Privacy Policy

Last updated: 12 September 2026

Who we are

The Repair Works is the trading name of Paul Walsh, a sole trader. We are the data controller for the personal information described in this policy.

Any questions, or to exercise any of your rights: info@therepairworks.co.uk

What we collect

When you book a repair — your name, email address, the postal address we return your device to, your phone number, details of the device and the fault, and a booking reference.

If you create an account — your email address and a password, which we store hashed. We cannot read your password.

When you pay — your payment is handled directly by Stripe. We receive a payment reference, the amount, and the card type and last four digits. We never see or store your full card number.

When you contact us — your message and whatever contact details you use to send it.

When you use the site — IP address, browser and device type, pages visited and how you arrived. This comes from Google Analytics and is only collected if you accept analytics cookies.

Information on your device

Repairing a device often means switching it on and testing it, which can mean seeing what is on the screen. We do not look through your files, photos or messages, and we do not copy anything off your device. Where a repair genuinely requires access, we will ask you for what we need rather than trying to get in ourselves.

We may photograph a device when it arrives and during the repair, as a record of its condition and the work done. Those photographs are kept with the repair record and we will not publish them without asking you first.

Please back up your data, and remove anything personal where you can, before sending a device to us.

Why we use it, and our lawful basis

• Carrying out your repair and taking payment — performance of our contract with you

• Booking, status and dispatch emails — performance of our contract with you

• Answering enquiries — legitimate interests, so we can reply to people who contact us

• Accounting and tax records — legal obligation

• Keeping the site secure and working — legitimate interests, so we can run the service safely

• Website analytics — consent

• Marketing, if you opt in — consent, which you can withdraw at any time

Who we share it with

We share only what is necessary, with:

• Stripe — to take payment. Your card details go to Stripe directly and Stripe's own privacy policy applies to them.

• Google Workspace — our email. Messages to and from you are held in our mailbox.

• Google Analytics — website analytics, only if you accept analytics cookies.

• Hetzner — hosting. The website and its database run on Hetzner servers.

• Royal Mail and couriers — your name and return address, so your device can be delivered.

We do not sell your personal data to anyone. We may disclose information where we are legally required to.

Where your information is held

Our website and database are hosted by Hetzner.

Stripe and Google are based in the United States and may process your information there. Where information is transferred outside the UK, it is protected by the safeguards those providers have in place — the UK International Data Transfer Addendum or equivalent standard contractual clauses.

How long we keep it

• Repair and transaction records — six years from the end of the tax year they relate to, to meet HMRC requirements.

• Enquiries that don't lead to a booking — 12 months.

• Account details — until you ask us to close your account.

• Device photographs — kept with the repair record, for the same period.

• Analytics — as set in Google Analytics, currently [check your retention setting — 2 or 14 months].

After that we delete or anonymise the information.

Your rights

Under UK GDPR you have the right to:

• ask for a copy of the information we hold about you

• have it corrected if it is wrong

• have it deleted, where we do not need it for a legal or contractual reason

• restrict or object to how we use it

• receive it in a portable format

• withdraw consent at any time, where consent is what we rely on

Email info@therepairworks.co.uk and we will respond within one month.

You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.

Security

Access to booking records is limited to Paul Walsh. The site runs over HTTPS, account passwords are stored hashed, and card details never reach our systems. Devices in our care are kept at our business premises.

Children

Our service is not aimed at under-18s and we do not knowingly collect their information.

Automated decisions

We do not make automated decisions about you and we do not profile you.

Cookies

See our Cookie Policy.

Changes

We may update this policy. The current version is always on this page, with the date it was last updated at the top.