Oldbury MOT Testing Station Limited ("we", "us", "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, store and share personal data when you use our services, visit our website, or contact us. It also explains your rights and how to contact us or the supervisory authority.

Data controller

Oldbury MOT Testing Station Limited

Registered address: Unit 1 Bridge Street, Oldbury, West Midlands, United Kingdom, B69 4BT

Company number: 13946881

Email: OldburyMOT@outlook.com

Telephone: 0121 552 1873

Personal data we collect

We may collect the following personal data:

Identity and contact information: full name, address, email address, telephone number.

Vehicle information: registration number, vehicle make and model, VIN, mileage, MOT history.

Service records: details of completed and scheduled MOT tests, repairs and related communications.

Payment information: card details may be processed by our payment provider; we collect billing name, address and transaction records. We do not store full card data unless you opt in and we specifically state so.

Appointment and booking data: appointment date/time, notes, preferences.

Communications: records of phone calls, emails, text messages, chat messages and other correspondence (for service, safety, quality and training purposes).

CCTV/images: video or photographic images captured on our premises for security and safety.

Website data: IP address, device and browser information, cookies and usage data collected through our website and analytics tools.

Special categories: we do not normally process special category data (e.g. health information). If we do (for accessibility reasons), we will obtain explicit consent and handle it securely.

How we collect personal data

We obtain personal data directly from you when you:

book an MOT or other service;

register with us or sign consent forms;

contact us by phone, email, text or in person;

make a payment or request an invoice;

use our website or related digital services.

We may also receive data from third parties such as:

vehicle owners, fleet managers or authorised representatives;

garages or repairers with your consent;

payment service providers;

publicly available sources (for identity verification);

law enforcement or regulatory bodies where required.

Purposes and legal bases for processing

We process personal data for the following purposes and rely on these legal bases:

To provide MOT testing and related services, manage appointments and keep service records (performance of a contract).

To process payments and send invoices or receipts (performance of a contract / legal obligation).

To communicate with you about bookings, test results, safety recalls or required repairs (legitimate interests: service administration and customer care).

To comply with legal and regulatory obligations, including MOT records retention and reporting to DVSA or other authorities (legal obligation).

To maintain security of premises and staff, e.g. CCTV, and to prevent fraud (legitimate interests: safety, security and fraud prevention).

To improve our services, website and customer experience using aggregated analytics (legitimate interests).

To respond to complaints, disputes or legal claims (legal basis: legitimate interests / legal obligation as appropriate).

Where required, to process special category data with explicit consent.

Sharing personal data

We may share personal data with:

DVSA or other regulators as required by law;

authorised repairers, fleet operators or third-party garages when you request or consent to work being carried out;

payment processors and banks to complete transactions;

IT, cloud and software providers who support our booking, record-keeping, website and email systems (under data processing agreements);

law enforcement, courts or other bodies where required by law or to protect our rights;

professional advisers (legal, accounting) where necessary and under confidentiality obligations.

We will not sell your personal data.

International transfers

Some service providers (e.g. cloud or analytics providers) may transfer or store data outside the UK/EEA. Where we do this, we ensure appropriate safeguards are in place (UK adequacy decision, standard contractual clauses, or other permitted transfer mechanisms) and that your personal data remains protected.

Data security

We implement reasonable technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. Measures include access controls, encryption where appropriate, secure servers, staff training and data processing agreements with third parties. No system is entirely secure; if a data breach affecting your rights occurs, we will notify you and the ICO where required.

Data retention

We retain personal data only as long as necessary for the purposes for which it was collected and to meet legal and regulatory obligations (for example, MOT records may need to be retained in line with DVSA requirements). Typical retention periods:

MOT test records: as required by DVSA and applicable law (insert specific period if known).

Financial and accounting records: typically 6 years for tax purposes.

Booking and communication records: typically up to 2 years unless required longer.

CCTV footage: retained for a limited period (e.g. 30–90 days) unless needed for an incident or investigation.

Your rights

You have rights in relation to your personal data, subject to certain conditions:

Right of access: request copies of personal data we hold about you.

Right to rectification: ask us to correct inaccurate or incomplete data.

Right to erasure: request deletion of data where we have no lawful reason to retain it.

Right to restrict processing: ask us to limit processing in certain situations.

Right to data portability: receive a copy of personal data in a structured, commonly used format where applicable.

Right to object: object to processing based on legitimate interests, direct marketing or profiling.

Right to withdraw consent: where processing is based on consent, you may withdraw consent at any time.

Right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated.

To exercise your rights or for enquiries, contact:

Data Protection Lead

Oldbury MOT Testing Station Limited

Email: OldburyMOT@outlook.com

Phone: 0121 552 1873

We may ask for proof of identity before responding. We aim to reply within one month; complex requests may take longer and we will keep you informed.

Cookies and similar technologies

Our website uses cookies and similar technologies to operate the site and collect analytics. You can manage cookie preferences via your browser settings. We provide a cookie notice on the website explaining categories of cookies used (essential, analytics, marketing) and how to opt out.

Marketing communications

We will only send direct marketing communications (email/SMS) where you have opted in or where we have another lawful basis. You can opt out at any time by following the unsubscribe link in communications or contacting us. For transactional messages related to bookings or safety we may contact you without consent where necessary.

Children

Our services are not directed at children. We do not knowingly collect personal data from children under 16. If you believe we have collected such data, contact us and we will take steps to delete it.

Automated decision-making and profiling

We do not carry out automated decision-making that produces legal or similarly significant effects. If we introduce profiling or automated decisions in future, we will notify you and provide safeguards.

Changes to this policy

We may update this policy from time to time. The date of the latest revision will be shown at the top. Significant changes will be notified where appropriate.

Contact and complaints

For questions, requests or concerns contact:

Data Protection Lead

Oldbury MOT Testing Station Limited

Email: OldburyMOT@outlook.com

Phone: 0121 552 1873

Address: Unit 1, bridge street, oldbury, B69 4BT

If you are unhappy with our response you can complain to the Information Commissioner’s Office:

ICO Helpline: 0303 123 1113

Website: https://ico.org.uk