Privacy & Cookie Policy

This Privacy Policy explains how EDYCAR AUTO BODYREPAIR LTD collects, uses and protects personal data when you visit this website, contact us, book a repair or bring a vehicle to our workshop. It follows the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.

1. Who We Are

EDYCAR AUTO BODYREPAIR LTD is the data controller for your personal data. Coventry Body Shop and Mirage Body Shop are both trading names of EDYCAR AUTO BODYREPAIR LTD, and the two teams work together from the same workshop.

Company: EDYCAR AUTO BODYREPAIR LTD, registered in England and Wales, company number 14618944
Registered office and workshop: UNIT 5 STAR INDUSTRIAL PARK,BODMIN ROAD CV2 5DB, Coventry
Data protection registration (ICO): ZB890228
Contact: +44 7903 105777 or our contact form

2. Personal Data We Collect

Information you give us:

• contact details: your name, phone number, email address and, if you give it, your postal address;
• vehicle details: registration number, make, model, a description of the damage, and the photos or videos you send us;
• booking and job details: appointment dates, quotes, invoices, payments and notes from calls and visits;
• messages you send through our website forms, by phone, by WhatsApp or through our Nova chat assistant;
• your newsletter sign-up, if you subscribe.

Information we collect when you use our website or visit us:

• technical data such as your IP address, browser and device type, the pages you visit and your cookie choices (see our Cookie Policy);
• CCTV images when you visit our workshop (section 8).

Information from other people: if your repair is part of an insurance claim, your insurer, broker, claims handler or accident management company may give us your name, contact details, claim reference, policy details, vehicle details and information about the incident.

We do not ask for health information or other special category data. If you were hurt in an accident, please do not send us medical details; we do not need them to repair your vehicle.

3. How We Use Your Data and Our Lawful Bases

• Quotes, bookings, repairs, collection, aftercare and warranty claims: to perform our contract with you, or to take the steps you ask for before one is made.
• Working with your insurer or claims handler: to perform our contract with you, and our legitimate interest in having the repair approved and paid.
• Payments, accounts and tax records: our contract with you and our legal obligations.
• Answering enquiries by phone, website form, WhatsApp or Nova: the steps you ask for before a contract, and our legitimate interest in replying to people who contact us.
• CCTV: our legitimate interest in keeping our premises, our staff and the vehicles in our care safe, and in preventing and detecting crime.
• Running, securing and improving this website, and preventing spam and misuse: our legitimate interests.
• Optional analytics cookies, Google maps on our website and the newsletter: your consent, which you can withdraw at any time.
• Helping the police or other authorities, for example to prevent or detect crime: a legal obligation, or a recognised legitimate interest where UK data protection law treats it as one.
• Bringing or defending legal claims: our legitimate interests.

4. Do You Have to Give Us Your Data?

No law requires you to give us personal data. To quote for, book and repair your vehicle we need your name, a way to contact you and your vehicle details; without them we cannot provide the service.

5. Automated Decisions

We do not make decisions about you by automated means alone. Our online Vehicle Repair Estimator works out a guide price automatically from your answers. It is a guide only; every quote is confirmed by our team after seeing the vehicle.

6. Nova AI Assistant

Nova is our AI assistant, and the notice in the chat window says so before and after you start a chat. Its replies are generated automatically and can be incomplete or wrong, so please check anything important with our team. Nova gives information only: it does not book, quote, charge or make any decision about you, and you can ask for a member of our team to review anything you discussed with it.

What Nova receives. Nova has no form fields of its own. It receives only what you type, so please type no more than your question needs.

Who powers Nova. Nova is powered by MiniMax, an AI provider based outside the UK. If MiniMax is unavailable, NVIDIA's AI service answers instead. When a message needs an AI reply, we send the provider that is answering your message, up to the last 20 messages of the conversation and public information about our business, so that it can write the reply. We do not send your IP address or browser details, and nothing from our booking or payment records is sent; the request comes from our server, not from your device. Simple and repeated questions are answered by our website without contacting a provider. This processing takes place outside the UK (see section 10).

What we keep. To run, secure and improve the service we keep chat records for up to 30 days: your messages, Nova's replies, a random session identifier, hashed network and browser identifiers, the page you were on, message counts and the AI model used. They are then deleted automatically, unless we need a particular record for longer to handle a complaint or a legal claim. If a message looks like an attack on our website, for example code or an attempt to misuse Nova, we block it and keep your IP address and up to 500 characters of the message in our security records for up to 90 days. Your browser also keeps the conversation until you close the tab (see our Cookie Policy).

