This policy explains how we handle your personal data and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018). Please read it alongside any information we give you when you contact us.
This privacy policy applies to the KNR Autos website and to enquiries you make through it. It explains what personal data we collect, why, how we look after it, who we share it with and the rights you have over it.
Who collects your data (the data controller)
The data controller responsible for your personal data is KNR AUTOS LTD, a company registered in England & Wales under company number 17262677, trading as KNR Autos from Church Street Garage, Church Street, Bishops Castle, Shropshire, SY9 5AA.
You can contact us about this policy or your data at any time:
- Phone: 01588 638707
- Email: info@knrautos.com
- Post: Church Street Garage, Church Street, Bishops Castle, Shropshire, SY9 5AA
What personal data we collect
When you contact us through the website form, we collect:
- your name;
- your phone number;
- your email address;
- your vehicle registration, if you choose to provide it;
- the details you include in your message; and
- a record that you confirmed you had read this privacy policy before submitting the form.
If you go on to become a customer, we may also hold records of the work carried out on your vehicle and related correspondence. We only collect information that you choose to give us, and we do not ask for more than we need.
How and why we use your data, and our lawful bases
We use your personal data to:
- respond to your enquiry and arrange bookings;
- provide the services you ask for and keep records of work done;
- contact you about your vehicle, booking or enquiry; and
- keep our business records and meet our legal obligations.
Our lawful bases for processing under the UK GDPR are:
- Consent — when you submit the contact form, you consent to us using your details to respond to your enquiry. You can withdraw your consent at any time (see "Your rights" below).
- Taking steps at your request before entering into a contract — for example, providing a quote or arranging a booking.
- Legitimate interests — running and improving our garage, keeping enquiry records and protecting our website from spam, where this is not overridden by your rights.
- Legal obligation — where we must keep records for tax or accounting purposes.
The contact form and the providers we use
To run the website and respond to enquiries we use a small number of trusted third-party providers, who act as our data processors or independent controllers for the limited purposes below:
- Formspark — processes and delivers your contact-form submission to us by email. The information you enter in the form is sent to Formspark for this purpose.
- Botpoison — provides invisible anti-spam protection on the form. It performs an automated check in your browser to help confirm the submission is genuine and not from a bot.
- OpenStreetMap — displays a map of our location. When the map loads, your browser contacts OpenStreetMap, which may receive technical data such as your IP address.
- Google Fonts — loads the website's typefaces, which may involve your browser contacting Google's servers.
Each of these providers has its own privacy policy governing how it handles data. We do not sell your personal data to anyone.
International transfers
Some of our providers may process data on servers outside the UK. Where that happens, we expect appropriate safeguards (such as adequacy decisions or standard contractual clauses) to be in place to protect your information in line with UK data protection law.
Cookies
This website aims to keep tracking to a minimum and does not use advertising or analytics cookies. Some embedded third-party content (such as the map) may set cookies or process limited technical data when it loads.
How long we keep your data
We keep your personal data only for as long as necessary for the purpose it was collected, to provide our services and to meet any legal or accounting requirements. After that it is securely deleted or anonymised. Enquiries that do not lead to work are kept only as long as needed to deal with them and any follow-up.
Your rights
Under UK data protection law you have the right to:
- be informed about how we use your data (this policy);
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to our processing of your data;
- data portability, where it applies; and
- withdraw consent at any time, where we rely on consent, without affecting processing carried out before you withdrew it.
To exercise any of these rights, please contact us using the details above. If you have a concern we cannot resolve, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with a revised "last updated" date.