Privacy notice
Last updated: October 2026
Who we are
New Body Mechanics, 17A Blackwater Way, Aldershot, GU12 4DN is the controller of your personal data. Questions about this notice or your data: 07415 383423.
What we collect
- Booking details you give us: name, address and postcode, email, phone number, vehicle registration, the work you want, drop-off time and any notes.
- Vehicle details looked up from DVSA/DVLA records using your registration (make, model, colour, fuel, MOT and tax status).
- Job records: what we did, and the invoices we upload for you.
- Technical data: your IP address is used briefly to stop abuse and repeated attempts. When you view your account we use security cookies (below).
- Messages you send by phone, email, social media or our chat assistant.
- CCTV images of the unit and the area around it.
We don’t ask for card numbers on this website, and we don’t collect special category data.
Why we use it, and our legal basis
- To take and manage your booking, do the work, contact you about it and let you see your bookings and invoices. Basis: contract.
- To keep invoices and accounting records. Basis: legal obligation.
- To check your registration, keep the site secure, prevent fraud and defend legal claims, and to contact you about work we have done (for example a follow-up on a repair). Basis: legitimate interests.
- CCTV protects the premises, staff and customers’ vehicles, and helps with insurance claims and incidents. Basis: legitimate interests.
- To send you reminders or offers, only if you have asked for them. Basis: consent, which you can withdraw at any time.
Who we share it with
We don’t sell your data. We share it only with:
- our website hosting and email providers, who process it for us;
- DVSA/DVLA, who receive only the registration you enter;
- our chat assistant provider, if you use the chat;
- our accountants, and parts suppliers or other garages where needed to complete your job;
- the police, courts or other authorities where the law requires.
Our pages load fonts from Google Fonts, and our reviews section shows widgets from Google, Checkatrade and ClickMechanic. Those providers receive your IP address and may set their own cookies when they load; see their privacy notices. If a provider is outside the UK, we rely on UK-approved safeguards.
How long we keep it
- Invoices and accounting records: 6 years after the end of the tax year, as tax law requires.
- Booking and job history: 3 years.
- Sign-in codes: minutes. Security logs and rate-limit records: a few days.
- Chat messages: 30 days.
- CCTV images: normally overwritten within 30 days, unless needed for an incident or insurance claim.
After that we delete it or make it anonymous.
Social media
We have pages on Facebook and TikTok (@newbodymechanics). If you message or follow us there, the platform handles your data under its own privacy notice, and we see what you send us.
Cookies
We use only essential cookies: they keep you signed in to your account and protect forms against forgery. They are not used for tracking or advertising, and you can block them in your browser, but My account will not work. [Add a line here if you later add analytics or advertising.]
Your rights
You can ask to see the data we hold about you, correct it, delete it, restrict or object to our use of it, or have a copy moved to someone else. You can withdraw consent at any time. Contact us as above; we’ll answer within one month, and may need to confirm who you are first. Some records (like invoices) must be kept by law, so we can’t always delete them straight away.
Complaints
Please talk to us first. You can also complain to the Information Commissioner’s Office: ico.org.uk, 0303 123 1113.
Changes
If we change this notice we will update the date at the top.