Legal
PRIVACY POLICY
Last updated: April 2026 · LXC Detailing Ltd · Company No. 16864315 · ICO Reg: ZC116028
LXC Detailing Ltd ("we", "us", "our") is committed to protecting your personal data and handling it responsibly. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We are the data controller for the personal data described in this policy. Our registered office is: 7C Church Walk, Burnham, SL1 7AN, England. We are registered with the Information Commissioner's Office (ICO) as a data controller. Registration number: ZC116028.
If you have any questions about this policy or how we handle your data, please contact us at info@lxcdetailing.co.uk.
1. INFORMATION WE COLLECT
We collect and process the following categories of personal data:
When you make a booking or quote request through our booking system at bookings.lxcdetailing.co.uk, we collect:
- First name and surname
- Email address
- Phone number
- Service address (via postcode lookup)
- Vehicle make, model, size, and registration number (registration is optional)
- Preferred date and time
- Service notes or special requests
- How you heard about us (optional)
Automatically generated and stored by our booking system:
- Customer reference number, booking reference, and quote reference
- Booking history and status
- Vehicle records linked to your customer profile
- Payment records including deposit amounts and Stripe session identifiers (card details are held by Stripe only)
- Email and SMS notification logs
- Any alternate contact details or addresses provided if you rebook with different information
Via third-party processors:
- Stripe: payment card details are processed and stored by Stripe. We do not store card numbers, CVV codes, or full card details in our systems.
- Twilio: your phone number is shared with Twilio solely for the purpose of sending SMS booking notifications and reminders.
- FreeAgent: we use FreeAgent for invoicing and accounting purposes. Where an invoice is raised, your name, address, and relevant transaction details may be processed by FreeAgent. For more information, see FreeAgent's privacy policy at freeagent.com.
- SMTP provider: your email address is shared with our email delivery provider solely for the purpose of sending booking confirmations and notifications.
When you contact us by email, phone, or WhatsApp, we collect any personal data you choose to share, such as your name, contact details, and the content of your message.
Vehicle photography: we may photograph your vehicle during or after a service for quality control and marketing purposes. Registration plates are always obscured before any image is published or shared publicly.
Website usage: our main website uses browser local storage (not cookies) solely for remembering your light/dark mode preference and saving calculations in the dilution ratio calculator. No personal data is collected or transmitted via these mechanisms.
We do not collect passwords, dates of birth, or any special category data as defined under UK GDPR.
2. HOW WE USE YOUR DATA
We use your personal data only for the purposes for which it was collected:
- To process, confirm, and manage your bookings and appointments.
- To communicate with you regarding your booking, including confirmations, reminders, and follow-ups.
- To process payments securely via Stripe, cash, or bank transfer.
- To respond to enquiries and provide customer support.
- To showcase our work on our website, social media, and other marketing channels using vehicle photographs, where registration plates are always obscured. If you prefer we do not photograph your vehicle, please inform us before your appointment and we will respect that without question.
- To comply with our legal and regulatory obligations as a registered company in England and Wales.
- To send you service-related updates or promotions where you have opted in. You can opt out at any time by contacting us at info@lxcdetailing.co.uk.
To operate our loyalty programme and referral scheme. This includes tracking the number of completed bookings associated with your account, generating and issuing personalised discount and referral codes, and logging when a referral code has been redeemed. This data is processed on the basis of our legitimate interest in rewarding returning customers.
3. LEGAL BASIS FOR PROCESSING
Under UK GDPR, we process your personal data on the following legal bases:
- Contract performance (Article 6(1)(b)): processing your booking details, vehicle information, and contact details is necessary to fulfil the contract for services you have requested.
- Legitimate interests (Article 6(1)(f)): we rely on legitimate interests for responding to general enquiries and managing our business operations, and for photographing and showcasing completed work. We have assessed that these interests are not overridden by your privacy rights. You may object to this processing at any time.
- Legal obligation (Article 6(1)(c)): we may process data where required to comply with applicable law, including tax and financial record-keeping obligations.
- Consent (Article 6(1)(a)): where we send you marketing communications, we will only do so with your consent. You may withdraw consent at any time.
