Legal
Privacy &
Cookie Policy
Note: This policy covers how Croydon Coach Works collects and uses your personal data, including data processed through our online booking system (Motion Bookings, operated by MyMotion LTD). This is not legal advice. If you have questions, call us on 07375 349654 or message us on Instagram @croydoncoachworks.
Privacy Policy
1.Who we are
Croydon Coach Works ("we", "us", "our") operates an auto body shop at 33c Stafford Road, Croydon, London CR0 4NG, and the associated website.
We are the data controller responsible for your personal data.
Privacy contact: 07375 349654, or message us on Instagram @croydoncoachworks.
We use Motion Bookings (provided by MyMotion LTD, company no. 17007992, registered in England & Wales) as our online booking and scheduling system. MyMotion LTD acts as our data processor: it processes customer data strictly on our instructions and does not use it for its own purposes.
2.The personal data we collect
| Category | Examples |
|---|---|
| Identity & contact | Name, phone number, email address |
| Vehicle | Registration, make, model, year, colour |
| Booking & service | Service requested, appointment date/time, job notes, photos of your vehicle |
| Payment | Payments and deposits are processed by Stripe: we do not see or store your full card number. We may hold a record that a payment was made and the amount. |
| Communications | Records of messages, emails or calls between us |
| Technical | Limited technical data needed to run the booking page (see Cookie Policy below) |
We do not intentionally collect special-category data. Please do not send sensitive personal information through the booking form.
3.How we collect it
- When you request a booking through our online booking page or website widget.
- When you call, email or visit us and we record the details.
- When you contact us via WhatsApp or social media.
4.Why we use it and our legal basis (UK GDPR)
| Purpose | Lawful basis |
|---|---|
| Taking and managing your booking and carrying out the work | Contract (steps to perform our contract with you) |
| Taking deposits and payments | Contract |
| Sending booking confirmations and reminders by SMS/email | Legitimate interests / Consent where required |
| Sending service reminders or marketing | Consent (you can opt out at any time) |
| Keeping invoices and financial records | Legal obligation (tax/accounting law) |
| Keeping our systems secure and preventing fraud | Legitimate interests |
5.Who we share your data with
We share data only as needed to run our business. Our key processors are:
- MyMotion LTD (Motion Bookings) — our booking and scheduling platform.
- Supabase — secure database and account hosting used by Motion Bookings.
- Netlify — website/application hosting used by Motion Bookings.
- Stripe — payment and deposit processing (PCI-DSS compliant). Card details go directly to Stripe; we never store them.
- Twilio — sending SMS appointment reminders (if applicable).
We may also share data with professional advisers, HMRC, insurers, or law enforcement where legally required, and with a buyer if we sell or restructure the business.
We do not sell your personal data.
6.International transfers
Some of the providers above may process data outside the UK/EEA. Where they do, appropriate safeguards are in place (such as UK International Data Transfer Agreements / Standard Contractual Clauses) to protect your data to UK standards.
7.How long we keep it
- Booking and customer records: for as long as you are a customer and up to 6 years after your last interaction.
- Invoices and financial records: at least 6 years, as required by HMRC.
- Marketing consent records: until you withdraw consent.
When data is no longer needed we securely delete or anonymise it.
8.Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate data.
- Erase your data ("right to be forgotten"), where applicable.
- Restrict or object to our processing.
- Data portability (receive your data in a usable format).
- Withdraw consent at any time.
To exercise any of these rights, call us on 07375 349654 or message @croydoncoachworks on Instagram. We'll respond within one month.
You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113. We'd appreciate the chance to resolve it first.
9.Security
Motion Bookings stores data in a secure, access-controlled database with encryption in transit (HTTPS/TLS), role-based access controls and audit logging. Payment card data is handled entirely by Stripe and never stored on our systems.
10.Children
Our services are aimed at adults. We do not knowingly collect data from anyone under 16. If you believe a child has provided us data, contact us and we'll remove it.
11.Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows the latest version.
12.Contact
Cookie Policy
Last updated: 14 June 2026
What are cookies?
Cookies (and similar technologies like local storage) are small files placed on your device when you use a website. They help the site work, remember your preferences, and keep your session secure. They do not run programs or carry viruses.
How our site and booking page use them
This website and the Motion Bookings booking page use only what is needed to function. We do not use advertising or cross-site tracking cookies.
| Cookie / storage | Type | Purpose | Retention |
|---|---|---|---|
Cookie consent preference (ccw_cookies) |
Strictly necessary | Remembers whether you have accepted or declined cookies so the banner does not reappear | Persistent (local storage) |
| Authentication / session token (booking portal) | Strictly necessary | Keeps you securely signed in to your booking account | Session / until you sign out |
| Booking form state | Strictly necessary | Lets the booking form work and prevents duplicate submissions | Session |
| Theme & display preferences | Functional | Remembers branding/display so the booking page renders correctly | Persistent (local storage) |
| Stripe (during payment only) | Strictly necessary / fraud prevention | Stripe sets cookies to process card payments securely and prevent fraud | Per Stripe's policy |
Strictly necessary cookies do not require consent because the service cannot work without them. Functional storage is used only to make the experience work for you.
Third-party cookies
If you make a payment or deposit, Stripe may set cookies to process the transaction and prevent fraud. See Stripe's Privacy Policy.
This website does not currently include Google Analytics, Meta Pixel or any advertising/tracking cookies. If this changes, this policy will be updated.
Managing cookies
You can control or delete cookies through your browser settings (look for "Privacy" or "Cookies"). Blocking strictly necessary cookies may stop the booking page from working correctly. Guidance: aboutcookies.org.
You can also update your consent choice at any time by clearing your browser's local storage for this site, or by contacting us.
Contact
Questions about cookies? Call 07375 349654 or message @croydoncoachworks on Instagram.