Last reviewed: 12 January 2026.
This policy explains how Undarix Motor Works Ltd ("we", "the workshop") looks after the personal information of people who use this website or who book a service with us. We are registered in England and Wales under company number 14852367 and registered with the Information Commissioner's Office as a data controller.
What we collect, and when
We collect a small amount of information at three points: when you fill in a booking enquiry, when you ring the workshop, and when you bring a car in for service. The categories are:
- Identification — your name, the name on the V5C if different.
- Contact — your email address, mobile number, and, if you ask us to collect or deliver, a postcode and a delivery address.
- Vehicle — registration number, VIN, make, model, mileage at service, and the maintenance history we add to.
- Service notes — the work you have asked for, the work performed, the parts fitted, and any photographs taken during inspection.
- Payment — invoice records and the bank-card last-four-digits on the receipt. Full card numbers are not stored on our systems.
Why we collect it
We collect it for the very specific reason of carrying out the work you have booked, and for the legal and commercial requirements that flow from that — keeping a service record, retaining evidence of work for the workshop warranty, complying with HMRC record-keeping obligations, and contacting you about your car when needed.
We do not collect personal information for marketing profiling. We do not sell, trade, rent or share lists of clients with anyone outside the supplier chain that helps us deliver our service.
Lawful basis under UK GDPR
Our lawful bases are:
- Contract — to perform the work you have asked us to perform.
- Legal obligation — to retain financial records for the period HMRC requires.
- Legitimate interest — to contact you about an outstanding job, a part on order, or a follow-up that relates to the work just done.
Who else sees it
The information you give us is seen by the technicians who work on the car and the office staff who quote and invoice the work. Beyond that, the only third parties who receive any of it are: our parts supplier (the part description and the registration number, never your contact information unless you ask for direct contact); our accountant (the invoice records, for tax compliance); and our payment processor (the card details, processed under PCI-DSS rules, never stored by us).
How long we keep it
Service records are retained for the lifetime of the workshop relationship plus six years, in line with the retention period required for tax and consumer-rights purposes. Photographs taken during inspection are retained on the job ticket only and are deleted at the same six-year point unless they form part of an active warranty claim.
Your rights
Under UK GDPR you have the right to ask for a copy of the personal information we hold about you, to ask us to correct anything that is wrong, and to ask us to delete information we no longer have a legal reason to keep. Send the request to [email protected] and we will respond within thirty days.
If you are unhappy with how we handle your information, you have the right to complain to the Information Commissioner's Office at ico.org.uk.
Cookies and the website itself
This website uses a single essential cookie to keep the booking form's CSRF token alive and one optional analytics cookie to count page views. The optional cookie is only set if you accept it on the cookie banner. There is more detail on the cookie policy page.
Changes to this policy
If we change this policy materially we will note the change at the top of the page and date it. Trivial wording fixes will be made silently.