KD Breakdown Recovery Plymouth
• Location: Plymouth, Devon
• Email: mungro@hotmail.co.uk
• Phone: 07860 315369

KD Breakdown Recovery Plymouth is a sole trader business, not a limited company. If you have any questions about this policy or how we use your data, please contact us using the details above.

2. What personal data we collect

Depending on how you interact with us, we may collect:

• Identity data - name
• Contact data - email address, telephone number, and a location or postcode you give us for a quote or call-out
• Vehicle data - registration, make, model and the fault or situation you describe
• Enquiry data - details of the recovery or roadside help you need, photographs you send, and the content of your message
• Technical data - IP address and basic server log information when you visit the website (for security and abuse prevention)
• Communication data - records of calls, WhatsApp messages, emails or other correspondence relating to your enquiry or job

We do not intentionally collect special category (sensitive) personal data via this website. Please do not include sensitive information in emails or messages unless it is strictly necessary for your enquiry.

3. How we collect your data

• When you email, call, text or message us on WhatsApp
• When you leave a review or interact with us on Facebook or Google
• When you engage us to provide recovery or roadside services

Our website is not designed to place non-essential tracking cookies. If we introduce analytics or marketing cookies in future, we will update this policy and, where required, obtain your consent.

4. Why we use your data (purposes and lawful bases)

Under UK GDPR we must have a lawful basis for processing personal data. We use your information for:

• Responding to enquiries and providing quotes - lawful basis: legitimate interests (to run our business and respond to prospective customers) and/or steps prior to entering a contract where you request a quote or call-out.
• Performing a contract - arranging and delivering the recovery or roadside service you have asked us to provide (lawful basis: contract).
• Customer service and job records - managing jobs, invoices and aftercare (lawful bases: contract and legitimate interests).
• Legal and insurance obligations - keeping records required for tax, insurance claims or legal claims (lawful bases: legal obligation and/or legitimate interests).
• Website security - keeping the website available and secure (lawful basis: legitimate interests).

You may ask us to stop using your details for marketing at any time by contacting us. We do not currently send bulk marketing emails.

5. Who we share your data with

We do not sell your personal data. We may share it only where necessary with:

• Service providers who help us operate our business (for example, email and hosting providers on cPanel)
• Garages or trade partners involved in delivering the service, where you have asked us to take the vehicle to them
• Professional advisers such as insurers, accountants or legal advisers where required
• Authorities where we are legally required to do so

Any third parties processing data on our behalf are expected to do so only under our instructions and with appropriate security measures, or under their own legal obligations where they act as independent controllers.

6. International transfers

We are based in the United Kingdom. Our website hosting and email may involve servers or support staff outside the UK. Where we transfer personal data outside the UK, we will ensure appropriate safeguards are in place as required by UK data protection law (for example, UK adequacy regulations or the UK International Data Transfer Agreement / Addendum), or rely on another lawful mechanism where available.

Our contact email is hosted by Microsoft Hotmail / Outlook. Microsoft processes data as described in its own privacy information. Using WhatsApp, Facebook or Google Maps will also involve those companies as independent controllers.

7. How long we keep your data

We keep personal data only for as long as needed for the purposes above:

• General enquiries that do not lead to a job - typically up to 12 months
• Customer / job records - for the duration of the work and then as needed for insurance, complaints and legal or accounting requirements (often up to 6 years)
• Server / security logs - for a limited period for security monitoring

When data is no longer required, we will delete or anonymise it securely where practicable.

8. How we protect your data

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse. This includes using secure hosting, restricting access to business communications, and not asking you to send payment card details by email or message.

No method of transmission over the internet is completely secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately.

9. Your rights under UK GDPR

You have the following rights in relation to your personal data (subject to certain legal exemptions):

• Right of access - to request a copy of the personal data we hold about you
• Right to rectification - to have inaccurate or incomplete data corrected
• Right to erasure - to request deletion in certain circumstances (the "right to be forgotten")
• Right to restrict processing - to limit how we use your data in certain cases
• Right to data portability - to receive certain data in a structured, commonly used format
• Right to object - to object to processing based on legitimate interests
• Right to withdraw consent - where we rely on consent, you may withdraw it at any time without affecting processing already carried out
• Rights related to automated decision-making - we do not use automated decision-making or profiling that produces legal or similarly significant effects

To exercise any of these rights, contact us using the details in section 1. We may need to verify your identity before responding. We aim to respond within one month.

10. Children

Our services and website are aimed at adults arranging vehicle recovery. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Third-party links and maps

Our website may link to third-party services such as Google Maps, WhatsApp, Facebook or Google Search. Those services have their own privacy policies. We are not responsible for their content or practices. Using those services may involve sharing data with the third party according to their terms.

12. Complaints

If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve the matter.

You also have the right to lodge a complaint with the UK supervisory authority:

• Information Commissioner's Office (ICO)
• Website: https://ico.org.uk/
• Helpline: 0303 123 1113

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will change when we do. Please review this page periodically. Continued use of our website after changes constitutes awareness of the updated policy where permitted by law.

14. Contact

For privacy enquiries, email mungro@hotmail.co.uk or call 07860 315369. We operate from Plymouth, Devon.

Back to contact