Skip to content
NRH Autoworks

Privacy Policy

Last updated 22 September 2026

This policy explains what personal information NRH Autoworks collects through this website, why we collect it, who we share it with and the rights you have over it. We have tried to keep it short and plain. If anything is unclear, please get in touch.

Who we are

This website is run by NRH Autoworks Ltd (“we”, “us”, “our”), an independent garage and bodyshop at 274 Windsor Road, Bray, Maidenhead SL6 2DT. We are the data controller for the personal information described in this policy.

You can contact us about your information at any time:

  • Email: sales@nrhautoworks.com
  • Telephone: 07721 094698
  • Post: NRH Autoworks Ltd, 274 Windsor Road, Bray, Maidenhead SL6 2DT

What information we collect

You can browse this website without telling us who you are. We only collect personal information when you send us a repair or quote request. That form asks for:

  • Your contact details: your name, telephone number, email address and how you would prefer us to contact you.
  • Your vehicle registration number: and the vehicle details returned when we look it up with the DVLA and DVSA vehicle enquiry services: make, model, colour, fuel type, year, and MOT and tax status.
  • Details of your enquiry: the service you are asking about and your description of the problem or the work you would like.
  • Photographs of your vehicle: if you choose to add them. Photos are optional. When you upload a photo we re-process the image, which removes embedded metadata such as the GPS location where it was taken.

Our systems also see your IP address when you use the site. We use it briefly to limit how often the forms can be submitted and to block spam and abuse.

Please do not include sensitive personal information (for example, health details) in your description or photos, we do not need it to help with your vehicle.

Why we use it and our lawful basis

We use the information you send us to:

  • respond to your enquiry;
  • prepare an estimate;
  • arrange and carry out any work you ask us to do; and
  • keep a record of your enquiry.

Under UK data protection law, we rely on the following lawful bases:

  • Steps taken at your request before entering into a contract: you have asked us for a quote or for help with your vehicle, and we need your details to provide it.
  • Our legitimate interests: running our business properly, keeping sensible records, and protecting the website from spam and abuse.

We do not send marketing emails on the basis of an enquiry, and we do not sell your information to anyone.

Who we share it with

We use a small number of trusted service providers to run this website. They process information on our behalf and only on our instructions:

  • Supabase: our database and file storage, where enquiries and photos are held, and the sign-in system for our staff admin area.
  • Vercel: hosts the website.
  • Resend: delivers the emails connected with your enquiry, such as the notification that tells us a new request has arrived.
  • DVLA and DVSA vehicle enquiry services: your registration number is sent to these services so we can look up the vehicle. Your name and contact details are not sent.

We may also share information where the law requires us to. Otherwise, your details stay with us.

Transfers outside the UK

Some of these providers may process information outside the United Kingdom. Where that happens, it is done under appropriate safeguards recognised by UK data protection law, such as adequacy regulations or approved contractual clauses.

How we keep it secure

Enquiry records can only be viewed by authorised members of our staff, through a login-protected admin area. Information is sent to and from the website over an encrypted connection. No system can be guaranteed completely secure, but we take reasonable steps to look after your information.

How long we keep it

As a default, if your enquiry does not lead to any work, we keep it for up to 24 months and then delete it, including any photos. Where an enquiry leads to work being carried out, we may keep the related records for longer where we need them for legal, tax or warranty-related reasons.

Your rights

Under UK GDPR you have the right to:

  • access: ask for a copy of the information we hold about you;
  • rectification: ask us to correct anything that is wrong or incomplete;
  • erasure: ask us to delete your information;
  • restriction: ask us to limit how we use it;
  • objection: object to us using it on the basis of our legitimate interests; and
  • portability: ask for the information you gave us in a format you can reuse.

Some of these rights only apply in certain circumstances. To use any of them, email sales@nrhautoworks.com or write to us at the address above. There is normally no charge, and we will reply within one month. We may need to check your identity first.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.

Cookies

The public website does not use analytics, advertising or tracking cookies. Full details are in our cookie policy.

Changes to this policy

We will update this page if the way we handle personal information changes. The date at the top of the page shows when it was last revised.