Privacy Policy

Section 01

Company & Data Controller Information

This Privacy Policy outlines how MJC Auto Recovery Ltd ("we", "us", "our") collects, processes, stores, and protects personal data obtained from customers, motorists, and visitors ("you", "your") interacting with our platform or utilising our roadside vehicle assistance, vehicle recovery, or transport services across London and the Home Counties.

We operate as the primary Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our registered company details are as follows:

• Legal Entity: MJC Auto Recovery Ltd
• Company Registration Number: 15926631 (Registered in England and Wales)
• Registered Office Address: 159 Kilburn High Road, London, NW6 7HU
• Data Privacy Enquiries: Managed via the secure digital contact form located on our official website contact page.

Section 02

The Categories of Personal Data We Process

To execute rapid-deployment vehicle recovery and manage breakdown services safely, we process specific technical, situational, and personal data. We collect the following categories:

• Identity Data: Full name, organisational details, or company name (for commercial fleet or auction transport bookings).
• Contact Data: Inbound telephone numbers and mobile contact details used during dispatch routing.
• Vehicle Logistics Data: Vehicle Registration Marks (VRM), make, model, structural modifications, wheel condition, transmission configuration, and key accessibility states.
• Precise Roadside Geolocation Data: Real-time location data shared by you explicitly via secure messaging platforms or alphanumeric location strings (such as what3words) to facilitate exact vehicle positioning across unlit highways, roundabouts, or rural roads.
• Visual Evidence Records: Photographic imagery captured on-site by our field technicians via secure business communication logs, documenting pre-existing bodywork conditions, loading security, or auction yard releases.

Section 03

Data Collection Methods & Operational Processing

We operate an on-demand, non-subscription service with a minimal data approach. We enforce strict technical limitations across our telephony and operational infrastructure:

• Telephony & Audio Limits: We operate our emergency response and call routing networks over traditional cellular networks. We do not utilise any cloud-based Voice-over-IP (VoIP) capture networks, and we never record, stream, or log customer voice calls.
• Strict Geolocation Limits: We never background-track or continuously harvest user locations. Precise vehicle positioning data is only captured when you manually choose to submit a location marker via a secure third-party platform. No other location data is collected.
• Field Photography Processing: All visual evidence, damage audit records, and scene condition photographs taken by our operators are stored within secure, encrypted business communication logs. This isolates the media files from personal storage and binds them to your active booking record.

Section 04

Legal Grounds & Data Mapping

Under the UK GDPR, we must establish a legitimate legal reason for every data point we process. The data mapping table below outlines exactly why and how your information flows through our business:

Section 05

Data Sharing and Third-Party Provisions

We do not lease, trade, sell, or monetise customer data. Your information is only shared with third-party processors when strictly necessary to fulfil vehicle transport directives or protect our operations:

• Independent Operators: Secure routing data is shared with our dedicated, vetted breakdown recovery operators to ensure swift roadside arrival.
• Auction House Hand-overs: Essential lot information or release markers are transmitted to yard marshals at logistics centres (including Copart, BCA, and John Pye) to satisfy gate protocols.
• Regulatory and Legal Mandates: Data may be disclosed to the police, highways authorities, or underwriting firms where required to maintain road safety or confirm structural accident data.

Section 06

Technical Security & Data Retention

We employ commercial-grade data encryption to protect your booking records and operational data from breach, leakage, or unauthorised access.

Retention Period: In alignment with UK civil liability frameworks, statutory HMRC bookkeeping rules, and insurance validation requirements, all booking records, vehicle data logs, and visual evidence photography are retained for a strict period of six (6) years from the date of job completion. Once this period has elapsed, all corresponding records are permanently deleted from our systems.

Section 07

Your Rights Under UK Data Protection Law

As a resident of the United Kingdom, you hold clear, enforceable statutory rights regarding the collection and management of your personal data. You may exercise any of the following rights at any time:

• The Right of Access: You may request a complete copy of all personal data, booking records, and associated evidence files we hold relating to you.
• The Right to Rectification: You may require us to correct any inaccurate vehicle details, names, or contact records without undue delay.
• The Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer required for active contract execution, insurance liability purposes, or statutory tax obligations.
• The Right to Restrict Processing: You may request that we pause active data processing during an independent regulatory review or dispute.
• The Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, and machine-readable format, or transfer it directly to another controller where technically feasible.
• The Right to Object: You may object at any time to the processing of your personal data where we rely on legitimate interests as our legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defence of legal claims.

If you believe our data handling practices are in breach of UK GDPR, you have the right to lodge a formal complaint with the independent supervisory authority: