Draft legal document
Privacy Notice
Draft for independent legal review. Not approved terms or a claim of compliance. Owner details and actual practices must be confirmed before launch.
Who we are
Garage Gent operates as a UK sole trader. The operator identity, correspondence address, privacy contact and any applicable ICO registration status must be supplied and verified. Garage Gent is intended to act as controller for its website/account information and processor for garage customer information, with each garage acting as controller.
Current demonstration and contact form
Customers, vehicles and workshop records shown in the demonstration are fictional and held only in memory. The contact form is a local demonstration: nothing entered there is saved, delivered or submitted to a service. Please do not enter real personal information.
Account information
Pre-launch account preparation uses Lovable Cloud authentication and garage memberships. Account email, authentication identifiers, membership roles and voluntarily entered compliance records may be stored. Live customer onboarding remains closed.
Purposes and lawful bases — to confirm
Before collecting enquiries, the operator must confirm the purposes and lawful basis for responding to requests, providing accounts, securing services and meeting legal obligations. Contractual necessity, legitimate interests or another appropriate basis must be assessed for each activity. No marketing consent is bundled into a demo request.
Retention and deletion — to confirm
The owner must approve record-specific retention periods, legal justification and deletion processes. No fixed retention period is asserted in this draft. The compliance records are documentation only and do not automatically delete data.
Services and international transfers — to assess
Hosting and account services use Lovable Cloud. Google/Lovable sign-in may be offered. Confirm all providers, processing locations, contracts and subprocessors before launch. Make, Stripe and email/SMS delivery remain unconfigured. Any international transfers require an assessment and appropriate safeguards; this draft does not assert those are in place.
Your rights
Depending on the circumstances, individuals may request access, correction, deletion, restriction, objection and portability. The operator must provide a verified privacy contact and a procedure to respond within the applicable legal timeframe. Individuals may complain to the Information Commissioner’s Office at ico.org.uk.
Security and processor responsibilities
Garage-role access controls and tenant-scoped records are implemented as foundations, not certification of security. Independent security review, access tests, incident procedures, backup verification and data-processing agreements are required before live customer use.
Operator: [sole trader’s full legal name] trading as Garage Gent. Correspondence address: [owner to supply]. Contact: [verified owner contact]. Last reviewed: [owner to supply].