Last updated: 28 March 2026
1. Introduction
Vertex Bodyworks ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, use our services, or otherwise interact with us.
We are based at Unit 4 Drake Court, Riverside Park Industrial Estate, Middlesbrough, TS2 1RS. For any questions about this policy, you can contact us at contact@vertex-bodyworks.co.uk.
This policy is provided in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
We may collect and process the following categories of personal data:
- Identity data: your name, title, and date of birth.
- Contact data: your postal address, email address, and telephone numbers.
- Vehicle data: your vehicle registration number, make, model, colour, and details of damage or repairs required.
- Financial data: payment card details and bank account information (processed securely via our payment provider).
- Technical data: your IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.
- Usage data: information about how you use our website and services.
- Marketing data: your preferences in receiving marketing from us and communication preferences.
- Photographic data: images of your vehicle submitted for quotation or repair documentation purposes.
3. How We Collect Your Data
We collect personal data through the following methods:
- Direct interactions: when you fill in forms on our website, request a quote, book a repair, contact us by phone, email, or social media, or provide feedback.
- Automated technologies: as you interact with our website, we may automatically collect technical and usage data through cookies and similar technologies. Please see our Cookie Policy for further details.
- Third parties: we may receive personal data from insurance companies, fleet management companies, or vehicle leasing companies in connection with repair work.
4. How We Use Your Data
We use your personal data for the following purposes:
- To provide our vehicle repair services and manage your booking.
- To process and deliver quotations.
- To process payments and manage invoicing.
- To communicate with you about your repair, including providing updates and aftercare information.
- To manage our relationship with you, including responding to enquiries and complaints.
- To comply with legal obligations, including insurance claim processes.
- To improve our website, services, and customer experience.
- To send you marketing communications where you have opted in or where we have a legitimate interest to do so (you can opt out at any time).
5. Lawful Basis for Processing
We rely on the following lawful bases under the UK GDPR:
- Contract: processing is necessary to perform our contract with you (e.g., carrying out a vehicle repair you have booked).
- Legitimate interests: processing is necessary for our legitimate business interests, such as improving our services and marketing (where this does not override your rights).
- Consent: where you have given clear consent for us to process your data for a specific purpose (e.g., marketing emails).
- Legal obligation: processing is necessary to comply with a legal obligation.
6. Cookies
Our website uses cookies to distinguish you from other users and to improve your browsing experience. For detailed information about the cookies we use and the purposes for which we use them, please see our Cookie Policy.
7. Third-Party Sharing
We may share your personal data with the following categories of third parties:
- Payment processors: to securely process your payments.
- Insurance companies: where you have instructed us to carry out insurance-related repair work.
- IT and hosting providers: who provide website hosting, email, and technical support services.
- Analytics providers: such as Google Analytics, to help us understand how our website is used.
- Professional advisers: including lawyers, accountants, and insurers, where necessary.
We do not sell your personal data to any third party. We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Typical retention periods are as follows:
- Customer records and repair history: 6 years from the date of the last transaction (to cover warranty claims and legal requirements).
- Financial records: 6 years as required by HMRC.
- Marketing preferences: until you withdraw consent or unsubscribe.
- Website analytics data: 26 months from the date of collection.
9. Your Rights
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right of access: you can request a copy of the personal data we hold about you.
- Right to rectification: you can ask us to correct any inaccurate or incomplete data.
- Right to erasure: you can ask us to delete your personal data in certain circumstances.
- Right to restrict processing: you can ask us to limit how we use your data.
- Right to data portability: you can request that we transfer your data to another organisation.
- Right to object: you can object to us processing your data for direct marketing or where we rely on legitimate interests.
- Right to withdraw consent: where we rely on consent, you can withdraw it at any time.
To exercise any of these rights, please contact us at contact@vertex-bodyworks.co.uk. We will respond to your request within one month.
10. Data Security
We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (SSL/TLS), secure payment processing, access controls, and regular security reviews.
11. International Transfers
We do not routinely transfer your personal data outside the United Kingdom. If any transfer is necessary (for example, through the use of cloud-based services), we will ensure that appropriate safeguards are in place in accordance with UK data protection law.
12. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
We would appreciate the chance to address your concerns before you approach the ICO, so please contact us first at contact@vertex-bodyworks.co.uk.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically to stay informed about how we are protecting your data.
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: