In short
- We use your details to reply to enquiries, to carry out and invoice work on vehicles, and to meet our legal obligations.
- We never sell your personal data or share it for anyone else's marketing.
- This website sets no cookies and uses no analytics, advertising or tracking.
- You can ask to see, correct or delete the data we hold about you, normally free of charge.
- Any question about your data goes to info@lcclinic.co.uk or 0151 486 5994.
This summary is for convenience only. The full policy below sets out your rights and our obligations.
This privacy policy (the "Policy") is issued by Liverpool Car Clinic Ltd ("Liverpool Car Clinic", "we", "us" or "our"). It explains how we collect, use, store and share personal data about you, and sets out the rights you have in relation to it.
It applies to personal data we process when you visit lcclinic.co.uk (the "Website"), send us an enquiry, contact us by telephone, email or social media, or engage us to inspect, service or repair a vehicle, whether as a private customer or on behalf of a business, fleet or rental company.
We process personal data in accordance with the UK General Data Protection Regulation (the "UK GDPR"), the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003 ("PECR"), each as amended or replaced from time to time (together, "Data Protection Law").
Please read this Policy carefully. It does not form part of any contract between you and us, and we may update it as described under Changes to this policy.
Liverpool Car Clinic Ltd is the controller of your personal data for the purposes of Data Protection Law. This means we decide why and how your personal data is processed, and we are responsible for it.
- Legal name
- Liverpool Car Clinic Ltd
- Company number
- 13092488, registered in England and Wales
- VAT registration number
- 391 1579 79
- Address
- Unit 16 Owen Drive, Speke, Liverpool, L24 1YL
- info@lcclinic.co.uk
- Telephone
- 0151 486 5994
We are not required to appoint a data protection officer and have not done so. Questions about this Policy, or about how we handle your personal data, should be sent to us using the details under Contact us.
Personal data means any information about an individual from which that person can be identified, directly or indirectly. It does not include data from which the individual can no longer be identified (anonymous data). Depending on how you deal with us, we may collect, use, store and transfer the following categories of personal data:
- Identity data
- Your name and, where you contact us on behalf of a business, your job title and the organisation you represent.
- Contact data
- Your email address and telephone number and, where needed to invoice you or to collect or return a vehicle, your postal address.
- Vehicle data
- The registration number, make, model, vehicle identification number (VIN) and mileage of a vehicle, its service and repair history with us, and photographs of it taken in the workshop. A registration number can identify you when it is linked to your name, so we treat it as personal data.
- Enquiry and correspondence data
- The content of messages you send us through the enquiry forms on the Website, by email, by telephone or through social media, and our replies.
- Transaction data
- Estimates, authorisations, job records, invoices and records of payments made to us. The Website does not take payments and we do not collect card details through it.
- Fleet data
- Where we work for a business, fleet or rental client, the names and contact details of the client's staff and drivers, purchase order and authorisation references, and any other details the client gives us so that we can collect, repair and return its vehicles.
- Technical data
- Your IP address, browser type and version, device type, operating system, the pages you request and the date and time of each request, which the server hosting the Website records automatically.
We do not ask for, and the enquiry forms are not designed to collect, special category data (such as information about your health, ethnic origin, religious beliefs or sexual orientation) or information about criminal convictions and offences. Please do not include such information in an enquiry. If you choose to tell us something of this kind, for example a disability that affects how a vehicle should be collected from you, we will use it only for that purpose and only with your explicit consent.
The Website is not directed at children and we do not knowingly collect personal data from children through it. If you believe a child has given us personal data, please contact us and we will delete it.
- Directly from you
- When you complete an enquiry form, telephone or email us, message us on Facebook or Instagram, visit the workshop, or engage us to carry out work.
- From your employer or a fleet operator
- Where a vehicle is owned or managed by a business, leasing, rental or fleet management company, that company may give us your name and contact details so that we can arrange the collection, repair or return of the vehicle.
- From third parties acting for you
- Insurers, warranty providers and recovery operators, where the work relates to a claim, a warranty or a recovery.
- Automatically
- Technical data, when you use the Website. See Cookies for what the Website does and does not store on your device.
