Privacy Policy Last updated 22 July 2026 Version 1.0
How we handle your information
Applies to carsserviceonline.com and to enquiries made through it
Registered in England and Wales, company number 15131236.
Registered office: 87 Mirador Crescent, Slough SL2 5JZ, England, United Kingdom.
Email [email protected] · Telephone +1 (209) 317-8456
- 01 — What this policy covers
- 02 — Information we collect
- 03 — Why we use it, and our legal basis
- 04 — Mobile information and messaging
- 05 — Cookies and similar technologies
- 06 — Who we share information with
- 07 — International transfers
- 08 — How long we keep information
- 09 — How we protect information
- 10 — Your rights (UK and EU)
- 11 — Your rights (United States)
- 12 — Children
- 13 — Changes to this policy
- 14 — How to contact us
01What this policy covers
This policy explains what personal information CARSERVICEONLINE LTD ("we", "us", "our") collects when you visit carsserviceonline.com, request a pipeline audit, or start a conversation in the chat window on the site. It also explains what we do with that information, who we share it with, and what you can ask us to do about it.
It does not cover the separate written agreement we sign with clients, or the advertising accounts we manage on a client's behalf. Where we manage a client's Google Ads, Local Services Ads or customer records, the client is the data controller for that information and we act as their processor under that agreement.
It also does not cover websites we link to. If you follow a link to Google, to a client's own site, or anywhere else, that site's privacy policy applies.
02Information we collect
Information you give us in the audit request form
When you submit the pipeline audit form, we collect your name, your company name, your trade, your service area, your current monthly advertising spend as a range, and your email address. All of these fields are required to send the request. We do not ask for a telephone number on this website, and the form contains no field for one.
Information you give us in the chat window
The chat window on our site is operated for us by LeadConnector, a product of HighLevel Inc. If you open it and send a message, we receive the content of that message and anything you choose to put in it, together with any name or email address you provide. Please do not send bank details, card numbers, passwords or other sensitive information through the chat window.
Information you give us by email or telephone
If you email us or call the number on our site, we keep a record of the exchange, including your contact details and the substance of what was discussed, so that we can pick the conversation back up.
Information collected automatically
Our hosting provider records standard server logs when a page is requested: the IP address, the date and time, the page requested, the referring page, and the browser and operating system reported by your device. The chat widget collects similar technical information in order to run.
We do not build advertising profiles of visitors to this website, and we do not run behavioural advertising trackers on it.
03Why we use it, and our legal basis
Under the UK GDPR we have to have a lawful basis for each use of your information. Ours are as follows.
- To answer your audit request and prepare the teardown. Legal basis: steps taken at your request before entering into a contract.
- To reply to messages sent through the chat window, by email or by telephone. Legal basis: our legitimate interest in responding to people who contact our business.
- To deliver services to clients and to invoice for them. Legal basis: performance of our contract with the client.
- To send occasional marketing emails about our services. Legal basis: your consent, or our legitimate interest where you are an existing client. Every marketing email carries an unsubscribe link that works.
- To keep the site secure, prevent abuse, and diagnose faults. Legal basis: our legitimate interest in running a functioning, secure website.
- To keep accounting records and meet legal obligations. Legal basis: compliance with a legal obligation.
We do not use automated decision-making or profiling that produces legal effects for you.
04Mobile information and messaging
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
We do not collect telephone numbers through any form on this website. Where a client or contact gives us a mobile number by another route — for example during a call, or in a signed agreement — we use it to contact that person about the work in hand. If we ever send text messages, consent is collected separately and explicitly at that point, message frequency varies, message and data rates may apply, you can reply STOP at any time to stop receiving them, and HELP for assistance.
07International transfers
We are established in the United Kingdom and most of the people who contact us are in the United States, so information routinely moves between the two. Our chat and customer record provider, HighLevel Inc., is based in the United States.
Where we transfer personal information out of the UK, we rely on the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses together with the UK Addendum, as our safeguard. You can ask us for details of the mechanism that applies to a particular transfer.
08How long we keep information
- Audit requests that do not become clients — 24 months from the last contact, then deleted.
- Chat conversations — 24 months from the last message.
- Client records and correspondence — for the life of the engagement and 6 years after it ends, which is the period we need for UK accounting and limitation purposes.
- Accounting and tax records — 6 years from the end of the financial year they relate to, as UK law requires.
- Server logs — kept for a short operational period by our hosting provider and then overwritten.
If you ask us to delete your information sooner, we will, except where we are required to keep a record for the legal reasons above.
09How we protect information
The site is served over HTTPS. Access to enquiry records and client accounts is limited to the people who need it, protected by individual accounts and multi-factor authentication where the provider supports it. We review who has access when someone joins or leaves.
No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of it, and we will tell you directly where the law requires it.
10Your rights (UK and EU)
If you are in the UK or the EU, you have the right to:
- ask what personal information we hold about you and get a copy of it;
- have inaccurate information corrected;
- have information deleted, where we have no continuing reason to hold it;
- restrict how we use your information while a dispute about it is resolved;
- receive information you gave us in a portable, machine-readable format;
- object to our using your information on the basis of legitimate interests;
- object to direct marketing at any time, with no reason given;
- withdraw consent at any time, where we relied on consent.
Write to [email protected] and we will respond within one month. Exercising these rights is free.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or by calling 0303 123 1113. We would rather you came to us first so we can put it right.
11Your rights (United States)
If you live in California, or in another state with comparable privacy legislation, you have the right to know what personal information we have collected about you and why, to request a copy of it, to ask us to correct it, and to ask us to delete it. You also have the right not to be treated differently for exercising any of these rights — we will not refuse to work with you, change our prices, or reduce the quality of our service because you asked.
Californian law also gives you the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined by the CCPA and CPRA, so there is nothing to opt out of. If that ever changes, this policy will change first and we will provide a working opt-out mechanism.
To exercise any of these rights, email [email protected] with enough detail for us to identify your records. We may ask you to confirm your identity before we act, and we will respond within 45 days.
12Children
This is a business-to-business website and our services are sold to companies. It is not directed at children and we do not knowingly collect information from anyone under 16. If you believe a child has sent us personal information, tell us and we will delete it.
13Changes to this policy
When this policy changes we update the date at the top of the page and raise the version number. Where a change materially affects how we use information you have already given us, we will tell the people affected by email rather than relying on you to check this page.
14How to contact us
Questions about this policy, or any request about your information, go to:
CARSERVICEONLINE LTD
87 Mirador Crescent, Slough SL2 5JZ, England, United Kingdom
[email protected]
+1 (209) 317-8456
We have not appointed a Data Protection Officer, as we are not required to. Privacy enquiries are handled by the company's directors at the address above.