Privacy policy.

Last updated: 19 October 2026

Who we are

BHP Autocare (DPF XTON UK LTD) is the data controller for the personal information described in this policy. Our workshop is at Unit 5, Moulton Park Business Centre, Red House Rd, Northampton NN3 6AQ.

Questions about your data: email info@bhpautocare.co.uk or call 07743 508164.

What we collect

• Contact form: first name, surname, email, phone number, vehicle registration, the service you need and your message.
• Online booking: the same details, plus your vehicle's make and model and the drop-off date and time you choose.
• Technical data: the IP address your form was sent from and the time it was sent, used to stop spam and abuse.
• Website chat: if you use the "Need help?" chat, your name, phone number and the messages you send.
• WhatsApp: if you message us on WhatsApp, we receive the message, your WhatsApp name and number.
• Estimates and invoices: when we send you an estimate or invoice, your name, email address and/or mobile number, vehicle registration, the document itself and its total. We also record when it was sent, delivered and opened, and, for estimates, whether you accepted or declined it and any note you add.

We do not ask for payment details on this website.

How we use it

• To reply to your enquiry, give quotes and arrange and confirm bookings.
• To look up your vehicle's make and model from its registration, so you don't have to type it.
• To send you estimates and invoices, record your decision on an estimate, and follow up where needed.
• To carry out the work you ask for and keep records of it.
• To keep the website secure and prevent spam.

We do not sell your information, and we do not send marketing messages unless you ask us to.

Our legal basis

We use your details to take steps at your request before carrying out work for you and to perform that work (contract), and for our legitimate interests in running and protecting our business, such as preventing spam. Advertising cookies are only used with your consent, which you can withdraw at any time. Where we must keep records by law (for example accounting records), we do so to meet that legal obligation.

Who we share it with

We only share what is needed with trusted service providers who process it on our behalf:

• Hetzner Online GmbH – hosts this website and stores enquiries, bookings, chats, estimates and invoices on servers in the EU. Our emails are sent from this server.
• Vehicle data provider (Zyfy) – receives the registration number only, to return your vehicle's make and model.
• Meta Platforms (WhatsApp) – carries WhatsApp chats you start with us, estimates and invoices we send you on WhatsApp (with delivery and read receipts), and the alerts our team receives about new enquiries, bookings, chats and estimate replies (your name, phone number and a short summary).
• Google – shows the map on our contact page and the fonts used on this site, provides our Google reviews and, if you accept advertising cookies, measures which of our Google adverts lead to enquiries and bookings (Google Ads).
• Our email provider – receives emails sent to info@bhpautocare.co.uk.

Some of these providers may process data outside the UK. Where they do, they use safeguards recognised under UK law, such as adequacy regulations or standard contractual clauses.

How long we keep it

• Enquiries and booking requests: up to 2 years after our last contact with you.
• If you become a customer, records of work carried out are kept for up to 6 years for accounting, warranty and legal purposes.
• Website chats: 90 days.
• Estimates and invoices, with their history: up to 6 years for accounting, warranty and legal purposes.
• Vehicle lookups are cached for 24 hours and then deleted.

Cookies

When you first visit, we ask whether you accept advertising cookies. You can change your choice at any time with Cookie settings (also at the bottom of every page).

• Essential (always on): the website chat stores a small code in your browser so your conversation is still there if you reload the page, and we remember your cookie choice. These don't track you and are needed for the site to work.
• Advertising (only if you accept): Google Ads cookies (such as _gcl_au) that tell us when someone who clicked one of our Google adverts goes on to send an enquiry or booking. This helps us see which adverts work. Google may also use them to show our adverts to people who have visited our site. They last up to 90 days.

If you don't accept, no advertising cookies are set. Google may still receive basic, cookieless information (for example that a page was viewed or an enquiry was sent, without identifying you) so we can count our results overall. This is Google's "Consent Mode".

The Google map on our contact page only loads if you accept cookies or press "Show map", because Google may set its own cookies. Google Fonts are loaded from Google, which may record technical information such as your IP address. See Google's privacy policy and how Google uses information from sites that use its services. The Instagram photos on our home page are copies stored on our own server, so viewing them doesn't connect you to Instagram.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of the personal information we hold about you;
• correct information that is wrong or incomplete;
• delete your information, or restrict how we use it;
• stop using it where we rely on legitimate interests;
• send it to you or another organisation in a portable format.

To make a request, email info@bhpautocare.co.uk. We will reply within one month.

If you are unhappy with how we handle your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.