Information about cookies
A cookie is a small file of letters and numbers that, if you agree to their use, is stored on your browser or the hard drive of your computer or device. They contain information that is transferred to your hard drive.
The cookies that we could use can be split into the following categories:
- Necessary cookies. These are cookies that are required for the operation of the website. They include, for example, cookies that enable you to log into parts of the website.
- Analytical cookies. These cookies allow us to recognise and count the number of visitors to the website and to see how they move around within the website when they are using it. This helps us to improve the way the website works, for example, by ensuring that users are finding what they are looking for easily.
The cookies we use
We use the following cookies:
3. How you can block cookies
You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies.
However, please be aware that blocking cookies may affect your ability to use the website. In particular, you may not be able to access all or parts of the website or use the functionalities contained on it.
Frosts Bodyshop Limited (we) are committed to protecting and respecting your privacy.
This policy, together with any other documents referred to in it, sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
By visiting this website, you are accepting and consenting to the practices described in this policy.
For the purpose of the Data Protection Act 1998 (Act), the data processor is , a company registered in England and Wales under company number 3856202 with its registered office at Frosts Bodyshop Ltd Ltd, Crown House, 151 High Road, Loughton, Essex, England, IG10 4LG. We are a registered data controller with the Information Commissioner’s Office under number ZA030020.
Our nominated representative for the purpose of the Act is Davit Karapetyan.
Information we collect- Data protection Act 2018/GDPR
We will collect and process the following categories of data about you:
Information you give us. This is information about you that you give us by filling in forms on the website (Site), interacting with the Site or by corresponding with us by phone, e-mail or otherwise. It includes information you provide when you make an enquiry about our products and services on our website.
We will collect Personal Information such as your name, e-mail address, collection/delivery address, telephone number. We may collect this information directly from yourself, or we may receive it from the Dealership, Insurer or Accident management company who is acting on your behalf and to whom you have already passed this information to. In addition, we will hold information about your vehicle (registration, make, model, VIN etc) and insurance. Where there is payment required we will ask for credit card or other payment details at the point of payment, we use a Card Payment provider and we will not store any payment details. If a courtesy car is requested, we will additionally collect proof of identity, payment details and driving licence details. We collect this information when considering, or entering into, a contractual agreement to undertake repair work to a vehicle of which you are the owner. If you visit our sites, we also collect CCTV images as part of our security measures for the prevention and detection of unlawful activities.
- Information we collect about you. This is information that we collect automatically about your visit during your time on the Site. It typically involves technical information and is often collected using small data files called “cookies”. This information helps us to provide you with a good experience when you browse the Site and also to indicate where the Site requires improvement.
- Information we receive from other sources. This is information that we receive about you if you use any of the other websites we operate. In this case we will have informed you when we collected that data if we intend to share those data internally.We will also have told you for what purpose we will share your data. This also includes information that we receive from third parties, such as business partners, sub-contractors in technical services, advertising networks, analytics providers, search information providers and so on. We will notify you when we receive information about you from them and the purposes for which we intend to use that information.
Social Media platforms
We operate social media platforms. These platforms are, in most cases, operated outside of the EU and do not comply with current Data Privacy Act and subsequent GDPR provision although they may well conform to the U.S Privacy Shield protocol.
It is our process and protocol that any personally identifiable data gathered on these platforms is only in response to users interacting out of their own volition with our marketing pages. The contact is deemed as a legitimate business enquiry. The personal contact data is removed from the site once the enquiry is processed or the user has requested so.
Our website uses Google Analytics to collect information about how visitors use our website. We anonymise this data at the point of collection and automatically delete user and event data that is older than two years.