Data Protection Law requires us to have a lawful basis for each purpose for which we use your personal data. The table below sets out each purpose and the basis we rely on. Where we rely on legitimate interests, we have weighed those interests against your interests, rights and freedoms and concluded that ours are not overridden. You may ask us for details of that assessment.
| Purpose | Data used | Lawful basis |
|---|---|---|
| Replying to an enquiry you send through the Website, by email, by telephone or on social media, and preparing an estimate | Identity, contact, vehicle, enquiry | Taking steps at your request before entering into a contract (Article 6(1)(b) UK GDPR). Where you enquire for a business, our legitimate interest in responding to business enquiries (Article 6(1)(f)) |
| Booking in, collecting, inspecting, diagnosing, servicing, repairing and returning a vehicle, including seeking authorisation before work proceeds | Identity, contact, vehicle, transaction, fleet | Performance of a contract with you (Article 6(1)(b)). Where the contract is with a business or fleet client, our and the client's legitimate interest in delivering the agreed work (Article 6(1)(f)) |
| Arranging specialist work, recovery or a courtesy vehicle at your request | Identity, contact, vehicle | Performance of a contract with you (Article 6(1)(b)) |
| Dealing with insurers and warranty providers on warranty and insurance-related repairs | Identity, contact, vehicle, transaction | Performance of a contract with you (Article 6(1)(b)) and our legitimate interest in being paid for the work (Article 6(1)(f)) |
| Invoicing, taking payment and recovering sums owed to us | Identity, contact, transaction | Performance of a contract (Article 6(1)(b)) and our legitimate interest in recovering debts (Article 6(1)(f)) |
| Keeping a service and repair history for each vehicle, so that maintenance intervals are not missed and past work can be checked | Identity, vehicle, transaction | Our legitimate interest in providing a reliable service and keeping accurate records (Article 6(1)(f)) |
| Keeping accounting, tax and VAT records | Identity, contact, transaction | Compliance with a legal obligation (Article 6(1)(c)) |
| Publishing photographs of our work on the Website and on social media, with the registration plates of customer vehicles obscured | Vehicle | Our legitimate interest in showing prospective customers the work we do (Article 6(1)(f)) |
| Running and securing the Website, preventing spam and misuse of the enquiry forms, and diagnosing technical faults | Technical, enquiry | Our legitimate interest in operating a secure and working website (Article 6(1)(f)) |
| Telling you about our services by email or text message | Identity, contact | Your consent (Article 6(1)(a)) or, where you are an existing customer, our legitimate interest in promoting similar services under the soft opt-in in regulation 22 of PECR (Article 6(1)(f)) |
| Establishing, exercising or defending legal claims, and responding to lawful requests from courts, regulators and law enforcement | Any relevant category | Compliance with a legal obligation (Article 6(1)(c)) and our legitimate interest in protecting our business (Article 6(1)(f)) |
We only send marketing by email or text message where you have agreed to it, or where you are an existing customer and have not told us you do not want it. Every message will tell you how to opt out, and you can opt out at any time by contacting us.
Where we need personal data to perform a contract with you or to comply with the law, and you do not provide it, we may be unable to carry out the work you have asked for. The fields marked with an asterisk on the enquiry forms are the minimum we need to reply to you. Everything else is optional.
We will only use your personal data for the purpose for which we collected it, unless we reasonably consider that we need to use it for another purpose that is compatible with the original one. If we need to use it for an unrelated purpose, we will tell you and explain the lawful basis that allows us to do so.
We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.
Some of our service providers, such as providers of email and hosting services, may process personal data outside the United Kingdom.
Where we transfer personal data outside the UK, we make sure it is protected to the standard UK law requires, by ensuring that at least one of the following applies:
- the destination country has been approved under UK data protection law as providing an adequate standard of protection for personal data;
- the transfer is made under the International Data Transfer Agreement or the International Data Transfer Addendum to the European Commission's standard contractual clauses, issued by the Information Commissioner; or
- another safeguard or exception permitted by Chapter V of the UK GDPR applies.
You may contact us for further information about the safeguards we use.
