Privacy Notice

SlickSkins is a vehicle styling workshop based at Unit C4, Uskvale Park, Pontypool NP4 0JL. In this notice "we", "us" and "SlickSkins" refer to the SlickSkins business operating from that address. We are the data controller for the personal information described below.

You can reach us by email at info@slickskins.co.uk or by phone on 07521 916 952.

We collect information that you give us directly when you:

• Submit our contact form, request a quote, or message us about a booking. This includes your name, email address, phone number, vehicle registration, vehicle make and model, the service you are interested in, and any free-text details you provide.
• Use the customer portal we send with your quote. This includes the actions you take on the portal (accepting a quote, marking a deposit as paid, declining, or sending us a message), and any bank reference you supply when paying a deposit.
• Speak to us by phone, WhatsApp, Instagram, Facebook, or in person. We may take notes of those conversations and link them to your customer record so we have context for future work.

We also collect a small amount of technical information automatically:

• Anonymised pageview data through a privacy-friendly, cookie-free beacon. We log the page visited, the referring page, your screen width and a daily-rotating hash that lets us count unique visitors without identifying you. We do not set advertising or tracking cookies, and we do not share this data with third parties.
• Server logs (IP address, request time, user agent) generated by our hosting provider. These are retained briefly for security and debugging.

We do not knowingly collect data from anyone under 18. If you believe we hold information about a minor, please contact us so we can remove it.

Under UK GDPR we are required to have a lawful basis for processing your data. Ours are:

• Performance of a contract - to respond to your quote request, schedule your booking, take a deposit, send you booking confirmations and post-job follow-ups, and complete the service you booked.
• Legitimate interests - to keep a record of your past jobs and vehicles so we can serve you better next time, to improve our services using anonymised analytics, to investigate and resolve complaints, and to defend our legal rights.
• Legal obligation - to keep accounting and tax records of work we have invoiced.
• Consent - if we ever send you marketing emails unrelated to a job you have booked, we will ask for your consent first and you can withdraw that consent at any time.

We do not sell your personal data. We share it only with the suppliers we rely on to run the business, and only to the extent they need it to do their job. Those suppliers are:

• Vercel Inc. - hosts the SlickSkins website and customer portal.
• Supabase Inc. - hosts our customer database. Customer records, inquiries, jobs, and message history are stored here. Hosted in EU regions.
• Resend Inc. - sends transactional emails to you (quotes, booking confirmations, follow-ups, the day-before reminder).
• Web3Forms - acts as a fallback delivery channel for contact-form submissions if our database write is unavailable.
• Our accountant - sees billing-related data only, for HMRC reporting.

Each of these suppliers is contractually bound to protect your data and only use it on our instructions. We do not share your data with advertisers, marketing networks, or social platforms.

Some of our suppliers (Vercel, Resend) are US-headquartered. Customer-database content is stored in EU regions. Where data is transferred outside the UK, we rely on the supplier's implementation of UK Standard Contractual Clauses or an adequacy decision to keep your data protected.

We retain personal data only for as long as we need it:

• Active customers - for as long as you have an ongoing or recent (within 24 months) job with us.
• Past customers - up to 7 years after your last job. This matches HMRC's requirement to retain accounting records.
• Inquiries that did not turn into a job - up to 12 months from the date of the inquiry, then deleted.
• Anonymised pageview analytics - aggregated, indefinitely.

You can ask us to delete your data sooner. See "Your rights" below.

Under UK GDPR you have the right to:

• Access - request a copy of the personal data we hold about you.
• Rectify - ask us to correct anything that is wrong.
• Erase - ask us to delete your data, subject to our legal obligation to keep accounting records.
• Restrict or object - tell us to stop using your data in a particular way.
• Portability - ask us to send your data to another provider in a machine-readable format.
• Withdraw consent - if we are processing on the basis of your consent, withdraw it at any time.

To exercise any of these rights, email info@slickskins.co.uk. We will respond within one calendar month.

The SlickSkins website does not set advertising or analytics cookies. The only client-side tracking we run is a cookie-free pageview beacon which lets us count visits without identifying you. See our Cookie Policy for details.

Your data is encrypted in transit (HTTPS) and at rest in our hosting provider's infrastructure. Access to the customer database and admin tools is restricted to the SlickSkins owner via authenticated login. We review who has access on an ongoing basis and rotate credentials when devices change.

If you are unhappy with how we have handled your personal data, please tell us first by emailing info@slickskins.co.uk so we can put it right.

You also have the right to complain to the UK Information Commissioner's Office (ICO) at any time. The ICO can be reached at ico.org.uk/make-a-complaint or on 0303 123 1113.

We may update this notice from time to time, for example when we change the suppliers we work with or add new features. The "Last updated" date at the top of the page reflects the most recent change. For material changes that affect what we collect or how we use it, we will email customers we already work with.

SlickSkins
Unit C4, Uskvale Park, Pontypool NP4 0JL
info@slickskins.co.uk
07521 916 952