Worthing | Sompting | West Sussex
Privacy Policy
Last Updated: 09/10/2026
This privacy policy explains how Cedar Garage Limited collects, uses and protects your personal data when you visit www.cedargarage.co.uk, contact us or book your vehicle in with us. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended by the Data (Use and Access) Act 2025.
Jump to a section
- 1. Who we are
- 2. The personal data we collect
- 3. How we use your data and our lawful basis
- 4. Cookies and tracking technologies
- 5. Who we share your data with
- 6. How long we keep your data
- 7. How we keep your data secure
- 8. Your rights
- 9. Complaints
- 10. Links to other websites
- 11. Changes to this policy
1. Who we are
Cedar Garage Limited is the data controller for the personal data described in this policy. This means we decide how and why your data is used.
- Company: Cedar Garage Limited, registered in England and Wales, company number 05318711
- Registered office: 307 Tarring Road, Worthing, West Sussex, BN11 5JG
- Worthing site: Cedar Garage, 307 Tarring Road, Worthing, West Sussex, BN11 5JG. Telephone 01903 248967
- Sompting site: Cedar Garage German Car Specialists, Unit 1, Rectory Farm Road, Sompting, West Sussex, BN15 0DP. Telephone 01903 830303
- Email: info@cedargarage.co.uk
We are not required to appoint a Data Protection Officer. Questions about this policy or your data can be sent to the email address above, marked "Data Protection".
Website providers
| Provider | Role |
|---|---|
| Scorpio Digital | Designs, maintains and monitors this website on our behalf |
| GoDaddy (Managed WordPress hosting) | Hosts the website and its database |
| WordPress | The content management system the website runs on |
| Elegant Themes (Divi) | The website theme and page builder, including our contact forms |
Scorpio Digital and GoDaddy act as data processors. They only handle personal data on our instructions and under a written agreement.
2. The personal data we collect
We only collect the data we need to deal with your enquiry, look after your vehicle and run our website.
| Category | Examples | How we get it |
|---|---|---|
| Identity and contact details | Name, house number, postcode, address, mobile number, email address | Contact forms, online booking, phone, email or in person |
| Vehicle details | Registration, make and model, mileage, MOT and service history, work carried out | You, our online booking system, DVSA and DVLA vehicle lookups |
| Enquiry and booking details | Your message, the work requested, appointment dates, collection and delivery details | Contact forms, online booking, phone, email or in person |
| Transaction details | Invoices, payments made, warranty and guarantee records | When we carry out work for you |
| Technical and usage data | IP address, browser and device type, pages visited, time on site, referring website | Cookies and similar technologies (see section 4) |
| Marketing preferences | Whether you have agreed to or opted out of reminders and offers | You |
| Reviews | Your public Google review name, photo and comments | Google, displayed through our reviews widget |
We do not ask for special category data (such as health information) through this website. Please do not include it in a contact form message.
Our website is not aimed at children, and we do not knowingly collect data from anyone under 16.
3. How we use your data and our lawful basis
UK GDPR requires us to have a lawful basis for each way we use your data.
| Purpose | Lawful basis |
|---|---|
| Replying to enquiries sent through our contact forms, phone or email | Legitimate interests (responding to people who contact us), or steps taken at your request before entering a contract |
| Taking bookings and carrying out MOTs, servicing, repairs and diagnostics | Performance of a contract |
| Collection and delivery and hire car arrangements | Performance of a contract |
| Invoicing, accounts and tax records | Legal obligation |
| Recording MOT results with DVSA and updating digital service records | Legal obligation (MOTs) and performance of a contract (service records) |
| Handling warranty claims, guarantees and complaints | Performance of a contract and legitimate interests |
| Sending MOT and service reminders | Legitimate interests, as an existing customer. You can opt out at any time |
| Sending offers and marketing emails or texts | Consent, or the "soft opt-in" for existing customers under PECR. Every message includes an easy way to unsubscribe |
| Keeping our website secure and preventing spam | Legitimate interests |
| Understanding how our website is used so we can improve it | Consent, or legitimate interests where the statistical exemption under PECR applies (see section 4) |
| Measuring and improving our online advertising | Consent |
Where we rely on legitimate interests, we have balanced our interests against your rights. You can ask us for details of that assessment.
Where we rely on consent, you can withdraw it at any time by contacting us or changing your cookie settings. This does not affect anything we did before you withdrew it.
If you do not give us the details we need to carry out work on your vehicle, we may not be able to take your booking.
We do not use your data for automated decision-making or profiling that has a legal or similarly significant effect on you, and we never sell your personal data.
4. Cookies and tracking technologies
Cookies are small text files stored on your device when you visit a website. We also use similar technologies, such as tags and scripts. Together we call these "cookies".
Strictly necessary cookies are always on, because the website cannot work properly without them. All other cookies are only set if you agree to them through our cookie banner, or, for limited website statistics, unless you object. You can change your choice at any time using the "Cookie settings" link in the footer of every page.