We keep personal data only for as long as is necessary for the purposes for which we collected it, including to meet any legal, accounting or reporting requirement. In deciding the right period we consider the amount, nature and sensitivity of the data, the risk of harm from its unauthorised use or disclosure, the purposes for which we hold it, whether we can achieve those purposes by other means, and the legal requirements that apply.
| Record | How long we keep it |
|---|---|
| Enquiries that do not lead to any work | Up to 12 months from our last contact with you |
| Customer and vehicle records, estimates, authorisations and job records | Six years from the last work we carried out for you, which reflects the period in which a claim may ordinarily be brought under the Limitation Act 1980 |
| Invoices, accounting and VAT records | Six years from the end of the financial year to which they relate, as tax law requires |
| Contact details of fleet and business clients' staff and drivers | For the duration of our relationship with the client, then six years |
| Website server logs | Only for as long as needed to keep the Website secure and to investigate misuse, after which they are deleted or overwritten |
| Marketing preferences | Until you withdraw consent or opt out. We keep a record of an opt-out so that we can respect it |
At the end of the relevant period we securely delete or anonymise the data. We may keep it for longer where the law requires us to, or where it is reasonably necessary to establish, exercise or defend a legal claim.
We have put in place appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and access. These include serving the Website only over an encrypted HTTPS connection, checking every enquiry form submission on our server, and limiting access to personal data to staff and service providers who need it to do their work and who are bound to keep it confidential.
No transmission of data over the internet can be guaranteed to be completely secure. We have procedures to deal with any suspected personal data breach, and we will notify you and the Information Commissioner's Office where we are legally required to do so.
Under Data Protection Law you have the following rights in relation to your personal data. Some of them apply only in certain circumstances and are subject to exemptions.
- Right of access
- To ask for a copy of the personal data we hold about you and for information about how we use it. This is commonly known as a subject access request.
- Right to rectification
- To have inaccurate personal data corrected and incomplete personal data completed.
- Right to erasure
- To ask us to delete your personal data where there is no good reason for us to keep it. This right does not apply where we must keep the data to comply with a legal obligation, for example to retain tax records.
- Right to restrict processing
- To ask us to suspend the use of your personal data, for example while its accuracy is being checked.
- Right to object
- To object to processing based on our legitimate interests, on grounds relating to your particular situation. You have an absolute right to object to direct marketing at any time.
- Right to data portability
- To receive the personal data you gave us in a structured, commonly used and machine-readable format, or to have it sent to another organisation, where we process it by automated means on the basis of your consent or a contract with you.
- Right to withdraw consent
- Where we rely on your consent, to withdraw it at any time. Withdrawal does not affect the lawfulness of anything we did before it.
To exercise any of these rights, contact us using the details under Contact us. You do not usually have to pay a fee. We may charge a reasonable fee, or refuse to act on a request, where it is manifestly unfounded or excessive. We may ask you for information to confirm your identity before we respond, so that personal data is never disclosed to someone who has no right to receive it.
We will respond without undue delay and in any event within one month of receiving your request, or of receiving any information we need to confirm your identity. Where a request is complex, or you have made a number of requests, we may extend that period by up to two further months, in which case we will tell you within the first month and explain why.
If you are unhappy with how we have handled your personal data, please contact us first using the details under Contact us, so that we have the opportunity to put things right. We will acknowledge your complaint within 30 days, investigate it without undue delay and tell you the outcome.
You also have the right to lodge a complaint at any time with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, or with any body that succeeds it. You can contact the ICO through ico.org.uk/make-a-complaint or by telephone on 0303 123 1113. We would, however, appreciate the chance to deal with your concerns before you approach the ICO.
The Website links to third-party websites and services, including Facebook, Instagram and Google Maps. None of them is embedded in the Website, so they receive no information about your visit unless you choose to follow a link. Once you do, the third party processes your personal data under its own privacy policy, which we encourage you to read. We are not responsible for the content or privacy practices of third-party websites.
If you message us or interact with our pages on Facebook or Instagram, Meta, which operates both services, also processes your personal data under its own privacy policy. For the page statistics Meta makes available to us, known as Page Insights, we and Meta act as joint controllers, and Meta has accepted primary responsibility for that processing.
We keep this Policy under regular review and may update it from time to time, for example to reflect changes in the law or in the way we work. The date at the top of this page shows when it was last updated. Where we make a significant change, we will take reasonable steps to bring it to your attention. This version replaces all earlier versions.
It is important that the personal data we hold about you is accurate and up to date. Please tell us if your details change during your relationship with us.
Questions about this Policy, requests to exercise your rights and complaints about how we handle your personal data should be sent to:
- info@lcclinic.co.uk
- Telephone
- 0151 486 5994
- Post
- Data protection, Liverpool Car Clinic Ltd, Unit 16 Owen Drive, Speke, Liverpool, L24 1YL