4. DATA PROCESSORS AND THIRD PARTIES
We use the following third-party services which process personal data on our behalf as data processors. We have ensured each has appropriate data processing agreements and safeguards in place:
- Stripe: we use Stripe to process online payments. When you pay online, your payment data (including name, billing address, and card details) is processed directly by Stripe, Inc. Stripe is certified to the Payment Card Industry Data Security Standard (PCI DSS Level 1) and complies with UK GDPR. Data may be transferred to the United States under the UK Extension to the EU-US Data Privacy Framework. For more information, see Stripe's Privacy Policy.
- Formspree: our website contact form submissions are processed by Formspree, which forwards them to us by email. Only the data you enter into the contact form is processed. For more information, see Formspree's privacy policy.
- WhatsApp (Meta): if you choose to contact us via WhatsApp, your message is subject to Meta's privacy policy and terms of service.
- Google Maps: our website uses the Google Maps JavaScript API to display our coverage area. Google may collect technical data such as your IP address when the map loads. For more information, see Google's privacy policy.
- Google Fonts: we use Google Fonts to display typefaces on our website. Your browser may make a request to Google's servers when loading these fonts.
We do not sell, rent, or share your personal data with any third party for their own marketing purposes.
5. DATA STORAGE AND TRANSFERS
Your personal data is stored on our bespoke booking system, hosted on Lovable Cloud infrastructure powered by AWS eu-central-1 (Frankfurt, Germany). All data is stored within the European Union and is protected by encryption at rest and row-level security controls. No personal data is transferred outside the EU via our own systems.
Where third-party processors (Stripe, Twilio, SMTP provider) are involved, data may be transferred internationally. Each of these processors operates under appropriate safeguards including Standard Contractual Clauses and compliance with UK GDPR transfer requirements.
6. DATA RETENTION
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Booking and customer records are retained for up to 6 years in line with HMRC requirements for financial record-keeping. Where data is no longer required, it is securely deleted. You may request deletion of your data at any time subject to any legal obligations we have to retain it.
7. DATA SECURITY
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Online payment data is handled entirely by Stripe and is never stored or processed directly by us. Our booking system is hosted securely and access is restricted to authorised personnel only.
Please be aware that no method of electronic transmission or storage is completely secure. While we take all reasonable precautions, we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform you where required by law.
8. YOUR RIGHTS UNDER UK GDPR
You have the following rights regarding your personal data:
- Right of access: you may request a copy of the personal data we hold about you.
- Right to rectification: you may request correction of any inaccurate or incomplete data.
- Right to erasure: you may request deletion of your data where there is no lawful reason to continue processing it.
- Right to restrict processing: you may request that we limit how we use your data in certain circumstances.
- Right to data portability: you may request a machine-readable copy of data you have provided to us.
- Right to object: you may object to processing based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at info@lxcdetailing.co.uk. We will respond within one calendar month. We will not charge a fee for reasonable requests. We may need to verify your identity before acting on a request.
9. COOKIES AND LOCAL STORAGE
Our main website (lxcdetailing.co.uk) does not use tracking or advertising cookies. We use browser local storage only to remember your light or dark mode preference and to save calculations in the dilution ratio calculator. This data is stored entirely on your own device and is never transmitted to us.
Our booking system (bookings.lxcdetailing.co.uk) and Stripe's payment pages may use functional cookies necessary for their operation. Please refer to Stripe's cookie policy for further information.
10. COMPLAINTS
If you have concerns about how we handle your personal data, we would always encourage you to contact us directly in the first instance at info@lxcdetailing.co.uk so we can address your concern.
You also have the right to lodge a complaint with the UK's data protection supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.
11. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be published on this page with an updated date at the top. We encourage you to review this page periodically. Where changes are material, we will take reasonable steps to notify you.
12. CONTACT US
For any questions about this Privacy Policy or to exercise your data rights, please contact us:
- Email: info@lxcdetailing.co.uk
- Phone: 07380 348 452
- Post: LXC Detailing Ltd, 7C Church Walk, Burnham, Slough, SL1 7AN