Privacy

WorkshopLegend processes workshop staff details and, on behalf of each workshop, its customers' names, contact details, vehicle registrations and job records. Each workshop is the controller of its customers' data; WorkshopLegend acts as processor.

Data is held in a UK/EU-region database with per-workshop isolation enforced at the database. Customer quote links are unguessable, expire, and show only the document they belong to. Emails are sent through a transactional email provider and recorded.

Workshops can export or delete their data on request while self-service tools are completed. Contact details for the controller and processor will be stated here once the operating entity is confirmed.