Privacy Policy

1Who is responsible for your data

1.1The trader identified above is the data controller for personal data processed in connection with this website and our services. Registration with the Information Commissioner’s Office is in progress, and the registration number will be published here once issued. For anything in this policy, contact repairs@blackstonerepair.co.uk.

Contents ↑

2What we collect

2.1We collect the following personal data, and nothing beyond it:

• identity and contact details: your name, email address, phone number where you provide one, and the addresses needed for shipping;
• booking and device details: the device model and serial number, your description of the fault, and the service options you choose;
• photographs: images you upload with an enquiry, and the photographs we take of your parcel and Device on receipt and during the repair as the record of its condition;
• filming, only where you have consented to it under the launch offer: footage of the repair for our YouTube channel, with your name, address, and the card serial number never shown;
• correspondence: the messages we exchange about your repair;
• payment status: confirmation of what has been paid, while the payment itself is processed by Stripe or PayPal and your card details never reach us;
• technical data: the IP address of a form submission, used for rate limiting and abuse prevention;
• CCTV: our parcel receiving area is monitored by CCTV, which may capture couriers and visitors at the point of delivery.

Contents ↑

3How we use it and our lawful bases

3.1We process personal data to perform our contract with you: taking bookings, diagnosing and repairing the Device, arranging shipping, taking payment, and honouring the warranty.

3.2We process some data under our legitimate interests: photographing parcels and devices on receipt as evidence of condition, retaining diagnostic records to resolve disputes and warranty claims, preventing fraud and abuse of our forms, and operating CCTV over the parcel receiving area to protect goods in our care.

3.3We process filming footage only with your consent, which you may withdraw at any time before publication. We retain financial records to comply with our legal obligations to HMRC.

3.4We do not sell personal data, we do not share it for advertising, and we do not use it for automated decision-making.

Contents ↑

4Who we share it with

4.1We share personal data only with the service providers that operate parts of the service on our behalf, each acting under its own data processing terms:

• Supabase, which hosts our database and file storage;
• Vercel, which hosts this website;
• Resend, which delivers our emails;
• Stripe and PayPal, which process payments;
• Royal Mail, which receives your name and address to produce shipping labels.

4.2We may also disclose data where the law requires it, for example to HMRC or in connection with legal proceedings.

Contents ↑

5International transfers

5.1Some of the providers above process data outside the United Kingdom. Where they do, the transfer is protected by a UK adequacy decision or by the International Data Transfer Agreement or Addendum, as applicable to that provider.

Contents ↑

6How long we keep it

6.1We keep personal data only as long as each purpose requires:

• repair and parcel photographs: deleted 12 months after the repair completes, unless a warranty claim or dispute is open, in which case they are kept until it is resolved;
• booking, invoice, and financial records: kept for 6 years, as tax law requires;
• enquiries that do not become bookings: deleted within 12 months;
• CCTV recordings: retained for up to 30 days, unless needed as evidence for a specific incident;
• published YouTube footage: remains published under the consent you gave, which you may withdraw before publication.

Contents ↑

7Your rights

7.1Under UK data protection law you have the right to access the personal data we hold about you, to have it corrected, to have it erased, to restrict or object to our processing of it, and to receive a copy in a portable format. Where processing rests on consent, you may withdraw that consent at any time.

7.2To exercise any of these rights, email repairs@blackstonerepair.co.uk. We respond within one month. Note that some data, such as financial records within their statutory retention period, cannot be erased before the law allows.

Contents ↑

8Cookies and local storage

8.1This site sets no advertising or analytics cookies and does not track you. We use strictly necessary browser storage only: session storage to remember that you dismissed the promotional banner, and local storage to save an in-progress booking draft, your most recent booking reference, and the model of any card you have previously sent us so we can offer it back to you on your next visit. None of this data leaves your browser, and no consent banner is required for strictly necessary storage.

8.2If we ever introduce non-essential cookies, we will add a consent mechanism and a cookie settings page before doing so.

Contents ↑

9Complaints

9.1If you believe we have handled your data incorrectly, we would welcome the chance to put it right first: contact repairs@blackstonerepair.co.uk. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

Contents ↑

10Changes to this policy

10.1We may update this policy from time to time. Each version is dated, and the date of the current version appears at the top of this page.

Contents ↑