Privacy policy.

1. Introduction

At William Harris Restoration, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you:

  • Use our car restoration, maintenance, and related services.

  • Visit our website or social media pages.

  • Contact us via email, phone, or in person.

We are the “data controller” of the personal data we process and are registered and compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We may collect and process different categories of personal data, including:

a) Identity and Contact Information

  • Full name

  • Address

  • Telephone number

  • Email address

b) Vehicle Information

  • Make, model, registration, VIN number

  • Photographs, restoration history, and project notes

c) Financial and Transaction Data

  • Bank account details (for invoices and payments)

  • Billing address and payment history

  • Invoice and quotation details

(Note: We do not store full credit/debit card details. Payments are processed securely through approved providers.)

d) Communications and Records

  • Emails, phone calls, letters, and in-person notes

  • Project updates and photographic documentation

e) Website and Technical Data (if applicable)

  • IP address, browser type, device information

  • Usage data such as pages visited, time spent, and referring websites

  • Cookies and tracking technologies (see Section 9)

f) Marketing Preferences

  • Your preferences for receiving communications from us (email, post, phone).

3. How We Use Your Data

We use your personal data for the following purposes:

  • Service delivery: To provide restoration, repair, and consultation services; to prepare and send quotes, invoices, and progress updates.

  • Customer support: To respond to enquiries, resolve complaints, and maintain communication.

  • Legal and regulatory compliance: To maintain business records, comply with tax and accounting obligations, and meet insurance requirements.

  • Marketing and promotions (with consent): To send updates about our services, projects, events, or offers.

  • Website operation and improvement: To analyse visitor behaviour and improve website performance.

4. Lawful Bases for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

  • Contract: When processing is necessary to deliver our services (e.g., restoration work, quotations).

  • Legal obligation: To comply with accounting, tax, and regulatory requirements.

  • Legitimate interests: To improve our services, maintain records, and communicate with customers.

  • Consent: For marketing emails, newsletters, and promotional communications.

You may withdraw consent at any time by contacting us.

5. Sharing Your Data

We may share your data with:

  • Service providers: IT support, website hosting, email platforms, and secure payment processors.

  • Specialist subcontractors and suppliers: For parts procurement, specialist mechanical or bodywork services.

  • Professional advisers: Accountants, insurers, and legal representatives.

  • Regulatory authorities: HMRC or other authorities when required by law.

We ensure all third parties respect the security of your personal data and process it only in accordance with our instructions.

We do not sell or rent your personal data to third parties.

6. International Transfers

In some cases (for example, if an IT provider stores data on servers outside the UK), your personal data may be transferred outside the UK. If so, we will ensure appropriate safeguards are in place, such as:

  • Transfers to countries with adequacy decisions (e.g., the EU).

  • Use of standard contractual clauses approved by the ICO.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes collected, including for legal, accounting, and insurance requirements.

  • Customer and vehicle records: up to 7 years after the project ends.

  • Financial records: minimum 6 years for HMRC compliance.

  • Marketing preferences: until you unsubscribe or withdraw consent.

When data is no longer required, it will be securely deleted or anonymised.

8. Security

We implement appropriate technical and organisational security measures to protect your data, including:

  • Secure storage systems with restricted access.

  • Password protection and encryption where possible.

  • Physical security for paper records.

  • Limiting access to authorised staff only.

9. Cookies and Website Tracking

Our website may use cookies and similar technologies. These help us:

  • Ensure the website functions properly.

  • Understand how visitors use our site.

  • Improve user experience.

  • Deliver relevant content or promotions.

Types of cookies:

  • Essential cookies: Necessary for site functionality.

  • Analytical cookies: To analyse visitor numbers and behaviour.

  • Marketing cookies: If used, to personalise ads or promotions.

You can manage cookies via your browser settings. For more details, see our Cookie Policy [link if available].

10. Marketing Communications

We may send you information about our services, offers, or events by email, post, or phone — but only if you have provided consent or we have a legitimate interest (e.g., existing customers).

You can opt out at any time by:

  • Clicking “unsubscribe” in our emails.

  • Contacting us directly at william@wh-restoration.com .

11. Your Rights

You have the following rights under UK data protection law:

  • Access: To request a copy of the personal data we hold.

  • Rectification: To correct inaccurate or incomplete data.

  • Erasure: To request deletion where we no longer need the data.

  • Restriction: To limit how we process your data.

  • Objection: To stop processing based on legitimate interests or for marketing.

  • Data portability: To request transfer of your data to another service provider.

  • Withdraw consent: Where processing is based on consent (e.g., marketing).

To exercise your rights, contact us at william@wh-restoration.com .

12. Complaints

If you are concerned about how we use your personal data, please contact us first so we can resolve the issue.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection:

  • Website: https://ico.org.uk/make-a-complaint/

  • Telephone: 0303 123 1113

13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, practices, or legal obligations. Any updates will be posted on our website with the revised effective date