Privacy Policy

1. Who we are

Windscreen Supermarket ("we", "us") runs a marketplace that connects vehicle owners with independent vehicle-glass businesses ("fitters"), through our websites (including windscreensupermarket.co.uk and windscreensupermarket.com) and our dashboard. This policy explains what personal information we collect, why, who we share it with, how long we keep it, and your rights.

The controller of your personal information is Lloyd Marriott trading as Windscreen Supermarket, a sole trader established in England and Wales, of. You can contact us about anything in this policy at support@windscreensupermarket.co.uk.

2. What we collect

• Your quote request and booking: your name, email address, phone number,

the address where the work is to be done, your vehicle's registration or VIN and its details, a description of the damage, and any photos you choose to upload.

• Your account: your sign-in details (passwords are stored in scrambled

form by our sign-in provider; we never see them), or your Google account email if you sign in with Google, and the language you use.

• Messages: what you and the fitter write to each other through the

platform, and your messages to our support team.

• Payments: the amount, the date and whether the payment succeeded. Card

details are entered with Stripe and handled by Stripe; we never see your full card number.

• Reviews you leave, and your replies to messages and cases.
• How you use the platform: pages visited and actions in the quote form,

your device and browser, and your IP address and approximate location — used for security, to prevent fraud and abuse, and to improve the service.

• If you are a fitter: your business details, VAT status and VAT number,

service area, prices, invoices and statements, the jobs you quote for and carry out, and the details you give Stripe to receive payments (Stripe carries out its own identity checks).

3. How we use it, and why we are allowed to

• To provide the service you ask for (performing our contract with you):

sending your job to fitters who cover your area so they can quote, taking your booking, arranging payment, sending your invoice, handling cancellations, refunds and cases, and sending you messages about your quotes and bookings by email and, where available, by text message or app notification.

• To meet our legal obligations: keeping booking, payment and invoice

records for tax and accounting law, and answering lawful requests from authorities.

• For our legitimate interests, where these are not outweighed by your

rights: keeping the platform secure, preventing fraud, abuse and fake reviews, settling disputes, understanding how the platform is used so we can improve it, and improving our vehicle and part information.

• With your consent: marketing messages, and analytics cookies where the

law requires consent. You can withdraw consent at any time.

Fitters see the details of your job (vehicle, the glass needed, the area and your first name) so they can quote. Your full address and contact details are shared only with the fitter you book with.

We do not sell your personal information. We do not make decisions about you based only on automated processing that have legal or similarly significant effects, except that cancellation refunds are worked out automatically from the published cancellation schedule; you can ask our team to review any such result.

4. Who we share it with

• The fitters you ask for quotes and the fitter you book with, as

described above. A fitter you book with becomes responsible, as a separate controller, for how it uses your information to carry out the work.

• Stripe, which processes payments and pays fitters.
• Service providers that run parts of the platform for us, only for that

purpose: Supabase (hosting, database and sign-in), Resend (email delivery), Google (maps and address locations, website analytics, automatic translation of messages between you and a fitter who use different languages, and an assistant that answers fitters' questions), Smarty and postcodes.io (address search and locations), Cloudflare (protection against automated abuse), vehicle-data providers that look up a registration or VIN, and the providers that deliver app notifications to your browser or phone.

• Authorities, courts or professional advisers, where the law requires it

or to establish or defend legal claims.

• A buyer of the business, if the business is sold, under the same

protections as this policy.

5. Transfers outside the UK and the EU

Some of these providers are based in, or store information in, other countries, including the United States. Where that happens, the transfer is protected as the law requires — for example by an adequacy decision (such as the EU–US Data Privacy Framework and its UK extension) or by standard contractual clauses approved by the UK or EU authorities.

6. How long we keep it

• Booking, payment and invoice records: for as long as tax and accounting law

requires — in the United Kingdom, six years after the end of the tax year they relate to, and longer in some other countries.

• Your account: while it is open. When you ask us to delete it, we delete or

anonymise your personal information, except what we must keep for the records above or for an open dispute.

• Quote requests that never became a booking, and their photos: for as long

as is reasonably needed to deal with the request and any follow-up and to keep accurate records of the service; we review old requests and delete or anonymise them.

• Security and usage logs: for a limited period, then deleted or anonymised.

7. Your rights

You have the right to ask for a copy of your personal information, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. To use any of these rights, email support@windscreensupermarket.co.uk. We reply within one month (we aim to be much quicker), and we may need to confirm who you are first.

You also have the right to complain to a data protection authority: in the United Kingdom, the Information Commissioner's Office (ico.org.uk); in the EU and EEA, the authority in the country where you live or work. We would appreciate the chance to put things right first.

8. Cookies and similar technology

We use cookies and similar storage that are strictly necessary for signing in, keeping your quote and your choices (such as your country and language), and protecting the platform. We also use Google Analytics to understand how the website is used; it sets its own cookies. We do not use advertising cookies. You can block or delete cookies in your browser settings; blocking the strictly necessary ones may stop parts of the platform working.

9. Children

The platform is for people aged 18 or over. We do not knowingly collect information about children.

10. Changes

We may update this policy. The current version is always on this page, with its date. If a change materially affects how we use your information, we will tell you before it applies.

11. Language

This policy is written in English. Translations are provided to help you read it and may be made with automatic translation tools. If a translation differs from the English, the English version applies, unless the law where you live gives you the right to rely on a version in your own language.