Privacy Policy

Last updated: 12 May 2026

This privacy policy explains how Black Diamond Garage Ltd ("we", "us", "our") collects, uses and protects personal information you provide when you use our website or our services. We are the data controller for the personal data we hold about you.

1. Who we are

Black Diamond Garage Ltd, a company registered in England & Wales (company number REPLACE_ME). Registered office: 11, Oldham, 11.

For any privacy-related queries you can contact us by email at or by phone on 0161 000 0000.

2. What information we collect

When you use our website or services we may collect the following personal data:

• Name, email address and phone number (when you submit a quote request or contact form).
• A description of the parts you would like cleaned, optionally with the material and the vehicle or bike they came from.
• Details of the service you are enquiring about, your preferred delivery method (drop-off, post, collection) and any other notes you provide.
• Billing information (name, contact details, invoice line items, payment status) when we invoice you for work carried out. We do not store credit-card details ourselves.
• Technical information such as your IP address and the time of your submission, used to prevent abuse of our forms.

3. Why we collect it and the lawful basis

• Performance of a contract — to provide quotes, schedule work, clean the parts you've sent us and invoice you for the work.
• Legitimate interest — to respond to enquiries you send us, to keep records of work we have done and to prevent fraudulent or abusive submissions to our website.
• Legal obligation — we are required by HMRC to retain financial records (including invoices) for at least six years.

4. Who we share your data with

We do not sell your data. We share it only with the following processors, who act on our instructions:

• Google (Firebase) — hosting of our database and authentication. Data is stored in Google Cloud data centres.
• Resend — sending transactional email (quote confirmations, invoice emails).
• Vercel — hosting of the website and its serverless API endpoints. Vercel processes IP addresses and request metadata in transit, but does not persist personal data from website visitors.
• Cloudflare — DNS and edge TLS termination. Cloudflare may process IP addresses transiently.
• Privacy-friendly web analytics — aggregated, non-identifying traffic statistics. Our analytics provider does not set tracking cookies, does not collect personally identifiable information and does not build profiles of individual visitors. See our cookies policy for detail.

We may also share information if we are required to by law, by a court order, or to protect the rights, property or safety of our business, our customers, or others.

5. How long we keep your data

• Quote and contact submissions: up to 24 months from the date of submission, unless they become a customer, in which case we keep them for as long as the customer relationship continues.
• Invoices and financial records: 6 years (or longer where required by HMRC).
• Email account credentials: for as long as you have an active staff/admin account with us.

6. Your rights

Under UK GDPR you have the right to:

• Ask us for a copy of the personal data we hold about you (right of access).
• Ask us to correct data that is wrong or incomplete.
• Ask us to delete your data where we no longer have a lawful basis to keep it.
• Ask us to restrict or object to our processing of your data.
• Ask us to transfer your data to another provider in a portable format.

To exercise any of these rights, contact us at .

7. Cookies

Our public website does not set non-essential cookies. The staff sign-in area uses strictly necessary cookies to keep staff signed in. See our cookies policy for the full list.

8. Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Our ICO registration number is REPLACE_ME.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will tell you when the policy was last changed. For significant changes we will let you know by email if you have an account with us.

This policy is provided as starter content. It is not legal advice. We recommend getting it reviewed by a UK solicitor for your specific circumstances.