Legal
Privacy Policy
Last updated: 23 August 2026
1. Who we are
FastFix (“we”, “us”) operates a booking platform that connects drivers with independent garages and mobile mechanics. The data controller is [Legal entity name], [registered address], company number [number]. You can contact us at [privacy@yourdomain.com].
Garages you book with are separate businesses. They act as independent controllers for the work they carry out on your vehicle and for their own records.
2. Data we collect
- Account data: name, email address, and sign-in identifiers from email, Google or Apple sign-in.
- Vehicle data: make, model, year, registration and notes you add.
- Booking data: chosen service, garage, date and time, price estimate, and booking status.
- Location data: your approximate or precise location, used only when you tap “find mechanics near me”, to search for nearby garages.
- Payment data: payment status and transaction references. Card details are entered on our payment provider’s hosted checkout and are never stored by us.
- Garage account data: business name, address, opening hours, services and prices submitted by mechanics.
- Technical data: IP address, device and browser information, and error logs generated when you use the service.
3. Why we use it, and our lawful bases
| Purpose | Data used | Lawful basis (UK/EU GDPR Art. 6) |
|---|---|---|
| Creating and running your account | Account data | Contract (Art. 6(1)(b)) |
| Taking and managing bookings, and sharing them with the chosen garage | Account, vehicle, booking data | Contract (Art. 6(1)(b)) |
| Finding garages near you | Approximate/precise location | Consent (Art. 6(1)(a)) — you grant browser location permission and can withdraw it at any time |
| Taking payment and handling refunds | Booking and payment data | Contract (Art. 6(1)(b)); legal obligation for tax records (Art. 6(1)(c)) |
| Service emails: confirmations, reminders, changes | Account and booking data | Contract (Art. 6(1)(b)) |
| Marketing emails | Email address | Consent (Art. 6(1)(a)) — opt-in, withdraw any time |
| Security, fraud prevention, abuse handling and dispute resolution | Technical, account, booking data | Legitimate interests (Art. 6(1)(f)) — keeping the platform safe and reliable |
| Improving the service and fixing faults | Technical and aggregated usage data | Legitimate interests (Art. 6(1)(f)) |
| Meeting accounting, tax and legal obligations | Transaction records | Legal obligation (Art. 6(1)(c)) |
We do not ask for special category data. Please do not include health or other sensitive information in free-text booking notes.
5. International transfers
Some providers process data outside the UK/EEA. Where that happens we rely on adequacy decisions or the UK/EU Standard Contractual Clauses, together with the provider’s own technical safeguards. Ask us for a copy of the relevant transfer mechanism.
6. How long we keep data
| Record | Retention period |
|---|---|
| Active account (profile, vehicles) | Kept while your account is open; deleted within 30 days of account closure |
| Booking records | 6 years from the appointment date, to handle disputes, warranty/rework claims and tax records |
| Payment and invoice records | 6 years from the end of the relevant tax year (legal requirement) |
| Location data | Used in the moment to run the search; not stored against your account |
| Marketing consent records | Until you unsubscribe, plus 2 years to evidence the choice |
| Technical and error logs | Up to 90 days, then deleted or aggregated |
| Support and complaint correspondence | 2 years from the last message |
| Mechanic agreement acceptances | 6 years after the listing is removed |
When a period ends we delete the data or irreversibly anonymise it so it can no longer identify you. Adjust these periods if your accountant or regulator requires different terms.
7. Security
We describe the safeguards we operate on our security page. No online service can be completely secure, but we work to protect your data and will notify you and the relevant regulator where the law requires it after a personal data breach.
8. Your rights
You have the right to access, correct, delete, restrict or object to our processing of your data, to data portability, and to withdraw consent at any time. You can also complain to your data protection authority — the ICO in the UK, or the Data Protection Commission in Ireland.
To exercise a right, see how to make a data request. We respond within one month.
10. Children
FastFix is not intended for under-16s and we do not knowingly create accounts for them.
11. Changes to this policy
We update this page when our processing changes and revise the “last updated” date. For significant changes we will email account holders.