Privacy Policy
How Roses Mobile Mechanics collects and uses your personal information, in plain English.
The short version
This website has no contact forms, accounts, analytics, advertising or tracking tools. To get a quote, you message Seb on WhatsApp or Instagram. He uses what you send to reply and do the work, and records jobs and payments in his invoicing system. Only Seb looks at customer records, but the services he uses to run the business also handle information. They are listed below.
- Who we are
- What we collect
- Why we use it
- Who handles it
- Transfers abroad
- How long we keep it
- Your rights
- Complaints
- Updates
Who we are
Roses Mobile Mechanics is run by Sebastian Rose, a sole trader, and is the controller of the personal information described here. We are a mobile mechanic serving Woking, Guildford and Farnborough.
- Email: rosesmobilemechanics@gmail.com
- WhatsApp: +44 7459 147826
What we collect and how
When you visit this website. We do not ask you for anything on the site and it has no forms. Like every website, the pages are delivered by a hosting company, which receives technical information from your browser, such as your IP address, the page you asked for, and your browser and device type.
Cookies, browser storage and fonts. We checked the website’s code. It does not set cookies, use local storage, or run analytics, advertising, tracking or social media scripts, and it has no embedded maps, videos or comment tools. The fonts (Teko and Barlow) are stored on the site itself, so your browser does not request them from Google or any other outside service. We cannot see or control what our hosting provider handles on its own systems, which is why this page names it.
When you message us. Visiting this site and contacting Seb are separate things. The “Get a Quote on WhatsApp” buttons are links to WhatsApp, and nothing is sent to us when you click one. You choose what to send. We ask for your vehicle registration, your postcode and the work you need. Seb will also see your WhatsApp or Instagram name, your phone number if you use WhatsApp, and anything else you choose to send, such as photos or details about the car. Some customers contact us through Instagram or other messaging services, and the same applies there. Registration numbers can identify the registered keeper of a vehicle, so we treat them as personal information. If you email us instead, we receive your email address and what you write.
Jobs and invoices. If you book work, Seb records it and issues an invoice in Sage, an online invoicing system. It records who the invoice is for, the work done and the amount, and may include contact and vehicle details.
Payments. You can pay by cash, bank transfer or a Stripe payment link. If you pay by Stripe link, you enter your card details on Stripe’s page and Stripe handles them. If you pay by bank transfer, we see the details your bank sends with the payment.
Photos. Seb takes photos of work and of customers’ vehicles. A photo that shows a customer’s vehicle, or a person, in a way that could identify them is personal information, and Seb asks the customer’s permission before he publishes one. Close-up photos of parts and engines that do not show a number plate, a person or anything else that could identify a customer are work photos rather than personal information.
Reviews. We sometimes ask customers to leave a review. A review you post on a review site is published by that site and covered by its own privacy notice.
Please do not send anything you would not want us to see, such as bank card details, and only send what is needed for the quote.
Other websites. Some pages link to other sites, such as manufacturer pages. Those sites have their own privacy policies and we do not control them.
Marketing. We do not currently send service reminders or promotional offers.
Why we use it, and our legal basis
| What we use it for | Our legal basis (UK GDPR) |
|---|---|
| Replying to your message, identifying your vehicle and giving you a quote | Taking steps at your request before a contract (Article 6(1)(b)), or our legitimate interest in answering enquiries (Article 6(1)(f)) |
| Arranging and carrying out the work, invoicing you and taking payment | Performing our contract with you (Article 6(1)(b)) |
| Keeping accounting and tax records, including invoices in Sage | Legal obligation (Article 6(1)(c)) |
| Keeping chats, job records and photos to deal with warranty queries, complaints or disputes about our work | Our legitimate interests in running the business and protecting ourselves (Article 6(1)(f)) |
| Publishing a photo of your vehicle | Your permission (consent, Article 6(1)(a)) |
| Asking you for a review | Our legitimate interest in getting customer feedback (Article 6(1)(f)) |
| Delivering the website and keeping it secure | Our legitimate interests in running a working, secure website (Article 6(1)(f)) |
Where we rely on your permission, you can withdraw it at any time.
Who handles your information
Who looks at it. Only Seb looks at customer records. We do not sell your personal information.
Who else processes it. The services Seb uses to run the business also handle information when you use them, under their own terms and privacy notices. They are separate from Seb:
- Sage. Holds our invoices and related customer details. See Sage’s privacy notice.
- Stripe. Handles payments made through a Stripe payment link. See Stripe’s privacy policy.
- WhatsApp and Instagram (Meta). Provide the messaging services you use to contact Seb. See WhatsApp’s privacy policy and Instagram’s privacy policy. Other messaging services you choose to use have their own notices.
- Hostinger. Hosts this website, and so receives the technical information your browser sends. See Hostinger’s privacy policy.
- Gmail (Google). We use a Gmail address for email, so emails you send us pass through Google’s systems. See Google’s privacy policy.
- Your bank and ours. If you pay by bank transfer, the banks involved process the payment.
We will only share your details with anyone else where it is needed to do the work you asked for, or where the law requires it, for example to HMRC or the police.
Transfers outside the UK
Some of these providers operate internationally, so your information may be processed outside the UK. We do not send your personal information abroad ourselves. Each provider explains the safeguards it uses for international transfers in its own privacy notice, linked above.
How long we keep it
This is our retention policy. We review chats and photos each April and October, and old invoices each April.
- Chats and enquiries (WhatsApp, Instagram and other messages): kept for up to 24 months.
- Invoices and payment records (Sage): kept for six years after the end of the relevant tax year, then reviewed and deleted when no longer needed. We keep them longer where necessary for tax requirements, an investigation, a claim or a dispute. Tax law requires sole traders to keep business records for at least five years after the Self Assessment deadline for the tax year (GOV.UK guidance).
- Photos that identify a customer or their vehicle: kept for up to five years after the job, then deleted or anonymised. We keep them longer where needed for an ongoing warranty claim, complaint or dispute. We publish one only with the customer’s permission, and remove a published photo if the customer withdraws that permission. You can ask us to take one down at any time.
- Work photos that identify no one: kept for our portfolio where nothing identifies the customer, their vehicle or their home.
- Website technical data: kept by Hostinger and Google under their own retention rules.
Your rights
You have the right to:
- ask for a copy of the personal information we hold about you (access);
- ask us to correct anything that is wrong (rectification);
- ask us to delete it (erasure), in some circumstances;
- ask us to restrict how we use it, in some circumstances;
- ask for the information you gave us in a portable format, in some circumstances;
- withdraw your permission where we rely on it, for example for a published photo of your vehicle.
Your right to object
You can object at any time to us using your information on the basis of our legitimate interests. If you do, we will stop unless we can show a compelling reason to continue, or we need it to deal with a legal claim.
To use any of these rights, email rosesmobilemechanics@gmail.com or message Seb on WhatsApp. We may need to check who you are first. We will reply within one month. There is normally no charge. You can also delete your own chat with us at any time, though that does not remove our copy.
Complaints
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, helpline 0303 123 1113.
Updates to this policy
We will update this page if how we handle personal information changes. The date below shows when it was last changed.
Last updated: 2 October 2026