Privacy Policy
Data Controller
Gibbard Automotive Ltd
Information Commissioner's Office Registration
ZC223543
Date registered: 15 August 2026
Registration expires: 14 August 2027
GDPR & Privacy Policy
Effective Date: 15th August 2026
Last Updated: 15th August 2026
Gibbard Automotive Ltd (“we”, “our”, “us”, or “the Company”) is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
---
1. Who We Are
Gibbard Automotive Ltd
Registered address: C/O Chapmans Business Solutions Ltd 3 Enterprise Way, Pinchbeck, Spalding, England, PE11 3YR
Trading address: Unit 2, Double Roof Yard, High Road, Moulton, Spalding, PE12 6NT
01775 828868
07782997553
tom@gibbardautomotive.co.uk
For the purposes of data protection law, Gibbard Automotive Ltd is the “Data Controller”.
---
2. What Personal Data We Collect
We may collect and process the following information:
Customer Information
Name
Address
Telephone number
Email address
Vehicle registration number
Vehicle make, model, and VIN/chassis number
Service and repair history
Payment and invoicing information
Website Information (if applicable)
IP address
Browser type
Website usage data
Cookies and analytics data
CCTV Information (if applicable)
CCTV recordings from our premises for security and crime prevention purposes
---
3. How We Collect Your Data
We collect personal data when:
You contact us by phone, email, website, or in person
You book a service or repair
You purchase goods or services from us
You visit our premises
You use our website
You communicate with us regarding quotations, repairs, warranties, or complaints
---
4. How We Use Your Data
We use your personal data for the following purposes:
To provide vehicle servicing, repairs, diagnostics, MOT arrangements, and related services
To manage bookings and appointments
To communicate with you regarding your vehicle or services requested
To issue quotations, invoices, and receipts
To process payments
To maintain warranty and service records
To comply with legal and regulatory obligations
To prevent fraud and maintain security
To improve our services and customer experience
We will only process your data where we have a lawful basis to do so.
---
5. Lawful Bases for Processing
Under UK GDPR, we rely on the following lawful bases:
Contractual Necessity
Processing required to provide services you have requested.
Legal Obligation
Processing required for tax, accounting, consumer protection, and regulatory compliance.
Legitimate Interests
Processing necessary for running our business efficiently, maintaining records, improving services, and protecting our business and customers.
Consent
Where required, we will request your consent before sending marketing communications.
---
6. Marketing Communications
We may occasionally contact customers regarding:
Service reminders
MOT reminders
Promotions or offers
Business updates
You may opt out of marketing communications at any time by contacting us or using the unsubscribe option provided.
---
7. Sharing Your Data
We may share your data with:
Payment processors
Accountants and professional advisers
MOT testing stations
Parts suppliers and warranty providers
IT and software service providers
Recovery operators or subcontractors
Regulatory or law enforcement authorities where legally required
We will never sell your personal data to third parties.
---
8. Data Retention
We retain personal data only for as long as necessary for legal, accounting, warranty, and business purposes.
Typical retention periods may include:
Invoices and accounting records: up to 6 years
Vehicle service records: as reasonably required
CCTV footage: typically 30 days unless required for investigation
Marketing preferences: until consent is withdrawn
---
9. Data Security
We take appropriate technical and organisational measures to protect personal data against:
Unauthorised access
Loss or theft
Misuse
Disclosure
Alteration or destruction
These measures may include password protection, secure software systems, restricted access, and secure disposal of records.
---
10. Your Rights
Under UK GDPR, you have the right to:
Access your personal data
Correct inaccurate personal data
Request deletion of your data where applicable
Restrict processing of your data
Object to processing in certain circumstances
Request transfer of your data
Withdraw consent at any time where processing relies on consent
Lodge a complaint with the Information Commissioner’s Office (ICO)
Requests relating to your personal data should be made in writing using the contact details above.
---
11. Cookies (Website Use)
If our website uses cookies, these may be used to:
Improve website functionality
Analyse website traffic
Remember preferences
Support security features
You may manage cookie settings through your browser.
---
12. Third-Party Links
Our website or communications may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites.
---
13. Changes to This Policy
We may update this Privacy Policy from time to time.
Any updates will be posted on our website and/or made available at our premises.
---
14. Contact Information
If you have any questions about this Privacy Policy or how your personal data is handled, please contact:
Gibbard Automotive Ltd
Unit 2, Double Roof Yard, High Road, Moulton, Spalding, PE12 6NT
01775 828868
07782997553
tom@gibbardautomotive.co.uk
---
15. Complaints
If you are unhappy with how we handle your personal data, you may contact the Information Commissioner’s Office:
Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: https://www.ico.org.uk
---
Gibbard Automotive Ltd
GDPR & Privacy Policy