Privacy Policy
1. Introduction
This Privacy Policy explains how Tractic Ltd ("Company", "we", "us", or "our") collects, uses, and discloses information about users ("you") of the GarageWizz application and related services (collectively, the "Service").
We are committed to protecting your privacy and personal data. This Privacy Policy is designed to help you understand what information we collect, why we collect it, and how you can update, manage, and delete your information.
This Privacy Policy applies to all users of our Service, including garage owners, administrators, staff members, technicians, and customers who use the customer portal.
2. Data Controller
Tractic Ltd is the data controller responsible for your personal data.
Contact Details:
Company: Tractic Ltd
Address: DE13 9DS, United Kingdom
Email: info@garagwizz.com
3. Information We Collect
We collect information in the following ways:
3.1 Information You Provide to Us
We collect information you provide directly when you:
- Register for an account (including when using Google Sign-In)
- Complete your profile
- Create or update garage information
- Add clients and vehicle information
- Create and manage appointments, job tickets, and invoices
- Communicate with us
This information may include:
- Account Information: Name, email address, password, user role, profile picture
- Account Authentication: Sign-in credentials, including those received when you choose to sign in with Google
- Business Information: Garage/business name, address, phone number, VAT number, logo
- Client Information: Names, contact details, addresses of your clients
- Vehicle Information: Make, model, registration number, VIN, service history
- Service Information: Appointment details, job descriptions, technician notes, service records
- Financial Information: Invoice data, payment records (but not payment card details)
3.2 Information We Collect Automatically
When you use our Service, we automatically collect certain information, including:
- Usage Information: Pages visited, features used, actions taken, time spent, date/time stamps
- Device Information: IP address, browser type, operating system, device type
- Log Information: System logs, error reports, performance data
3.3 Information from Cookies and Similar Technologies
We use cookies and similar tracking technologies to collect information about your interactions with our Service. Please see our Cookie Policy for more details.
3.4 Information from Third Parties
We may receive information about you from third parties, such as:
- Authentication Providers: When you choose to sign in with Google, we receive information from your Google account as permitted by Google's privacy settings. This may include your name, email address, profile picture, and Google ID.
- Business partners
- Service providers
- Other users who invite you to use the Service
4. How We Use Your Information
We use the information we collect for the following purposes:
4.1 Providing and Improving the Service
- To create and maintain your account
- To authenticate your identity, including through third-party services like Google Sign-In
- To provide the core functionality of the Service
- To process and complete transactions
- To improve and develop new features and services
- To monitor and analyze usage patterns and trends
- To debug and fix issues
4.2 Communications
- To send administrative messages and information
- To respond to your comments, questions, and requests
- To communicate about new features, updates, and promotions (with consent where required)
- To provide customer support
4.3 Safety and Security
- To verify accounts and activity
- To detect, prevent, and address technical issues
- To protect against harmful or illegal activity
4.4 Legal Compliance
- To comply with legal obligations
- To establish, exercise, or defend legal claims
5. Legal Basis for Processing
We process your personal data on the following legal bases:
5.1 Contract Performance
Processing necessary for the performance of our contract with you to provide the Service
5.2 Legitimate Interests
Processing necessary for our legitimate interests, such as improving our Service, ensuring security, and preventing fraud
5.3 Legal Obligation
Processing necessary to comply with our legal obligations
5.4 Consent
Processing based on your specific consent, such as for marketing communications
6. Data Sharing and Disclosure
We may share your information with the following categories of recipients:
6.1 Service Providers
We share information with third-party service providers who help us operate, deliver, and improve our Service, such as:
- Cloud storage providers
- Analytics providers
- Customer support services
- Email service providers
- Authentication providers, including Google (for Google Sign-In functionality)
These service providers are only provided with the information necessary to perform their functions and are prohibited from using personal data for any other purposes.
6.2 Authentication Partners
When you choose to use Google Sign-In, there is a limited exchange of data between our Service and Google to facilitate authentication. We only request the minimum information necessary to create and maintain your account. Our use of information received from Google is governed by this Privacy Policy, while Google's use of your information is governed by their privacy policy.
6.3 Business Transfers
If we are involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in applicable policies.
6.4 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
6.5 With Your Consent
We may share your information with third parties when you have given us your consent to do so.
7. International Transfers
Your personal data may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country.
We have taken appropriate safeguards to ensure that your personal data will remain protected in accordance with this Privacy Policy. These safeguards include implementing the European Commission's Standard Contractual Clauses for transfers of personal data outside the EEA, which require the protection of personal data to European standards.
When you use third-party authentication services like Google Sign-In, your personal information may be processed by Google in accordance with Google's privacy policy and may be stored on servers in various countries worldwide. Google maintains compliance with international data protection frameworks, including the EU-US and Swiss-US Privacy Shield Frameworks.
8. Data Retention
We retain your personal data for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
The criteria used to determine our retention periods include:
- The length of time we have an ongoing relationship with you
- Whether there is a legal or business need to retain the data
- Whether there are any applicable legal, tax, or accounting requirements
When we no longer need to use your personal data, we will either delete it or anonymize it. If deletion or anonymization is not possible, we will securely store your personal data and isolate it from any further processing until deletion is possible.
9. Data Security
We implement appropriate technical and organizational measures to protect the security of your personal data. However, please note that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.
10. Your Data Protection Rights
Depending on your location, you may have the following rights regarding your personal data:
10.1 Access
The right to be informed of and request access to your personal data.
10.2 Rectification
The right to request that we amend or update your personal data where it is inaccurate or incomplete.
10.3 Erasure
The right to request that we delete your personal data in certain circumstances.
10.4 Restrict Processing
The right to request that we temporarily or permanently stop processing your personal data.
10.5 Data Portability
The right to request a copy of your personal data in a structured, machine-readable format and the right to have your personal data transferred to another controller.
10.6 Object
The right to object to our processing of your personal data based on our legitimate interests or for direct marketing purposes.
10.7 Automated Decision-Making
The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects on you.
10.8 Withdraw Consent
The right to withdraw your consent at any time where we rely on consent to process your personal data.
To exercise these rights, please contact us at info@garagwizz.com. We will respond to your request within one month, which may be extended by two additional months if necessary, given the complexity of the request.
11. Children's Privacy
Our Service is not directed to children under the age of 16, and we do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we will take steps to remove that information from our servers.
12. Third-Party Links and Services
Our Service may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to such third-party services. We encourage you to review the privacy policies of any third-party services you visit or use.
When you use Google Sign-In, your interaction with Google is governed by Google's terms of service and privacy policy. We recommend reviewing Google's privacy policy to understand how they process your data when you use their authentication services.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make.
We will obtain your consent to any material changes if and where this is required by applicable data protection laws. We encourage you to review this Privacy Policy periodically to stay informed about our data practices.
14. How to Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Email: info@garagwizz.com
Address: Tractic Ltd, DE13 9DS, United Kingdom
15. Complaints
If you have concerns about our data practices, please contact us first so that we can try to resolve your concerns.
You also have the right to file a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:
Website: www.ico.org.uk
Phone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF