Privacy policy

CEO Paintless Dent Repair (“we”, “us”, “our”) is a sole trader business based in Elland, West Yorkshire, providing paintless dent repair to private and trade customers. This policy applies to this website, ceopaintlessdentrepair.co.uk.

We are the data controller for the personal information described below. That means we decide what is collected and what happens to it, and we are responsible to you for it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

You can contact us about this policy, or about any personal information we hold, at info@ceopaintlessdentrepair.co.uk. As a sole trader we do not publish a registered office address; a postal address is available on request for a formal request or complaint.

We collect only the information you choose to give us. There is no account to create and we do not build a profile of you.

Callback requests. The callback form on our home page collects your name, telephone number and postcode. All three are required so that we can return your call and confirm you are within the area we cover.

Quote enquiries. The quote form collects your name, email address and a description of the damage. Your telephone number and vehicle registration are optional.

Photographs. The quote form allows you to attach up to 6 photographs of the damage. These are optional, and any personal information visible in them — for example a number plate, a property or a person — is collected with them.

Technical information. Our hosting provider keeps standard server access logs, including IP addresses, in the ordinary course of operating the website.

We do not collect special category data, and we ask that you do not send it to us.

We use the information you provide to:

• respond to your enquiry and answer questions about it
• assess the damage, prepare a quotation and arrange the work
• carry out the repair and deal with anything arising from it
• keep the business and accounting records we are required to keep

We do not use your information for marketing, we do not add you to a mailing list, and we do not sell or rent it to anyone.

We rely on the following lawful bases under Article 6 of the UK GDPR:

Legitimate interests. Responding to an enquiry you have sent us is our legitimate interest in running the business, and is what you would expect when you contact a trader asking for a quotation.

Contract. Where an enquiry becomes a job, we process what is necessary to carry out that work for you.

Legal obligation. We retain records of completed work to meet our tax and accounting obligations.

We share personal information only with the service providers that operate parts of this website on our behalf. They act on our instructions and may not use your information for their own purposes.

Formspark processes form submissions and forwards them to us. See their privacy policy.

Uploadcare hosts photographs attached to the quote form. Files are uploaded from your browser directly to Uploadcare and we receive a link to each one. Those links are long and randomly generated, but they are not password protected, so anyone holding a link can view the photograph. See their privacy and security information.

Our hosting provider serves the website and maintains server logs.

We may also disclose information where we are required to do so by law, or to establish, exercise or defend legal claims. Otherwise we do not pass it to anyone.

Some of the providers named above are based outside the United Kingdom, or use infrastructure outside it, which means your information may be transferred abroad. Where that happens, the transfer is covered by UK adequacy regulations, or by standard contractual clauses together with the UK International Data Transfer Addendum, so that your information continues to receive an equivalent level of protection.

We keep personal information only for as long as we need it, and then delete it.

• Enquiries that do not result in work: up to 12 months from your last contact with us, so that a conversation picked up later still makes sense.
• Records of completed work: six years from the end of the tax year they relate to, as required for tax and accounting purposes.
• Photographs you attach: stored by Uploadcare and kept with the enquiry record they belong to.
• Server logs: retained by our hosting provider under their own standard retention period.

This website does not use cookies. We set no analytics, advertising or tracking cookies of any kind. There is no advertising, no remarketing tag, no session recording, no heatmap and no social media pixel on this site.

We use Google Search Console to see how the website appears in Google search results. It works from Google’s own record of visiting the site, places nothing in your browser and tells us nothing about you as an individual.

If we introduce analytics in future, this policy will be updated first and you will be asked for your consent before any cookie is set.

Fonts are served by Google Fonts, which means your browser requests the font files from Google.

You can block or delete cookies through your browser settings, although doing so may affect how some websites work.

This website is served over an encrypted connection, and form submissions and photograph uploads are encrypted in transit. Our service providers maintain their own technical and organisational security measures, and access to enquiries is limited to those who need it in order to carry out the work.

No method of transmission over the internet is completely secure, so we cannot guarantee absolute security, but we take appropriate measures to protect your information against loss, misuse and unauthorised access.

Under UK data protection law you have the right to:

• be informed about how your information is used, which is the purpose of this policy
• request a copy of the personal information we hold about you
• have inaccurate information corrected
• have your information erased where there is no continuing reason for us to hold it
• restrict or object to our processing of your information
• request the transfer of your information to another provider

To exercise any of these rights, contact us using the details in clause 12. There is no form to complete and no charge, and we will respond within one month.

Children. This website is intended for people arranging vehicle repairs and is not directed at children. We do not knowingly collect information about anyone under 16.

Links to other websites. This website links to third-party sites, including our social media profiles. We are not responsible for the privacy practices of those sites and recommend you read their own policies.

Changes to this policy. We may update this policy from time to time to reflect changes to the website or to the law. The current version is always published on this page, and the date it was last updated is shown alongside the contents.

For any question about this policy, or to make a request about your personal information, contact us:

Telephone: 07809 109477

Email: info@ceopaintlessdentrepair.co.uk

If you are not satisfied with how we have handled your information or your request, you have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection, at ico.org.uk or on 0303 123 1113. We would ask that you raise it with us first, so that we have the chance to put it right.