Privacy notice
Plain English, because you should not need a solicitor to find out what happens to your address. us2you is the data controller for everything described here.
What we collect, and why
Only what we need to turn up and fix your machine:
- Your name, phone number and email — to confirm the booking and keep you updated.
- Your address and postcode — because we come to you, and the postcode decides whether we cover you and what the travel charge is.
- Access notes you choose to give us — parking, gate codes, a dog in the garden.
- Details of the device and fault, and any photos you send — so we arrive with the right part.
- Messages you send us through your repair tracker.
Our lawful basis is contract — we cannot carry out a repair we cannot find, quote or discuss. We do not use your details for marketing and we never sell them.
Your IP address is not stored
We keep only a one-way cryptographic hash of it, salted with a secret, purely to stop the booking form being flooded. The original address is never written down and cannot be recovered from what we hold.
Cookies
One cookie, set only if you sign in, which holds your session so you stay signed in. It is strictly necessary, so it needs no consent banner. There is no advertising, tracking or analytics cookie on this site, and no third-party script that could set one.
Who else touches your data
- Cloudflare — hosts the site, the database and the photo storage.
- Resend — sends the booking confirmation and update emails.
Both are processors acting on our instructions under contract. Some storage and processing takes place outside the UK, covered by the standard contractual clauses those providers operate under.
How long we keep it
- Repair records — 24 months after the repair, so we can honour the guarantee and answer questions about work we did.
- Photos you sent — 6 months after the repair is finished, then deleted.
- Sign-in codes — minutes. They expire in ten and are single use.
Our apps
The us2you apps for Android and iPhone collect the same details as the website, for the same reasons, plus two things only an app needs:
- A notification token — a random identifier from Google or Apple so we can tell your phone when your repair moves on. It is removed when you sign out or delete your account.
- Photos you choose to add of the fault. The app only sees the photos you pick; it has no access to the rest of your library.
The apps contain no adverts, no analytics and no tracking, and share nothing with anyone for advertising. Everything they send travels encrypted over HTTPS. You can delete your account from the app (Account → Delete my account) or from this website.
Your rights
You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it entirely. Deleting removes the booking, its messages and its photos for good. Email [email protected] or ring 07448 435702 and we will deal with it within one month. To delete your account yourself, straight away, see delete your account.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk.
Security
The site is HTTPS only. Photos are held in private storage with no public address and are readable only by you, signed in, or by us. There are no customer passwords to leak — signing in uses a short-lived emailed code instead — and the sign-in tokens we store are hashed, so even a copy of our database would not let anyone into your account.
Questions about any of this? [email protected].