Privacy Policy.

01. Who we are

Bright Headlight provides headlight repair and servicing. This notice explains how we handle personal information when you visit our website, contact us, request a quotation or use our services.

Bright Headlight is responsible for the personal information it collects and uses for these purposes (the “data controller”).

For privacy enquiries or to exercise your rights, please contact us using the email address above.

This notice covers our handling of your information. Facebook, WhatsApp and other external services also handle information under their own privacy notices.

02. Information we collect

Depending on your interaction with us, we may collect:

• Contact details: your name, email address and telephone number.
• Enquiry details: your message, requested service and correspondence.
• Vehicle information: make, model, registration number where relevant, headlight faults and photographs you provide.
• Service records: quotations, agreed work, appointments, repair correspondence and invoices.
• Billing information: billing details and payment records where needed to administer a service.
• Technical information: your IP address, browser information, requested pages and access times, where recorded by our hosting or security systems.
• Privacy records: requests, complaints and permissions you give us.

Our contact form asks for your name, email address and subject. The message field is optional. Information needed to respond to an enquiry or carry out a repair must be provided if you want us to handle that request. Without it, we may be unable to provide a quotation or service.

Please do not send sensitive personal information or information about other people unless it is necessary and you are entitled to provide it.

03. How we obtain information

We receive information directly from you through our contact form, email, telephone, WhatsApp, Facebook and conversations about your vehicle or repair.

We may also receive it from someone acting on your behalf, such as a person arranging a repair with your permission. Technical information may be generated automatically when your browser communicates with our website.

04. Why we use your information

We process personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended.

Quotations, bookings and repairs

We use relevant contact and vehicle details to take steps at your request before entering into a contract and to perform our contract with you.

General enquiries and correspondence

Where a request is not part of entering into or performing a contract, we rely on our legitimate interests in responding to enquiries and running our business.

Security, service records and disputes

We rely on our legitimate interests in protecting our website, preventing misuse, maintaining appropriate records and establishing, exercising or defending legal claims. We consider the impact on your rights and only use information that is proportionate to these purposes.

Accounting and legal responsibilities

We process information where necessary to meet applicable legal obligations, including relevant tax, accounting and data protection requirements.

Publication of identifiable photographs

Where we wish to publish repair photographs that identify you, we will seek your consent. You can refuse without affecting your repair service.

Cookies and similar technologies

Where consent is legally required, we will seek it before using the relevant technology.

We will explain any materially different purpose and the applicable lawful basis before using your information for that purpose.

05. Vehicle photographs

We may use photographs to assess a fault, discuss a quotation and document repair work. Those uses follow the contractual or legitimate-interest purposes explained above.

Publishing photographs on our website or social media is a separate purpose. Before publication, we will remove or obscure identifying details, such as registration plates and visible personal documents, or obtain consent where the image remains identifiable.

If you withdraw consent to publication, contact us using the details above. We will stop future use based on that consent and remove the relevant material from channels we control, subject to any lawful reason for retaining a separate internal record. We may be unable to remove copies independently shared by others.

06. Who may receive information

We share information only where necessary for the purposes in this notice. Recipients may include:

• Website hosting, maintenance, security and IT support providers.
• Email and communication providers used to handle your enquiry.
• Accountants, professional advisers and insurers where relevant.
• Public authorities where disclosure is legally required.
• Other parties where necessary to establish, exercise or defend legal claims.

Service providers acting on our instructions must be subject to appropriate data protection arrangements.

If you choose to contact us through Facebook or WhatsApp, the relevant platform also processes information under its own terms and privacy notice. You can contact us by email or telephone instead.

07. International transfers

Website hosting, email and messaging services may involve processing outside the United Kingdom.

Where we make a restricted international transfer, we must ensure a lawful transfer mechanism is in place. This may be UK adequacy regulations or appropriate safeguards, such as approved contractual protections, together with any required assessment.

Please contact us for information about transfers relevant to your data and how to obtain details or copies of applicable safeguards.

08. How long we keep information

We keep personal information only for as long as necessary for the purpose for which it was collected.

• Enquiries and quotations: until the enquiry and reasonable follow-up are complete, unless information is needed for subsequent work or a dispute.
• Customer and repair records: for the period needed to administer the service, handle follow-up issues and meet applicable legal or claims-related requirements.
• Invoices and accounting records: for the period required by the tax and accounting rules applicable to our business.
• Technical and security records: for the period reasonably needed to maintain and investigate website security.
• Publication permissions and photographs: while the approved use remains relevant, with any necessary evidence of permission retained to demonstrate compliance.
• Privacy requests and complaints: for the period needed to handle the matter and demonstrate how it was resolved.

When deciding retention periods, we consider the nature of the information, the purpose, legal requirements and whether an unresolved claim or complaint exists. Information that is no longer needed is deleted or anonymised.

09. Cookies and similar technologies

Cookies and similar technologies may store or access information on your device. Their use is governed by the applicable UK privacy and electronic communications rules.

Where consent is required, the relevant technology must not operate until you have agreed. Any consent request must explain its purpose and allow you to refuse or subsequently withdraw consent.

This privacy policy does not itself obtain cookie consent. Details of any consent-based technologies used on the website must be provided through the relevant cookie information and controls.

You can also manage cookies through your browser. Blocking technologies needed for a requested function may affect how that function works.

10. Keeping information secure

We use appropriate technical and organisational measures to protect personal information, taking account of the nature of the information and the risks. Access is limited to people and providers who need it for the purposes described in this notice.

No online transmission or storage method is completely secure. Please avoid sending unnecessary sensitive information in messages or photographs.

11. Your rights

Depending on the circumstances and our lawful basis, you may have the right to:

• Obtain access to your personal information and a copy of it.
• Have inaccurate information corrected.
• Request deletion of information.
• Restrict how information is used.
• Receive information in a portable format where the legal conditions apply.
• Withdraw consent at any time where processing relies on consent. This does not affect the lawfulness of processing before withdrawal.
• Complain to the Information Commissioner’s Office (ICO).

Contact rwcoopers@hotmail.com to make a request. We may need information to verify your identity. Requests are normally free, and we normally respond within one calendar month, subject to the applicable rules on identification, clarification and extensions. We will explain any lawful extension or refusal.

12. Privacy complaints

If you are unhappy with how we handle your information, email rwcoopers@hotmail.com and describe your concern. Please include enough detail for us to investigate, but avoid unnecessary personal information.

We will acknowledge a data protection complaint within 30 days of receiving it, investigate without undue delay, keep you informed and tell you the outcome.

You also have the right to complain to the UK’s supervisory authority:

13. Changes to this notice

We may update this notice when our services, processing practices or legal requirements change. The latest version will be available on our website with an updated date. Where required, we will bring significant changes to your attention.