Privacy notice

What we collect, and why

• Contact details (phone, email) — to verify you, send booking updates by SMS, and let you recover a booking from a new device.
• Vehicle registration & details — to prefill your tyre size and match you with the right partner. Registration lookups (DVLA/tyre data) are stored encrypted (see "How we protect it" below).
• Location (postcode or what3words) — to match you with nearby partners and estimate arrival time. Never shown to a partner until their quote is accepted.
• Job & payment records — kept for dispute resolution, accounting, and fraud prevention, even after your account is deleted (see below).

Who we share it with

The partner whose quote you accept receives what's needed to do the job (location, issue, tyre details) and your phone number once booked. We use Stripe for payment processing and Twilio for SMS — both process the minimum data required to do their job on our behalf. We never sell personal data.

How we protect it

Data is encrypted in transit (TLS) and at rest by our database provider. The most sensitive fields (vehicle lookup snapshots, rep marketing pack addresses) carry a second, application-level layer of encryption. See docs/SECURITY.md in the codebase for the full breakdown.

Retention

Job, payment, and review records are kept for as long as needed for accounting and dispute resolution (typically up to 6 years, per standard UK financial record-keeping practice), even if you delete your account. Everything else is deleted or anonymized on request — see below.

Your rights

Under UK GDPR and (for California residents) the CCPA, you can request a copy of your data or ask us to delete it. If you're signed in below, you can do both instantly; otherwise sign in to your bookings first.