Home

/ Privacy Policy

Privacy Policy

Last updated: 14 July 2026

1. About This Privacy Policy

Heywood MOT Station respects the privacy of its customers, website visitors and people who contact the garage.

This Privacy Policy explains how we may collect, use, store and share personal information when you:

  • visit our website;
  • contact us by telephone, mobile, post or another available method;
  • Submit a website enquiry, where this facility is available;
  • ask us to arrange an MOT, service, diagnostic inspection or repair;
  • Bring a vehicle to our garage;
  • request a quotation or further information;
  • make a payment;
  • raise a complaint; or
  • Otherwise, deal with Heywood MOT Station.

Personal information means information that identifies you or could reasonably be used to identify you. It does not normally include information that has been anonymised so that you can no longer be identified.

This notice has been prepared with reference to the UK General Data Protection Regulation and the Data Protection Act 2018. UK data protection legislation regulates how businesses and other organisations handle personal information.

2. Who Is Responsible for Your Information

For the purposes of UK data protection law, the organisation responsible for deciding how and why your personal information is used is:

This organisation is referred to in this Privacy Policy as “Heywood MOT Station”, “we”, “us” or “our”.

Heywood MOT Station acts as the data controller for personal information covered by this policy.

3. How to Contact Us

You can contact us about this Privacy Policy or the way we handle your personal information using the following details:

Heywood MOT Station

1A Adelaide Street

Heywood

Greater Manchester

OL10 4HQ

United Kingdom

Telephone: 01706 618181

Mobile: 07925 952298

Email: info@heywoodmotstation.co.uk

We have not identified a requirement to appoint a formal Data Protection Officer. Privacy enquiries should be directed to the contact details above.

4. Personal Information We Collect

The information we collect depends on how you interact with us and which services you request.

We may collect the following categories of personal information.

Identity and contact information

This may include your:

  • name;
  • postal address;
  • email address;
  • telephone or mobile number;
  • preferred method of contact; and
  • Details of another person authorised to communicate with us about your vehicle.

Vehicle information

This may include:

  • vehicle registration number;
  • make and model;
  • vehicle identification number, where required;
  • mileage;
  • engine or vehicle specification;
  • MOT status and history;
  • servicing and repair history;
  • warning lights or fault codes;
  • reported symptoms or problems;
  • details of previous repairs;
  • tyre specifications;
  • air conditioning system or refrigerant type; and
  • photographs of the vehicle, its parts or identified damage where reasonably required.

Some vehicle information may not identify a person by itself. However, it may become personal information when it is connected to a customer, registered keeper, invoice, booking or communication record.

Booking and service information

This may include:

  • requested appointment dates;
  • dates on which the vehicle was brought to or collected from the garage;
  • the service requested;
  • inspection findings;
  • diagnostic results;
  • MOT results;
  • advisory information;
  • repair recommendations;
  • work authorised by you;
  • parts fitted or ordered;
  • estimates and quotations;
  • job sheets;
  • invoices;
  • payment records; and
  • warranty or follow-up information, where applicable.

Enquiry and communication information

This may include:

  • information supplied in an enquiry or contact form;
  • correspondence with us;
  • notes of telephone or in-person conversations;
  • callback requests;
  • questions about vehicle faults;
  • complaints;
  • feedback; and
  • information provided in support of a dispute or legal claim.

Payment and transaction information

We may maintain records showing:

  • amounts quoted, invoiced or paid;
  • payment dates;
  • outstanding balances;
  • refunds or adjustments; and
  • transaction references.

The precise payment information we receive will depend on the payment methods and payment providers used by the garage.

We do not intend to retain full payment card details unless this is necessary and permitted through an approved payment process.

Website and technical information

Depending on the website tools in use, we may collect:

  • IP address;
  • device type;
  • browser type and version;
  • operating system;
  • approximate location derived from an IP address;
  • pages viewed;
  • time and date of visits;
  • referring website;
  • interactions with website features;
  • cookie identifiers;
  • consent preferences; and
  • information about website errors or performance.

Not all of this information will necessarily be collected. The website should be technically audited to confirm the tools, cookies and services currently in use.

5. How We Collect Your Information

We may collect information directly from you when you:

  • telephone the garage;
  • visit the garage;
  • write to us;
  • send an email;
  • complete an enquiry or booking request form, where available;
  • Request a callback;
  • ask for an estimate or quotation;
  • book or request vehicle work;
  • authorise additional work;
  • make a payment;
  • provide feedback;
  • raise a complaint; or
  • Communicate with us through another agreed channel.

We may also receive information from:

  • a family member, employer, vehicle owner or other person arranging work on your behalf;
  • the registered keeper or person responsible for a vehicle;
  • The Driver and Vehicle Standards Agency;
  • official MOT systems;
  • vehicle manufacturers or parts suppliers, where required for the requested work;
  • professional advisers;
  • insurers, recovery businesses or fleet operators where you have authorised their involvement;
  • publicly available vehicle and MOT information; and
  • website, hosting, security or analytics systems.

