The Body Shop Crash Repairs
    Back to Home

    Privacy Policy

    Last updated: October 2026

    1. Introduction

    The Body Shop Crash Repairs ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services, in accordance with the General Data Protection Regulation (GDPR) and Irish data protection laws.

    2. Data Controller

    For the purposes of the GDPR, the Data Controller is:
    The Body Shop Crash Repairs
    Killeenerk Moyvore,
    Mullingar, Co. Westmeath, N91 T188
    Email: thebodyshopcrashrepairs@gmail.com
    Phone: 0879333280

    3. Information We Collect

    We may collect and process the following data about you:

    • Identity and Contact Data: Name, email address, phone number, and postal address.
    • Vehicle Data: Vehicle make, model, registration number, and history.
    • Assessment Data: Photos of vehicle damage, descriptions of incidents, and repair requirements submitted through our Damage Check tool or via email.
    • Technical Data: IP address, browser type, time zone setting, and operating system collected automatically when using our website.

    4. How We Use Your Information

    We use your personal data to:

    • Provide estimates and quotes for vehicle repair services.
    • Communicate with you regarding your enquiry, repair progress, or collection.
    • Process your booking and manage our relationship with you.
    • Comply with our legal and regulatory obligations.
    • Improve our website and services.

    5. Legal Basis for Processing

    Under the GDPR, we process your data under the following lawful bases:

    • Consent: When you submit an enquiry or upload photos via our website.
    • Contract: When processing is necessary for the performance of a repair contract with you, or to take steps at your request before entering into such a contract.
    • Legal Obligation: When we need to comply with a legal or regulatory obligation (e.g., tax records).
    • Legitimate Interests: For running our business, providing administration and IT services, and network security.

    6. Data Sharing and Disclosure

    We do not sell, trade, or rent your personal data to third parties. We may share your information with:

    • Service providers acting as processors who provide IT, system administration, and CRM services.
    • Professional advisers including lawyers, bankers, auditors, and insurers.
    • Revenue Commissioners, regulators, and other authorities acting as processors or joint controllers based in Ireland who require reporting of processing activities in certain circumstances.

    7. International Data Transfers

    Your personal data is primarily processed within the European Economic Area (EEA). However, some of the service providers we rely on process personal data outside the EEA. In particular, our customer relationship management (CRM) provider, which receives and manages your enquiry and assessment submissions, is based in the United States.

    Where a transfer of personal data outside the EEA takes place, we rely on appropriate safeguards as required under Chapter V of the GDPR (Articles 44–49). For transfers to the United States, these safeguards include the Standard Contractual Clauses adopted by the European Commission, and/or the EU-US Data Privacy Framework where the recipient is certified under it. You may request a copy of the relevant safeguards, or information about how to exercise your rights under them, by contacting us at the email address below.

    8. Data Processors

    We engage third-party service providers who act as data processors on our behalf. They process personal data only as instructed by us and in accordance with our written agreements, which include GDPR-appropriate data protection terms. These providers may include:

    • Website and database hosting: the platform that hosts our website, user accounts, and assessment submissions.
    • CRM (customer relationship management): a US-based service that receives and manages enquiry and assessment submissions.
    • Analytics: providers that help us understand how visitors use our website, where you have consented to analytics cookies.
    • Email and communications: the service used to send and receive emails related to your enquiry or repair.

    9. Data Security and Retention

    We have put in place appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed.

    We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. By law, we have to keep basic information about our customers (including Contact, Identity, and Transaction Data) for six years after they cease being customers for tax purposes.

    10. Data Protection Contact

    If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us as the Data Controller at:

    The Body Shop Crash Repairs
    Killeenerk Moyvore, Mullingar, Co. Westmeath, N91 T188
    Email: thebodyshopcrashrepairs@gmail.com
    Phone: 0879333280

    11. Your Legal Rights

    Under the GDPR, you have the right to:

    • Request access to your personal data.
    • Request correction of the personal data that we hold about you.
    • Request erasure of your personal data.
    • Object to processing of your personal data.
    • Request restriction of processing of your personal data.
    • Request the transfer of your personal data to you or to a third party (data portability).
    • Withdraw consent at any time where we are relying on consent to process your personal data.

    If you wish to exercise any of the rights set out above, please contact us at thebodyshopcrashrepairs@gmail.com.

    12. Complaints to the Data Protection Commission

    If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Data Protection Commission (DPC), the Irish supervisory authority for data protection. You can contact the DPC at:

    Data Protection Commission
    21 Fitzwilliam Place, Dublin 2, D02 RD28
    Phone: 01 765 0100
    Email: info@dataprotection.ie
    Website: www.dataprotection.ie

    13. Children's Privacy

    Our website and services are intended for individuals aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will take steps to delete that information.