Privacy Policy

1Who is responsible for your data

1.1The trader identified above is the data controller for personal data processed in connection with this website and our services. For anything in this policy, including a request to see, correct, or delete what we hold about you, contact repairs@blackstonerepair.co.uk. If you think we have handled your data wrongly you can also complain to the Information Commissioner’s Office at ico.org.uk, and the complaints section below sets that out.

Contents ↑

2What we collect

2.1We collect the following personal data:

• identity and contact details: your name, email address, phone number where you provide one, and the addresses needed for shipping;
• booking and device details: the device model, your description of the fault, the service options you choose, and your acceptance of our terms, with the version and time of acceptance recorded;
• photographs and video: images you upload with an enquiry, and any photographs and video we take of your parcel and Device on receipt and during diagnosis, repair, and testing, as the record of its condition and documentation of our work;
• filming: footage of your repair, which we may publish on our YouTube channel after removing or blurring your name, your address, and the serial number of the device;
• correspondence: the messages we exchange about your repair;
• payment status: confirmation of what has been paid, while the payment itself is processed by Stripe and your card details never reach us;
• technical data: the IP address of a form submission, used for rate limiting and abuse prevention;
• CCTV: our parcel receiving area is monitored by CCTV, which may capture couriers and visitors at the point of delivery.

Contents ↑

3How we use it and our lawful bases

3.1We process personal data to perform our contract with you: taking bookings, diagnosing and repairing the Device, arranging shipping, taking payment, and honouring the warranty.

3.2We process some data under our legitimate interests: photographing and recording video of parcels and devices on receipt and during work as evidence of condition and documentation of the work, retaining diagnostic records to resolve disputes and warranty claims, preventing fraud and abuse of our forms, operating CCTV over the parcel receiving area to protect goods in our care, and sending booking and message notifications to the technician handling your repair.

3.3We film repairs and may publish the footage on our YouTube channel as a record of our work. We rely on our legitimate interest in documenting what we do, not on your consent, so you are not asked to agree to it as a condition of the repair. Footage shows the device and the bench, with your name, your address, and the serial number of the device removed or blurred. You can object at any time, before or after publication, and we will hold the footage back or take it down.

3.4We retain financial records to comply with our legal obligations to HMRC.

3.5We do not sell personal data, we do not share it for advertising, and we do not use it for automated decision-making.

Contents ↑

4Who we share it with

4.1We share personal data only with the service providers that operate parts of the service on our behalf, each acting under its own data processing terms:

• Supabase, which hosts our database and file storage;
• Vercel, which hosts this website;
• Resend, which delivers our emails;
• Cloudflare, which routes email sent to our repairs@ address into our system, carrying the sender address and the content of emails you send us;
• Stripe, which processes payments;
• Royal Mail, which receives your name and address to produce shipping labels;
• Telegram, which delivers instant booking and message notifications to the technician handling your repair, carrying your name, the device model, the booking reference, and the content of messages you send us, and never your contact details, address, or payment information.

4.2We may also disclose data where the law requires it, for example to HMRC or in connection with legal proceedings.

Contents ↑

5International transfers

5.1Some of the providers above process data outside the United Kingdom, including Telegram, which operates outside the UK. Where a provider processes data abroad, the transfer is protected by a UK adequacy decision, by the International Data Transfer Agreement or Addendum, or by the safeguards in that provider’s data processing terms, as applicable to that provider.

Contents ↑

6How long we keep it

6.1We keep personal data only as long as each purpose requires:

• repair and parcel photographs: deleted 12 months after your repair reaches its final outcome, whether that outcome is a completed repair, a repair we could not complete, or a booking that was cancelled or declined, unless a warranty claim or a dispute is open, in which case they are kept until it is resolved;
• booking, invoice, and financial records: kept for 6 years, as tax law requires;
• enquiries that do not become bookings: deleted within 12 months;
• CCTV recordings: retained for up to 30 days, unless needed as evidence for a specific incident;
• YouTube footage: kept while it stays useful as a record of our work, and you can ask us to take a video down at any time, including after it is published.

Contents ↑

7Your rights

7.1Under UK data protection law you have the right to access the personal data we hold about you, to have it corrected, to have it erased, to restrict or object to our processing of it, and to receive a copy in a portable format. Where processing rests on consent, you may withdraw that consent at any time.

7.2To exercise any of these rights, email repairs@blackstonerepair.co.uk. We respond within one month. Note that some data, such as financial records within their statutory retention period, cannot be erased before the law allows.

Contents ↑

8Cookies and local storage

8.1This site sets no advertising or analytics cookies and does not track you. We use strictly necessary browser storage only: local storage to save an in-progress booking draft, the model of any card you have previously sent us, and, on your device only, the list of repairs you have opened (their references and the email you used) so your repairs page can find them again. A sign-in cookie exists for our own staff area and is never set for customers. None of this data leaves your browser; no consent banner is required for strictly necessary storage. What we store is set out in full on our Cookie Settings page.

8.2If we ever introduce non-essential cookies, we will add a consent mechanism on the Cookie Settings page before any such cookie is set.

Contents ↑

9Complaints

9.1If you believe we have handled your data incorrectly, we would welcome the chance to put it right first: contact repairs@blackstonerepair.co.uk. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

Contents ↑

10Changes to this policy

10.1We may update this policy from time to time. Each version is dated; the date of the current version appears at the top of this page.

Contents ↑