Uses made of the information
All information about you that we collect or receive, whether of a personal or technical nature, may be used by us in the following ways:
- We use your information during the process of undertaking the repair work that we have been contracted to carry out. This might include using your address details for the collection and/or delivery of your vehicle. We will use your details to contact you with regard to the vehicle and its progress through our service process. Upon completion we may require payment information which we will use at that point and which we do not retain or store. Upon return of your vehicle, we will contact you with a customer satisfaction survey of which it is your choice as to whether you complete it or not. We do not wish to intrude on your privacy, so we do not undertake direct marketing and we do not pass on or sell your information to anyone for any marketing purposes.Our basis of processing your personal information is in relation to the contract established regarding the services we provide. The contract may be directly with the customer, or through their insurer acting as their agent in the fulfilment of their insurance contractual arrangements. As part of our provision of a guarantee on the work we undertake, we have a legitimate interest to maintain sufficient records of our work, the vehicle and customer details to be able to adequately service the guarantee if required to do so. We do not undertake any profiling or automated processing with regard to any of your personal data.
- To carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us;
- To comply with our record keeping and information storage obligations and policy (please see the “Where We Store Your Personal Data” section below for more details).
Information we receive from other sources. We will combine this information with information you give to us and information we collect about you. We will use this information and the combined information for the purposes set out above (depending on the types of information we receive).
Disclosure of your information
We may share your information with:
Our service providers and suppliers
In order to effectively fulfil our contract with you, we may need to share your personal data with some of our service partners. These include IT, business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you.
The Company only allows its service providers to handle your personal data when we have confirmed that they apply appropriate data protection and security controls. We also impose contractual obligations on service providers relating to data protection and security, which means they can only use your data to provide services to The Company and to you, and for no other purposes.
For the purposes of maintaining guarantees and service standards, we may also pass some details to the manufacturer of your vehicle.
Other third parties
Aside from our service providers, we will not disclose your personal data to any third party, except as set out below. We may share your data with governmental bodies, regulators, law enforcement agencies, courts/tribunals and insurers where we are required to do so:
– to comply with our legal obligations;
– to exercise our legal rights (for example in court cases);
– for the prevention, detection, investigation of crime or prosecution of offenders;
– for the protection of our rights, property or safety of our employees and customers.
We will never sell or rent our customer data to other organisations for marketing purposes and we do not process your data in any manner outside of the European Economic Area.
Where we store your personal data
All information that you provide to us is stored on our, or our selected business partners’, secure servers, and we will take reasonable steps to protect your information in accordance with this policy, including (without limitation):
- Installing a secure firewall;
- Using anti-virus protection software;
- Encrypting data; and
- Carrying out regular back-ups.
All data sent via website forms is passed through a third party relay service and deleted after 30 days.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of any data transmitted to the Site; and any such transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
How long we keep your information
We will retain a record of your personal information. This is done to help us administer our guarante on the work that we have undertaken. Additionally, your data is retained for the period necessary in relation to our legal obligation to comply with UK tax regime. We will always retain your personal information in accordance with law and regulation and never retain your information for longer than is necessary.
You have the following rights under law in respect of your personal information:
- The right to be informed about the collection and use of your personal information;
- The right of access to your information to verify the legality of our use of it;
- The right to request that inaccurate or incomplete information about you is rectified;
- The right to request the deletion or removal of your information where there is no further reason for us to use it (such as you have withdrawn your consent or we no longer provide your children with education);
- The right to restrict the use of your information;
- The right to obtain and reuse the information that we have about you for your own purposes;
- The right to object to certain uses (such as for marketing purposes); and
- The right not to be subject to a decision that has a legal effect on you that has been based on an automated decision.
Should you wish to exercise any of these rights, you may do so at any time by writing to us at the address given below.
If we agree that we are obliged to provide a copy of the personal information to you, we will not charge you for this information and we will do our best to respond to you as quickly as possible and in any event, within 30 days of receipt of your written request. Before providing personal information to you, we may ask for proof of identity and sufficient information about your interactions with us so that we can locate your personal information.
If you would like to request the information we hold about you under a Subject Access Request (“SAR”) you can contact the person identified below to request this information.
If you feel that your rights have been breached in any way, you should contact Davit Karapetyan at the address given above or lodge an official complaint with the Information Commissioner’s Office via their website (https://ico.org.uk) or by writing to:Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
The Site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.