Privacy notice

This is a university assignment prototype. Please do not enter real personal data unless you accept this notice and understand that this is a working demonstration, not a commercial product.

What we collect and why

Account details (name, email, phone, password), vehicle details, bookings, service history and your reminder preferences, so we can run your bookings and service history and contact you about them.

Who sees it

Service Advisors and Managers can see customer contact details needed to handle a booking or job card. Inventory Staff never see customer data. Administrators manage staff accounts but cannot read customer contact details. A Manager can export the customer contact list only after typing a reason, and every export is recorded. Every access is checked by role; sign-ins, changes, searches and refused requests are recorded in an audit log.

Retention

We keep account and service data while your account is active. If you delete your account, your personal data is anonymised; your service records are kept without your identity so branch history stays accurate. Encrypted backups of the system are kept for up to eight weeks, so a deleted account leaves the backups within that time.

Consent

Consent to reminders by email, SMS or WhatsApp is opt-in, unticked by default, and recorded with the wording version and the time you agreed. Reminders and notices are sent by email to customers who opted in; SMS and WhatsApp are not enabled yet. A password reset or email confirmation you ask for is sent without opt-in. You can change or withdraw consent for each channel at any time on your Profile page.

Your rights

You can download a copy of your data (JSON) and delete your account from your Profile page. Contact us at privacy@example.com for any other request.

Cookies

We use one session cookie to keep you signed in. We do not use advertising or tracking cookies.