top of page

Privacy Policy

1. Introduction

Bumper 2 Bumper Bodyshop Ltd (“we”, “us”, “our”) is a family‑run car body repair specialist in Deal, Kent. We take your privacy seriously and handle your personal data in accordance with UK GDPR when you use our website or services. 

2. Data Controller & Location

Bumper 2 Bumper Bodyshop Ltd
Unit 22, Southwall Industrial Estate, Southwall Road, Deal, Kent, CT14 9QB
01304 368347 ·  b2b_deal@hotmail.co.uk

3. Personal Data We Collect

  • Enquiry or booking forms: name, contact details, vehicle information, service requirements, optional photos of damage

  • Communications: information shared via phone, email, or in-person

  • Website analytics: anonymised IP address, browser/device type, pagesvisited, session duration—collected via essential and performance cookies only; we do not use advertising or profiling cookies 

4. How We Use Your Data

  • Provide accurate quotes, book, and carry out services (accident repair, scratch/dent repairs, paintwork, custom restorations, alloy refurbishment, welding, fabrication, MOT welding, upholstery, engine conversions, detailing, headlight/windscreen repairs) 

  • Send confirmations, invoices, service updates, and follow-up emails

  • Improve our website through anonymised analytics

  • Maintain legal, warranty, insurance, and accounting records

5. Legal Basis for Processing

  • Contractual necessity: to deliver the services you request

  • Legitimate interests: to run and enhance our business and website

  • Consent: where you opt in to marketing or follow-up communications

  • Legal obligation: to retain accounting, warranty, and insurance records

6. Data Sharing

We do not sell or share your data for marketing. We only share data with:

  • Service providers (hosting, email, analytics platforms) under GDPR-compliant agreements

  • Insurance, regulatory, or warranty bodies, if required by law

7. Cookies & Tracking

  • Essential cookies: required for forms and navigation

  • Performance cookies: anonymised analytics only (e.g., Google Analytics)
    We do not use advertising or profiling cookies 

8. Data Retention

  • Service and enquiry records: retained for up to 7 years for legal, warranty or insurance needs

  • Analytics logs: anonymised session data deleted after 24 months; aggregated analytics may be retained longer if necessary

9. Your Rights

Under UK GDPR, you have the right to:

  • Access, correct, erase, restrict, or port your data

  • Withdraw consent or object to processing
    To exercise these rights, contact us via the details above. You also have the right to lodge a complaint with the ICO.

10. Security

We use SSL encryption, secure UK-based hosting, access controls, and staff training. While no system is perfect, we follow best practice standards to safeguard your data.

11. International Transfers

All data is processed and stored within the UK—no overseas transfers take place.

12. Policy Updates

We may occasionally update this policy. The Effective Date above will indicate the latest version. Continued use of our website implies acceptance of any changes.

bottom of page