My Favourite Garage App Privacy Policy

Last Updated: 05/05/2026

1. Introduction

This Privacy Policy explains how Vehicle Management Systems Limited (“VMS”, “we”, “us”, “our”) collects, uses, stores, shares and protects your personal data when you use the My Favourite Garage App, website, platform and related services.

This Privacy Policy applies to end users of the My Favourite Garage App, including users who create an account directly and users whose details are added, created or imported by a garage.

By creating an account, accepting an invitation, logging in to the App, or continuing to use the App, you acknowledge that you have read this Privacy Policy.

2. Important Information

2.1 Purpose of this Privacy Policy

This Privacy Policy is intended to give you information about how we process your personal data, including data provided when you create an account, manage vehicles, request bookings, receive reminders, receive messages from your garage, or otherwise use the App.

This Privacy Policy should be read together with any privacy notice provided by your selected garage, as your garage may process your personal data separately as an independent business.

2.2 Account Creation by Garages

Your garage may create an account for you or import your details into the platform from their existing systems. This may happen where you are already a customer of the garage, where the garage is moving customer and vehicle records onto the My Favourite Garage platform, or where the garage creates a record to manage your vehicle or booking.

Where this happens:

• You will be notified and invited to use the App;
• You must review and accept this Privacy Policy when you first log in before using the App;
• Your details may be stored and used by your garage for their legitimate business purposes, including managing their relationship with you and your vehicle.

Your garage may use the platform to remind you of upcoming vehicle dates, contact you about your vehicle, manage bookings, provide services you request, or send other communications connected with their relationship with you.

If you do not wish to use the App or remain on the platform, you can decline the invitation or request removal of your account using the link provided.

You may request account removal using the link provided in your invitation, where available, by contacting your garage, or by contacting us at [email protected].

Where your details are imported by a garage, we aim to provide privacy information when we first contact you about the App or otherwise within the timeframe required by data protection law.

2.3 Children

The App is not intended for children under the age of 16. We do not knowingly collect personal data relating to children.

3. Data Controllers

3.1 Vehicle Management Systems Limited

Vehicle Management Systems Limited is the data controller responsible for the My Favourite Garage platform and App, including how your personal data is processed within the App.

3.2 Your Garage

Your selected garage is a separate and independent data controller for the personal data they collect from you directly, upload into the platform, import into the platform, or use to manage their customer relationship with you.

Garages determine the communications they send to you. VMS provides the platform through which these communications may be delivered.

If you have questions about how your garage uses your personal data, you should contact your garage directly.

Your garage is responsible for providing its own privacy information where required by law.

4. Contact Details

Vehicle Management Systems Limited
Company number: 09690853
1–2 The Apple Store
Far Peak
Northleach
Glos
England
GL54 3JL

Email: [email protected]

You have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues: www.ico.org.uk.

We would appreciate the opportunity to deal with your concerns before you contact the ICO, so please contact us first where possible.

We have appointed a data protection contact responsible for overseeing questions relating to this Privacy Policy and data protection matters. If you have any questions about how we handle your personal data, or wish to raise a data protection concern, you can contact us at: [email protected]

5. The Data We Collect

Personal data means any information about an individual from which that person can be identified. It does not include anonymous data where identity has been permanently removed.

5.1 Identity and Contact Data

• Name;
• Email address;
• Phone number;
• Account details;
• Preferred contact details, which may differ from your main account details.

5.2 Vehicle Data

• Vehicle registration number (VRM);
• Vehicle make, model and related vehicle information;
• MOT due date;
• Service due date;
• Vehicle records manually entered by you or your garage;
• Vehicle records imported by your garage from their existing systems.

Vehicle data may be entered manually by you, entered manually by your garage, imported directly by your garage, or obtained using the VRM through trusted vehicle data providers.

5.3 Booking Data

• Booking requests;
• Services requested;
• Shopping basket contents;
• Notes and preferences you provide;
• Preferred booking dates or times;
• Preferred contact details for a booking;
• Garage responses, amendments, confirmations or declines;
• Booking status and booking history.

5.4 Communications Data

• Service reminders;
• MOT reminders;
• Booking updates;
• Account notifications;
• Marketing communications;
• Records of messages sent through the platform.

5.5 Technical Data

• IP address;
• Device information;
• Operating system information;
• App version;
• Server logs;
• Push notification tokens handled through Firebase;
• Security, diagnostic and error information;
• Authentication and login data, including encrypted password credentials or authentication tokens.

5.6 Location Data

• Postcode, if previously provided by you or your garage.

We do not actively collect precise location data through the App.

5.7 Usage Data

• Information about how you use the App;
• Feature usage;
• App performance information;
• Internal usage statistics, where collected by us.

We may collect limited internal usage data to improve the performance and functionality of the App. We do not use third-party analytics services within the App.

5.8 Cookies and Tracking Technologies

Our web platform does not use cookies or similar tracking technologies for advertising or third-party analytics. Some essential technologies may be used where necessary for security, authentication, service delivery or platform operation.

5.9 Marketing and Communications Preferences

• Your communication preferences;
• Your marketing preferences;
• Your opt-in or opt-out status.

5.10 Aggregated and Anonymised Data

We may use aggregated or anonymised data for analytical, reporting, business and service improvement purposes. Aggregated or anonymised data does not directly identify you and is not treated as personal data under data protection law.

If we combine aggregated or anonymised data with personal data so that you can be identified, we will treat the combined data as personal data and use it in accordance with this Privacy Policy.

5.11 Special Category Data

We do not intentionally collect special categories of personal data about you. This includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health data, genetic data or biometric data. If you include such information in notes or messages, we will only process it as part of providing the relevant App feature.

We do not intentionally collect information about criminal convictions or offences.

5.12 If You Fail to Provide Personal Data

Where we need to collect personal data to provide App services and you do not provide that data, we may not be able to provide certain features, manage your account, send reminders, or process booking requests.

6. How We Collect Your Data

6.1 Data Provided by You

You may provide personal data when you create an account, log in, add a vehicle, update vehicle details, request a booking, add notes, update preferences, contact your garage, or contact us.

6.2 Data Provided by Your Garage

Your garage may provide personal data about you and your vehicle by entering it manually, creating an account for you, creating a vehicle record, creating a booking, or importing data from their existing garage management systems.

6.3 Data from Third Parties

We may obtain vehicle information from trusted third-party providers, such as Vehicle Data Global Ltd, using the vehicle registration (VRM) you or your garage provide. This is done under our legitimate interests to provide accurate vehicle-related services.

7. How We Use Your Data

We use your personal data for the following purposes:

• To register you as a user and manage your account;
• To provide access to the App and its features;
• To allow you and your garage to manage vehicles;
• To send reminders, including MOT and service reminders;
• To process booking requests and manage bookings;
• To communicate with you regarding your account or bookings;
• To allow garages to communicate with you;
• To improve the App and its functionality;
• To maintain platform security and integrity;
• To comply with legal obligations.

7.1 Change of Purpose

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible reason. If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so.

8. Lawful Basis for Processing

9. Communications and Marketing

You may receive:

• Service reminders, e.g. MOT, servicing;
• Booking updates;
• Account notifications;
• Marketing communications.

Communications may be sent by VMS or your garage. You can opt out of marketing communications at any time using the unsubscribe link or your app settings.

Marketing communications will only be sent where permitted by applicable law. This may include where you have consented, where there is an existing customer relationship and the communication relates to similar goods or services, or where another lawful basis applies.

Opting out of marketing communications will not stop you receiving essential service, account, booking or safety-related communications.

10. Booking Services

10.1 On-Platform Bookings

On-platform bookings are handled within the App and represent booking requests which are confirmed, amended or declined by the garage.

10.2 Off-Platform Bookings

Off-platform bookings may be handled by third-party systems used by your garage, including MAM Software / KiS. Where this applies, your data may be shared with those systems to complete your booking.

11. Data Sharing

We may share your personal data with:

• Your selected garage;
• Service providers who support the platform:
• DigitalOcean - hosting infrastructure;
• Cloudflare - security, caching and content delivery;
• Mailgun - email delivery;
• Google Firebase - push notifications;
• Vehicle Data Global Ltd - vehicle data lookup and enrichment;
• Apple App Store and Google Play Store - app distribution and platform services;
• Third-party systems used for booking integrations:
• MAM Software / KiS - off-platform booking integrations;
• Professional advisers and regulators where required.

We require all third parties to respect the security of your personal data and to process it in accordance with applicable data protection laws.

12. International Transfers

Your personal data is primarily processed within the United Kingdom and the European Economic Area (EEA).

Where your personal data is transferred outside of these regions, we ensure appropriate safeguards are in place in accordance with data protection laws.

Some service providers may process personal data outside the UK or EEA. Where this happens, we rely on appropriate safeguards such as adequacy regulations, approved contractual clauses, or other lawful transfer mechanisms.

You can contact us for more information about the safeguards used for international transfers.

13. Data Security

We have put in place appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, accessed, altered or disclosed in an unauthorised way.

Access to your personal data is limited to those employees, agents, contractors and third parties who have a business need to know.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with our obligations under UK GDPR.

14. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including satisfying legal, accounting or reporting requirements.

In general, personal data may be retained for up to 6 years where required for legal or compliance purposes.

We determine retention periods based on the nature, sensitivity and purpose of the data, and the potential risk of harm from unauthorised use or disclosure.

Where you request deletion, we may retain limited records where necessary for legal, security, audit, dispute resolution, or compliance purposes.

15. Your Legal Rights

You have the right to:

• Request access to your personal data;
• Request correction of your personal data;
• Request erasure of your personal data;
• Object to processing of your personal data;
• Request restriction of processing;
• Request transfer of your personal data;
• Withdraw consent at any time where consent is relied upon.

You have the right to object to processing based on our legitimate interests, including certain reminder, marketing, or usage-related processing. Where you object, we will consider your request and stop processing unless we have compelling legitimate grounds to continue.

To protect your personal data, we may need to verify your identity before responding to a rights request. Verification may include confirming access to the email address registered to your account or asking for additional information where reasonably necessary. We will not process requests where we cannot reasonably verify that the request has been made by you or someone authorised to act on your behalf.

We usually respond to rights requests within one month, although this may be extended where permitted by law for complex or multiple requests.

Where you exercise your right to data portability, and where that right applies, we will provide the relevant personal data in a structured, commonly used and machine-readable format, such as JSON.

To exercise any of your rights, please contact us at [email protected].

16. Automated Decision Making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Where appropriate, we will notify you of significant changes and may require you to accept the updated version before continuing to use the App.