DATA PROTECTION

A clear controller / processor model.

A subscribing garage normally controls the purposes for which its customers’ workshop information is used. ONNPAR GARAGE provides the systems and processes that information as a processor on the garage’s instructions. ONNPAR LTD separately acts as controller for its own account, billing, service-security and support records.

Workspace separation

Every operational record is tenant-scoped. The production candidate also adds database-level integrity rules designed to prevent records in one garage being linked to another garage’s customers, vehicles, jobs or documents.

Sub-processors

Infrastructure and payment providers are used only where needed to provide the service. Current or planned providers include Cloudflare for application/data infrastructure and SumUp for payment processing; communications providers are enabled only when configured.

Contracts and retention

Commercial customers should receive a data-processing agreement covering processing instructions, confidentiality, security, sub-processors, assistance with rights requests, breach support and return/deletion of data. Retention periods should be agreed and reviewed rather than keeping workshop data indefinitely.

For data-protection enquiries contact info@onnpar.co.uk.