Legal
Privacy Policy
Last updated 10 November 2026
Privacy Policy
Last updated: July 2026
Who we are
RepairDashboard operates a UK-focused bodyshop intake platform. This Privacy Policy explains how we process personal data for garage staff, end customers, and guest link recipients.
Data we process
| Category | Examples |
|---|---|
| Account data | Name, email, role, tenant association |
| Job data | Vehicle details, damage descriptions, photos, quotes |
| Guest access | Opaque tracking tokens and expiry timestamps |
| Billing | Stripe customer/subscription identifiers |
Vehicle lookup (UK)
When a garage looks up a UK registration we call official government APIs on their behalf:
- DVLA Vehicle Enquiry Service (VES) — make, colour, fuel type, year of manufacture, engine capacity (VES does not return model)
- DVSA MOT History — model, MOT expiry, and MOT test history used for autofill and MOT reminders
Registration plates and returned vehicle fields are stored on the workshop job/vehicle records for the tenant that requested the lookup. We do not sell vehicle lookup data. Lookups may be cached briefly to reduce API traffic; if an API is unavailable the workshop can enter details manually.
Why we process it
- To provide intake, quoting, booking, and guest tracking services
- To secure tenants and enforce role-based P&L visibility
- To bill subscriptions and prevent fraud
- To improve the product with aggregated, non-identifying metrics
Sharing
We use processors such as hosting, email/SMS, and Stripe. We do not sell personal data. Guest tracking pages intentionally hide staff notes, margins, and expired-link content.
Retention
Job and photo data are retained while the tenant remains active, subject to deletion requests and legal holds. Expired guest tokens no longer disclose job content publicly.
Your rights
Depending on applicable law you may request access, correction, deletion, or restriction. Garage customers should also contact their bodyshop for job-specific requests.