Privacy Policy
This policy explains what personal information Roscoe Street Garage collects through roscoestreetgarage.co.uk, why, how long we keep it, and the rights you have over it. It is written to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended by the Data (Use and Access) Act 2025.
Last updated:
The short version
- We collect what you choose to send us through our forms, by email or by phone, plus the basic technical information every website receives.
- We use it to reply to you, to provide what you ask for, to keep the records the law requires, and to protect this website from spam and misuse.
- We do not sell your information, and this website does not use advertising or social media tracking cookies.
- You can ask to see, correct or delete your information at any time: info@roscoestreetgarage.co.uk.
Who we are
Boro Motors Ltd, registered in England and Wales under company number 16518490 and trading as Roscoe Street Garage, is the data controller for the information described below. Questions about anything on this page can go to info@roscoestreetgarage.co.uk, or by post to Unit 2, Roscoe Street, Scarborough, North Yorkshire, YO12 7BY.
You can also call us on 01723 336989.
We are not required to appoint a Data Protection Officer. The contact details above reach the person responsible for data protection.
What we collect
Information you give us
- Enquiry and quote forms – your name, email address, phone number, and whatever you write in the message, plus your vehicle make, model and registration, and the service you need.
- Email and phone calls – your contact details and what we discuss.
Information collected automatically
- Server logs – like every website, our server records each request it receives: the IP address, date and time, the page asked for, the referring page, and the browser and device type. These logs are used to keep the site running and secure, and to produce simple visitor totals for us.
- Form security – when you send a form we store the IP address and browser type it came from, alongside the message in our database. This helps us spot and block spam and abuse. It is not included in the email we receive.
Do you have to give us information?
No. But we need your contact details to reply to you, and some information to provide a service. We do not ask for, and would rather not receive, sensitive information such as health details, unless it is needed for what you have asked us to do.
How we use it and why
The law only allows us to use personal information when we have a lawful reason, known as a lawful basis. This table shows each use and the basis for it.
| What we do | Information used | Lawful basis |
|---|---|---|
| Replying to your enquiry and preparing a quote | Contact details, message, vehicle details and the service you need | Contract – steps you have asked us to take before an agreement. For business enquiries, legitimate interests in responding to people who contact us. |
| Carrying out work on your vehicle | Contact details, vehicle and job details, correspondence | Contract – to do what we have agreed with you. |
| Invoices, payments and accounts | Name, address, what you bought and paid | Legal obligation – tax and company law require us to keep financial records. |
| Protecting our forms from spam and abuse | IP address and browser type of each form submission | Legitimate interests – keeping the website secure and usable. |
| Running and securing the website | Server logs | Legitimate interests – keeping the website working, secure and free from attack. |
| Dealing with disputes and legal claims | Any relevant records | Legitimate interests – protecting our business and establishing or defending legal claims. |
We do not send marketing emails or newsletters, and we will not add you to a mailing list.
We do not make decisions about you based solely on automated processing, and we do not use your information to build a profile of you.
Transfers abroad
We keep your information in the UK and do not transfer it outside the UK.
How long we keep it
We keep information only for as long as we need it for the reason we collected it, then delete it securely.
| Information | How long |
|---|---|
| Customer and job records | 6 years after we last carried out work for you |
| Invoices and financial records | 6 years from the end of the financial year they relate to, as tax and company law require |
| IP address stored with a form | Deleted with the enquiry it belongs to |
| Server logs | Kept for a short period to produce visitor totals and investigate problems, then deleted when the server's logs are rotated |
We may keep information for longer if we need it to deal with a complaint, a dispute or a legal claim.
Your rights
You have the right to:
- see the personal information we hold about you and get a copy of it;
- correct anything that is wrong or incomplete;
- delete your information, where we have no good reason to keep it;
- restrict how we use it, for example while we check a correction you have asked for;
- object to us using it where we rely on legitimate interests;
- move information you gave us to another organisation, in a common electronic format (data portability);
- withdraw consent at any time, where we rely on consent. This does not affect anything we did before you withdrew it.
To use any of these rights, email info@roscoestreetgarage.co.uk or write to Unit 2, Roscoe Street, Scarborough, North Yorkshire, YO12 7BY. It is free. We will reply within one month. If your request is complex we may need up to two more months, and we will tell you if so. We may ask you to confirm your identity first, to make sure we do not give your information to the wrong person.
Complaints
If you are unhappy with how we have used your personal information, please tell us so we can put it right: email info@roscoestreetgarage.co.uk or write to Unit 2, Roscoe Street, Scarborough, North Yorkshire, YO12 7BY, marking it "Data protection complaint". We will acknowledge your complaint within 30 days, look into it, and tell you the outcome.
Security
Every page of this website is served over an encrypted (HTTPS) connection, so information you send through it cannot be read in transit. Access to the website's database is restricted, and only the people who need your information to do their job can see it.
No system connected to the internet can be made completely secure, but if something did go wrong we would take steps to contain it and, where the law requires, tell you and the relevant authority.
Children
This website is intended for adults. We do not knowingly collect information from children under 13. If you believe a child has sent us their details, contact us and we will delete them.
Other websites
This website links to other websites, including our social media pages. Those sites have their own privacy policies, and we are not responsible for how they use information. Please read their policies before giving them your details.
Changes to this policy
We review this policy whenever the way we use personal information changes. The date at the top shows when it was last updated.