When someone provides information about another person, they should have an appropriate reason and authority to do so.

6. Vehicle and Garage Service Information

We may use information about you and your vehicle to provide services such as:

  • Class 4 MOT testing;
  • pre-MOT checks;
  • MOT retests and MOT failure repairs;
  • interim, full or major servicing;
  • oil and filter changes;
  • vehicle health checks;
  • brake, suspension and exhaust repairs;
  • battery testing and replacement;
  • clutch, engine and turbo repairs;
  • DPF, EGR and AdBlue system work;
  • diagnostic and electrical fault investigation;
  • tyre fitting, balancing and puncture repair;
  • wheel tracking and four-wheel alignment;
  • air conditioning regas, diagnostics and repairs; and
  • other agreed vehicle maintenance or repair work.

We may record the condition of a vehicle, its mileage, reported symptoms, test results, faults found, repairs recommended and work authorised.

These records help us carry out the requested work, maintain an accurate service history, answer questions, manage follow-up work and respond to complaints or disputes.

7. Website and Device Information

When you use our website, certain technical information may be generated automatically by your browser, device, hosting service or website security tools.

Some technical information may be required to:

  • deliver the website;
  • protect it from misuse or malicious activity;
  • maintain website security;
  • diagnose technical problems;
  • remember your cookie choices; or
  • process a form securely.

Other technologies, such as analytics, embedded maps, videos, review widgets or advertising tools, may require consent before they are activated.

The website must not place or access non-essential cookies or similar technologies before obtaining valid consent where consent is legally required. ICO guidance states that users must be told about these technologies and that prior UK GDPR-standard consent is generally required unless an exception applies.

Further information should be provided in our Cookie Policy.

8. How We Use Your Personal Information

We may use personal information to:

  • respond to enquiries;
  • provide information about our services;
  • arrange or confirm bookings;
  • Identify your vehicle;
  • carry out MOT tests;
  • diagnose reported faults;
  • provide servicing, maintenance and repairs;
  • prepare estimates, quotations and invoices;
  • order suitable parts or materials;
  • contact you about inspection findings or additional work;
  • Obtain your approval before carrying out further work;
  • notify you when a vehicle is ready;
  • process payments and maintain financial records;
  • manage complaints, disputes or legal claims;
  • meet accounting, tax and regulatory requirements;
  • maintain garage, service and repair records;
  • prevent fraud, misuse or unlawful activity;
  • maintain website security;
  • improve our website and customer service;
  • manage consent and communication preferences; and
  • Send marketing where this is lawful and appropriate.

We will not use personal information for an unrelated purpose unless we have a valid legal reason to do so and, where required, provide further information to you.

9. Our Lawful Bases for Using Information

UK data protection law requires us to have a valid lawful basis for each way we use personal information. A privacy notice should explain both the purposes for which information is used and the relevant lawful bases.

The lawful basis will depend on the activity involved.

Contract and steps before entering a contract

We may process personal information where it is necessary to:

  • Take steps at your request before providing a service;
  • respond to a request for an estimate or booking;
  • arrange an MOT, service, inspection or repair;
  • Identify the vehicle involved;
  • perform agreed work;
  • contact you about the work;
  • provide an invoice; or
  • manage payment and collection.

For example, we may need your name, contact details, vehicle registration number and information about the reported fault to arrange a diagnostic inspection.

Legal obligation

We may process and retain information where this is required to comply with the law or regulatory requirements.

Examples may include:

  • recording and submitting MOT test information through authorised systems;
  • maintaining accounting and tax records;
  • responding to lawful requests from regulators, courts or law enforcement;
  • managing health and safety responsibilities; and
  • keeping records required by applicable garage, employment or consumer legislation.

Legitimate interests

We may use personal information where this is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

Our legitimate interests may include:

  • responding to customer enquiries;
  • maintaining accurate customer and vehicle records;
  • managing and improving garage services;
  • preventing fraud or misuse;
  • protecting the website and business systems;
  • recovering money properly owed;
  • handling complaints;
  • obtaining professional advice;
  • establishing, exercising or defending legal claims; and
  • keeping appropriate records of communications and authorised work.

We consider the nature of the information, the reason it is needed and the possible effect on the individual before relying on legitimate interests.

Consent

We may rely on your consent where the law requires it or where you have been given a genuine choice.

This may apply to:

  • non-essential cookies;
  • certain analytics or advertising technologies;
  • specific forms of electronic marketing; or
  • another optional use of information clearly explained to you.

Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not make earlier processing unlawful.

Legal claims and vital interests

In limited situations, we may use information where necessary to establish, exercise or defend a legal claim.

We may also use information to protect someone’s vital interests in an emergency, although this is unlikely to be a routine reason for processing customer information.

10. Special Category and Criminal Offence Information

Special category data includes particularly sensitive information, such as information about a person’s health, ethnicity, religion, political opinions, trade union membership, sexual orientation or biometric data used for identification.

Heywood MOT Station does not ordinarily need to collect special category data to provide MOT, servicing or repair services.

However, you may voluntarily provide limited health or accessibility information where it is relevant to arranging suitable assistance or communication. We will only use such information where we have both a lawful basis and an additional legal condition for processing it.

Please do not provide sensitive information unless it is relevant and necessary.

We do not routinely seek criminal offence information. If this type of information becomes relevant to fraud, theft, threats, legal proceedings or a request from an authority, it will only be handled where there is a lawful basis and appropriate legal authority.

11. Who We May Share Information With

We may share personal information where reasonably necessary with:

  • staff and contractors who need it to perform their duties;
  • MOT testing systems and the Driver and Vehicle Standards Agency;
  • parts, tyre or equipment suppliers;
  • vehicle manufacturers or technical information providers;
  • IT, website, hosting and cybersecurity providers;
  • booking or garage management software providers;
  • payment providers;
  • accountants, auditors, insurers and professional advisers;
  • debt recovery or legal service providers;
  • regulators, courts, law enforcement and public authorities;
  • a buyer, seller or adviser involved in a proposed sale or restructuring of the business; and
  • another organisation where you have asked or authorised us to share information.

These organisations may act as our processors, meaning they handle information on our instructions, or as separate controllers responsible for their own use of the information.

We do not sell personal information.

We will not state that information is never shared, because limited sharing may be necessary to provide services, comply with legal duties or protect legitimate interests.

The following suppliers and systems should be confirmed before publication:

  • [CONFIRM WEBSITE HOSTING PROVIDER]
  • [CONFIRM GARAGE OR BOOKING MANAGEMENT SOFTWARE]
  • [CONFIRM PAYMENT PROCESSOR]
  • [CONFIRM ANALYTICS PROVIDER]
  • [CONFIRM EMAIL OR COMMUNICATION SERVICE PROVIDERS]

12. MOT and Vehicle-Related Systems

When we conduct an MOT test, vehicle and test information must be handled through the applicable official MOT testing processes.

MOT testers record test results using the MOT testing service. MOT history information can include test dates, results, recorded mileage, failure reasons and advisory notices.

Information entered into an official DVSA system may be controlled and retained by the DVSA under its own legal responsibilities and privacy notices.

Public MOT history services may make certain vehicle test information available by registration number. This does not mean that all customer or registered keeper information is made public.

Where you believe an MOT record is incorrect, the official process for correcting the record may involve the DVSA.

13. International Data Transfers

Some service providers may store or access information outside the United Kingdom.

We will not assume that all suppliers or servers are located in the UK. The location of the website host, email provider, analytics tools, software providers and other technical services must be confirmed.

Where personal information is transferred outside the UK, we will take reasonable steps to ensure that an appropriate transfer mechanism and safeguards are used where required by law.

These safeguards may include:

  • transferring information to a country covered by UK adequacy regulations;
  • using approved contractual protections; or
  • relying on another legally recognised transfer mechanism.

14. How We Protect Your Information

We use proportionate administrative, physical and technical measures intended to protect personal information against:

  • unauthorised access;
  • accidental loss;
  • misuse;
  • alteration;
  • improper disclosure; and
  • destruction.

Measures may include access controls, passwords, system updates, secure storage, staff procedures, backups and restrictions on who can access particular records.

No website, email service, electronic system or storage method can be guaranteed to be completely secure. We therefore do not promise absolute security.

Where a personal data breach occurs, we will assess it and take appropriate action, including notifying the Information Commissioner’s Office or affected individuals where the law requires this.

15. How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including any legal, accounting, regulatory, contractual or dispute-resolution requirements.

The period for which information is kept may depend on:

  • the type of information;
  • The garage service provided;
  • legal and tax record-keeping obligations;
  • MOT record requirements;
  • whether work remains under review;
  • whether a complaint or dispute is ongoing;
  • the likelihood of a legal claim;
  • manufacturer or supplier requirements; and
  • The need to maintain an accurate vehicle service or repair history.

Examples include:

  • Enquiry information may be deleted when it is no longer needed;
  • booking and job records may be retained to manage services and future queries;
  • invoices and financial records may be retained for the period required by tax and accounting law;
  • Complaint records may be retained while the complaint remains active and for an appropriate period afterwards;
  • Consent records may be retained to demonstrate the choices made;
  • Website security logs may be retained for a limited period appropriate to security needs.

