Legal

Privacy & cookie policy

Last updated: 18 October 2026.

This policy explains how Lee’s Auto Mechanics trading as West Wales Recovery (“West Wales Recovery”, “we”, “us”) collects and uses personal information when you use this website, contact us, or use our recovery and transport services. It also explains how we use cookies, and your rights under UK data protection law - the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

Who we are

Lee’s Auto Mechanics trading as West Wales Recovery is the “controller” of your personal information, which means we decide how and why it’s used.

• Address: Hafan Gwyn, Tremain, Cardigan, Ceredigion, SA43 1SQ
• Email: westwalesrecovery@gmail.com
• Phone: 07961961623

We’re a small business and aren’t required to appoint a data protection officer. Please send any question about this policy or your information to the contact details above.

What we collect

When you use the contact form

• Your name, phone number and email address
• The service you need, collection and delivery locations, and your message

When you call, text, email or message us on WhatsApp

• Your name, phone number and email address
• Where you are - including a live or pinned location if you share one on WhatsApp
• Details of your vehicle (make, model, registration and condition), where it needs to go, and what has happened

When we carry out a job

• The job details: date, time, pick-up and drop-off addresses, and the vehicle or machinery moved
• Invoices and payment records. If you pay by card, the payment is handled by our card payment provider; we don’t keep your full card details

When you browse this website

• Technical information needed to deliver the site securely - such as your IP address, browser and device type, and the pages requested - processed by our hosting and security provider, Cloudflare
• On the contact page, signals collected by Cloudflare Turnstile to check you’re not a bot
• Only if you accept analytics cookies: Google Analytics information about how you use the site - pages visited, how you arrived, your device and browser, and an approximate location (such as town or country) worked out from your IP address. Google Analytics doesn’t store your IP address

Sensitive information

We don’t ask for sensitive (“special category”) information, such as health details. If you tell us something like this - for example, that someone has been hurt in an accident - we’ll only use it where needed to keep people safe, such as calling the emergency services.

Children

Our services are for adults. We don’t knowingly collect information from children through this website.

How we use it, and our lawful basis

UK GDPR requires a “lawful basis” for each way we use your information:

Where we rely on legitimate interests, we’ve balanced them against your rights and interests. You can object to this use at any time (see Your rights).

We need your contact details, location and vehicle details to help you. If you don’t give them to us, we may not be able to carry out the job.

We never sell your information, we don’t use it for marketing, and we don’t make decisions about you based solely on automated processing (including profiling).

Who we share it with

Service providers working on our behalf

These companies process information only on our instructions, under contracts that require them to keep it secure:

• Cloudflare, Inc. - website hosting, security and Turnstile spam protection on the contact form
• Postmark (ActiveCampaign, LLC) - delivers contact form messages to our inbox
• Google - our email provider (Gmail) and, only if you accept analytics cookies, Google Analytics

Others

• WhatsApp (Meta) - if you choose to message us on WhatsApp, WhatsApp’s own privacy policy also applies to how it handles your messages
• The garage, workshop or person you ask us to take your vehicle to, so they can receive it
• Our accountant and HM Revenue & Customs, for tax and accounting
• Insurers, the police, the DVLA or other authorities - where the law requires it, to help with an insurance claim you’ve asked us to support, or to protect our legal rights
• A buyer of our business, if it’s ever sold or restructured, who would have to protect your information in the same way

Transfers outside the UK

Cloudflare, Postmark, Google and Meta may process information outside the UK, including in the United States. When they do, the transfer is protected by the UK–US data bridge (the UK Extension to the EU–US Data Privacy Framework) where the provider is certified, or by the International Data Transfer Agreement or Addendum approved by the Information Commissioner.

How long we keep it

After that we delete it or make it anonymous. We may keep information for longer only if we need it for an ongoing complaint, claim or legal matter.

Keeping it safe

The whole website is served over an encrypted (HTTPS) connection, access to your information is limited to the people who need it to do the job, and we use reputable providers with strong security. No method of sending information over the internet is completely secure, but we take reasonable steps to protect it and would tell you and the Information Commissioner about a serious breach where the law requires it.

Your rights

You have the right to:

• Access - ask for a copy of the information we hold about you
• Rectification - have inaccurate or incomplete information corrected
• Erasure - ask us to delete your information
• Restriction - ask us to limit how we use it
• Portability - receive information you gave us in a commonly used format, or have it sent to someone else
• Object - object to us using it on the basis of legitimate interests
• Withdraw consent - at any time, for analytics cookies, using “Cookie settings” at the bottom of every page. This doesn’t affect anything done before you withdrew it

Some rights only apply in certain circumstances - for example, we have to keep job and payment records for tax purposes even if you ask us to delete them. To make a request, email westwalesrecovery@gmail.com or call 07961961623. It’s free, and we’ll respond within one month (we’ll tell you if a complex request needs up to two more months). We may need to confirm your identity first.

Cookies

Cookies are small files stored on your device. Necessary cookies are needed for the site and the contact form to work, so they don’t need your consent. Analytics cookies are only set if you choose “Accept all” or switch analytics on in your cookie settings - until then, Google Analytics isn’t loaded at all.

You can change your choice at any time. You can also block or delete cookies in your browser settings, though blocking necessary cookies may stop the contact form working.

This website links to other sites, such as WhatsApp and the Information Commissioner’s Office. Their own privacy policies apply when you visit them.

Complaints

If you’re unhappy with how we’ve handled your information, please contact us first so we can put it right. We’ll acknowledge your complaint within 30 days and let you know the outcome without undue delay.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:

• Online: ico.org.uk/make-a-complaint
• Phone: 0303 123 1113
• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Changes to this policy

We’ll update this policy if the way we use your information changes. The date at the top shows when it last changed. If you have any questions, contact us at westwalesrecovery@gmail.com.