Cookies and tools we use
| Tool or cookie | Provider | Type | Purpose | How long it lasts |
|---|---|---|---|---|
| Cookie consent cookie | Our cookie consent tool | Strictly necessary | Remembers your cookie choices | Up to 12 months |
| wordpress_test_cookie, wordpress_logged_in_*, wp-settings-* | WordPress | Strictly necessary | Website security and admin log-in. Only set for staff who log in | Session to 1 year |
| Online booking | Garage Hive | Strictly necessary | Lets you book your vehicle in through our online booking system | Set by Garage Hive |
| _tccl_visitor, _tccl_visit | GoDaddy | Analytics | Hosting performance and visitor statistics | Up to 1 year / 30 minutes |
| Google Tag Manager | Strictly necessary (tag loader) | Loads our other tags in line with your cookie choices. Does not set cookies itself | Not applicable | |
| _ga, _ga_* | Google Analytics 4 | Analytics | Counts visitors and shows how the website is used | Up to 2 years |
| _gcl_au and Google advertising cookies | Google Ads | Advertising | Measures which adverts lead to enquiries and bookings | Up to 90 days |
| Google Maps embed | Functional | Shows maps of our Worthing and Sompting sites. Google may set its own cookies, such as NID | Up to 6 months | |
| Google reviews widget | Trustindex | Functional | Displays our Google reviews on the website | Set by Trustindex |
Third-party providers control their own cookies. Their privacy policies explain how they use the data:
Social media
Our website links to our Facebook and Instagram pages. We do not use social media tracking pixels. If you follow a link, Meta's own privacy policy applies.
Managing cookies
You can accept, reject or change your cookie choices at any time through "Cookie settings". You can also block or delete cookies in your browser settings, and opt out of Google Analytics using the Google Analytics opt-out add-on. Blocking strictly necessary cookies may stop parts of the website, such as online booking, working properly.
We only share your data where we need to, and never sell it. The people and organisations we may share it with are:
- Website and IT providers: Scorpio Digital (website management), GoDaddy (hosting), Automattic (Akismet spam filtering), our email and IT providers
- Booking and garage management: Garage Hive, which provides our online booking and garage management system
- Analytics and advertising: Google (Tag Manager, Analytics, Ads and Maps), only in line with your cookie choices
- Reviews: Trustindex, which displays our public Google reviews
- Government bodies: DVSA for MOT test records, and DVLA for vehicle checks
- Vehicle partners: hire car providers, parts suppliers, manufacturers and specialist sub-contractors, where needed to carry out work on your vehicle or a warranty claim
- Professional advisers: our accountants, insurers, solicitors and bank
- Authorities: the police, HMRC, regulators or courts, where the law requires us to
- A new owner: if our business, or part of it, is sold or restructured
Our service providers act as data processors. They are bound by contract to keep your data secure and use it only on our instructions.
International transfers
Some of our providers, including Google, GoDaddy and Automattic, are based in, or may process data in, the United States or other countries outside the UK. Where this happens we make sure your data is protected by one of the following:
- a UK adequacy decision, such as the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge") for certified companies
- the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses
You can contact us for more information about the safeguards we use.
6. How long we keep your data
We keep your data only for as long as we need it.
| Data | How long we keep it |
|---|---|
| Contact form enquiries that do not lead to a booking | 12 months |
| Customer, vehicle and job records, including invoices | 6 years after your last visit, for tax, warranty and legal claims |
| MOT records | As required by DVSA |
| Marketing preferences | Until you opt out. We keep a record of the opt-out so we do not contact you again |
| Website analytics data | Up to 14 months in Google Analytics |
7. How we keep your data secure
We use appropriate technical and organisational measures to protect your data. These include an encrypted (HTTPS) website, secure hosting, spam protection on our forms, password-protected systems with restricted staff access, and contracts with our suppliers. No website is completely secure, but if a breach happens that is likely to put you at risk, we will tell you and the ICO where the law requires us to.
8. Your rights
Under UK data protection law you have the right to:
- Access a copy of the personal data we hold about you
- Rectification of data that is wrong or incomplete
- Erasure of your data, in certain circumstances
- Restrict how we use your data, in certain circumstances
- Object to us using your data based on legitimate interests, and to direct marketing at any time
- Data portability, to receive data you gave us in a commonly used format or have it sent to another organisation
- Withdraw consent at any time, where we rely on consent
To use any of these rights, email info@cedargarage.co.uk or write to us at our Worthing address. There is usually no charge. We will reply within one month, which may be extended by two further months for complex requests. We may ask you to confirm your identity first.
9. Complaints
If you are unhappy with how we have handled your data, please contact us first so we can put it right. We will acknowledge your complaint within 30 days and let you know the outcome without undue delay.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
10. Links to other websites
Our website links to other websites, such as Facebook, Instagram and award organisers. We are not responsible for their privacy practices, so please read their privacy policies.
11. Changes to this policy
We review this policy regularly and will post any changes on this page. This policy was last updated on 9 October 2026.