When information is no longer required, it will be deleted, securely destroyed or anonymised where reasonably practicable.

16. Your Data Protection Rights

Depending on the circumstances and the lawful basis being used, you may have the following rights.

Right to be informed.

You have the right to receive clear information about how your personal information is collected and used.

Right of access

You may request confirmation that we hold personal information about you and ask for a copy of that information.

This is commonly known as a subject access request.

Right to rectification

You may ask us to correct inaccurate personal information or complete information that is incomplete.

Right to erasure

You may ask us to delete personal information in certain circumstances.

This right does not apply where we need to retain the information for a legal obligation, legal claim or another valid reason.

Right to restrict processing.

You may ask us to limit the way we use your information in certain circumstances, such as while its accuracy or lawful use is being considered.

Right to object

You may object to processing based on legitimate interests in certain circumstances.

You have an absolute right to object to personal information being used for direct marketing.

The right to object does not apply in the same way to every lawful basis. For example, the ICO explains that the general right to object applies particularly where processing relies on legitimate interests or a public task.

Right to data portability

Where processing is based on consent or contract and is carried out by automated means, you may have the right to receive information you supplied in a structured, commonly used and machine-readable format.

You may also ask for it to be transferred to another organisation where this is technically feasible.

Right to withdraw consent.

Where processing is based on consent, you may withdraw that consent at any time.

This will not affect processing that took place before consent was withdrawn.

Rights concerning automated decision-making

You may have rights relating to decisions made solely by automated means that have legal or similarly significant effects.

Heywood MOT Station does not currently intend to make customer decisions of this nature solely through automated processing.

Exercising your rights

To exercise a data protection right, contact us using the details in this policy.

We may need to ask for information to verify your identity and ensure that information is not disclosed to an unauthorised person.

Data protection rights are subject to legal conditions and exemptions. This means that a particular right may not apply in every case.

ICO guidance identifies rights including access, rectification, erasure, restriction and objection.

17. Marketing Communications

We will only send direct marketing where we have a lawful basis and where the requirements of data protection and electronic communications law have been met.

Depending on the type of communication and the circumstances, we may rely on consent or another legally permitted basis.

You may ask us to stop sending marketing communications at any time.

Operational communications are not marketing. For example, we may still contact you about:

  • a booking;
  • work being carried out;
  • an MOT or repair result;
  • authorisation for additional work;
  • payment;
  • vehicle collection;
  • a complaint; or
  • another service you have requested.

The business must confirm whether it currently carries out email, SMS, telephone or messaging-app marketing.

18. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies are small pieces of information stored on or accessed through a user’s device. They can support essential website functions, remember preferences, provide analytics or enable third-party content.

Strictly necessary technologies may be used without consent where the legal exception applies. Non-essential technologies should only be used after valid consent where consent is required.

You should be able to reject non-essential cookies as well as accept them and change your preferences later.

Further details about the cookies and services used should be provided in our Cookie Policy.

The website requires a technical cookie audit before the Cookie Policy and consent settings are finalised.

19. Third-Party Websites

Our website may contain links to websites, maps, social media services, review platforms or other services operated by third parties.

Those organisations are responsible for their own privacy practices. This Privacy Policy does not control how an external website or platform collects and uses information.

You should read the privacy notice of any third-party service you use.

20. Children’s Information

Our garage services and website are not directed specifically at children.

We do not knowingly seek personal information from children through the website for marketing or account creation purposes.

A young person may provide limited information in connection with a vehicle enquiry or garage service. Where appropriate, we may ask for involvement from a parent, guardian, registered keeper or another responsible adult.

If you believe a child has provided personal information unnecessarily, contact us so that we can review the situation.

21. Complaints to the Information Commissioner’s Office

Please contact us first if you have a concern about how we have handled your personal information. This gives us an opportunity to investigate and respond.

You also have the right to complain to the Information Commissioner’s Office, which is the UK regulator for data protection.

You do not need our permission to contact the ICO.

Current complaint information and contact options are available through the ICO’s official website. The ICO currently provides an online complaint route and a public helpline on 0303 123 1113.

We recommend checking the ICO website for the latest contact information rather than relying on a postal address that may change.

22. Changes to This Privacy Policy

We may update this Privacy Policy when:

  • our business practices change;
  • website tools are added or removed;
  • new booking or payment systems are introduced;
  • our services change;
  • suppliers change; or
  • legal or regulatory requirements are updated.

The revised policy will be published on this page with a new “Last updated” date.

Material changes may also be brought to your attention through another appropriate method where required.

23. Contact Us

For questions, privacy requests or concerns about your personal information, contact:

Heywood MOT Station

1A Adelaide Street

Heywood

Greater Manchester

OL10 4HQ

United Kingdom

Telephone: 01706 618181

Mobile: 07925 952298

Email: info@heywoodmotstation.co.uk