top of page

Privacy Policy

​

1. Introduction

SL Automotive BodyShop (“we”, “us”, “our”), a trading division of Dragontek Automotive Ltd, cares deeply about your privacy. This policy explains how we collect, use, store, and share your personal data through our website or in-person interactions, in line with UK GDPR.

2. Data Controller

SL Automotive BodyShop
Unit 1b Calf House, Goose Willow Farm, Hanney Road, Steventon, Oxon, OX13 6AP
Phone: 01235 399038 · Email: info@sl-automotive.co.uk
 

3. Personal Data Collected

  • Contact form entries: your name, email, phone number, vehicle registration, service notes, and optionally, uploaded images of damage

  • Communications: details shared during phone calls or email threads regarding repairs, quotes, bookings

  • Website analytics: IP address, browser/device type, pages visited, session duration, captured via essential and performance cookies

  • No advertising or profiling cookies are used.

4. How We Use Your Data

We process data to:

  • Respond to repair enquiries, provide precise quotes, and schedule services including accident repair, dent/ scratch removal, resprays, paintwork, panel beating, insurance and motorcycle work 

  • Manage insurance claims and claims paperwork on your behalf

  • Offer air-conditioning regas services (R134a or R1234yf) and anti-bacterial cleaning 

  • Improve our services and website through anonymised analytics

  • Fulfil legal and financial record-keeping obligations

5. Legal Grounds for Processing

  • Contractual necessity: to manage your service requests and agreements

  • Legitimate interests: to maintain and improve our operations and client experience

  • Consent: if you opt into follow-up communications

  • Legal obligation: for statutory record-keeping (e.g., accounting, VAT)

6. Sharing Your Data

We do not sell or rent your data. Disclosure may occur with:

  • Service providers (e.g. website host, email systems, insurers, parts suppliers) in their role as processors

  • Legal or regulatory authorities, where lawfully required

7. Cookies & Tracking

  • Essential cookies: for site functions like forms and navigation

  • Performance cookies: anonymous usage tracking via Google Analytics
    No third-party advertising or profiling cookies are used.

8. Data Retention

  • Service and claim records: retained for up to 7 years for legal compliance

  • Usage logs: session data deleted after 24 months; aggregated analytics retained as needed

9. Your Rights

You have the right to:

  • Access, correct, delete, or restrict your data

  • Withdraw consent at any time

  • Request portability of your data

  • Object to processing based on legitimate interest

To exercise your rights, contact us using the details above or via our website form. You may also lodge a complaint with the ICO.

10. Security

We implement SSL, secure servers, limited access controls, and staff confidentiality training. Despite strong protections, no system is entirely impervious to risk.

11. International Transfers

All personal data is stored and processed in the UK—no overseas transfers occur.

12. Changes to This Policy

We may update this policy occasionally; the effective date will be revised accordingly. Continued use of our website constitutes acceptance.

bottom of page