Please do not type sensitive information into Nova, such as passwords, payment details, health information, government identifiers (for example passport or National Insurance numbers), or details about other people. If you already have, contact us and we will delete it.

When you ask Nova about getting work done, our lawful basis is taking the steps you ask for before a contract. Otherwise, and for keeping chat records and protecting the service from misuse, our lawful basis is our legitimate interests in answering questions and keeping our website secure. If you go on to use a contact, booking or estimate form, that information is handled as described in section 3.

We tell you that you are dealing with an AI because it is right to do so, and because some laws require it, including Article 50 of the EU Artificial Intelligence Act where this website is used by people in the EU.

7. Newsletter

If you subscribe to our newsletter, we keep your email address to send it to you. We have not sent a newsletter yet. If we start, we will only send it to people who have subscribed, and every email will tell you how to unsubscribe. You can also unsubscribe at any time through our contact form.

8. CCTV at Our Workshop

We use CCTV at our workshop to protect the premises, our staff and the vehicles in our care, and to help prevent and detect crime. Signs at the unit show that CCTV is in use. Recordings are kept for 30 days and then overwritten automatically, unless we need a recording to deal with an incident, an insurance claim or a request from the police.

9. Who We Share Your Data With

We share personal data only where it is needed for the purposes above:

• Mirage Body Shop (section 1): either team may carry out your job and see your booking and vehicle details. This is not sharing with another company.
• your insurer, broker, claims handler or accident management company, when your repair is part of a claim;
• parts and paint suppliers, who receive the vehicle details needed to order parts;
• our card payment provider and our bank, when you pay or we refund you;
• companies that host, secure and support our website and systems, including Cloudflare, which delivers and protects this website, and our email and phone service providers;
• MiniMax and, when MiniMax is unavailable, NVIDIA, for Nova chats (section 6);
• Google, when you allow a Google map to load on our website: Google then receives your IP address and browser details (see our Cookie Policy);
• WhatsApp (Meta), if you ask us to reply by WhatsApp or message us there; WhatsApp's own terms and privacy policy apply to its service;
• our accountants, legal advisers and business insurers;
• the police, courts, HMRC or other authorities, where the law requires or allows it.

Companies that process data for us may use it only on our instructions and must keep it secure. We do not sell your personal data, and we do not share it with anyone for their own marketing.

10. International Transfers

Some of our providers process personal data outside the UK. For Cloudflare, Google and Meta, transfers rely on UK adequacy regulations, including the UK-US data bridge where the provider is certified, or on the standard contract clauses in their data protection terms.

Nova's providers, MiniMax and NVIDIA, process chat messages outside the UK, in countries whose data protection laws may not give the same protection as UK law. This is why section 6 asks you not to type personal or sensitive information into Nova.

You can ask us for more information about how any transfer is protected.

11. How Long We Keep Your Data

• Booking, repair, invoice and payment records: six years from the end of the financial year in which the job was completed, or longer where tax rules require it, for example during an HMRC check. This meets our tax duties and covers the time in which a claim about the work can be made.
• Enquiries that do not lead to a booking: up to 24 months after our last contact.
• Nova chat records, security records of blocked messages and CCTV recordings: as set out in sections 6 and 8.
• Newsletter sign-ups: until you unsubscribe. We then keep your email address on a do-not-email list so that we do not contact you again.
• Website logs and technical data: only as long as needed to run and secure the website, then deleted or anonymised.

We keep data for longer only where the law requires it or where we need it for a legal claim.

12. How We Protect Your Data

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. Access is limited to people who need it to do their job.

13. Your Rights

You have the right to ask for a copy of your personal data, to have it corrected, to have it erased, to restrict how we use it, to object to our use of it based on legitimate interests, to receive it in a portable format, and to withdraw your consent at any time where we rely on it. You can object to direct marketing at any time. Some rights depend on legal conditions. To use a right, call +44 7903 105777 or use our contact form. Our GDPR Policy explains each right and how we handle requests.

14. Complaints

If you are unhappy with how we have handled your personal data, you have the right to complain to us. Contact us through our contact form or call +44 7903 105777. We will acknowledge your complaint within 30 days, look into it without undue delay and tell you the outcome.

You also have the right to complain to the Information Commission (ICO), the UK data protection regulator, at ico.org.uk.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version is always published on this page.

Related policies:GDPR Policy · Cookie Policy · Terms & Conditions · FAQ

Last updated: 21 October 2026