Privacy Policy

1. Who we are

Scuffaroo Ltd ("Scuffaroo", "we", "us", "our") operates the website scuffaroo.com and the Scuffaroo platform. We are a company registered in England & Wales (company number 17351481). For data protection purposes, Scuffaroo Ltd is the data controller.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at martine@scuffaroo.com.

2. What data we collect

We collect the following categories of personal data:

• Account information — your name, email address, and password when you register
• Contact details — phone number and postcode when you submit a job
• Job information — photos, damage description, vehicle location, and repair details you submit
• Repairer information — business name, insurance details, qualifications, and service area
• Usage data — pages visited, features used, and browser/device information
• Payment data — processed securely by our payment provider; we do not store card details

3. How we use your data

We use your personal data to:

• Create and manage your account
• Match your repair job with suitable local repairers
• Send you quotes, booking confirmations, and job updates
• Process payments and manage disputes
• Verify repairer credentials and insurance
• Understand how the site is used and improve it, where you have accepted analytics cookies
• Send you a lease-return reminder, if you ask us to
• Comply with legal obligations

4. Legal basis for processing (UK GDPR)

We rely on the following legal bases to process your personal data:

• Contract — processing necessary to fulfil our service to you
• Legitimate interests — improving our platform, preventing fraud, and ensuring platform safety
• Legal obligation — complying with applicable laws and regulations
• Consent — for optional marketing communications (you can opt out at any time)

5. Who we share your data with

We share your personal data only where necessary, with the following categories of recipients and service providers (processors) who act on our instructions:

• Repairers — your contact details and job information are shared with repairers to provide quotes and carry out the repair you book
• Supabase — our database and authentication provider (data hosted in the EU)
• Stripe — our payment processor (PCI DSS compliant)
• Resend — our email provider, used to send account, quote and booking emails
• hCaptcha — bot protection on our forms
• Google Analytics — website usage analytics, only where you have accepted analytics cookies
• Vercel — our hosting provider, which also provides cookieless, aggregate site analytics

We do not sell your personal data to third parties.

6. International data transfers

Some of our service providers are based outside the UK, including in the United States (for example Stripe, Resend, hCaptcha and Google Analytics). Where your personal data is transferred outside the UK, we rely on appropriate safeguards recognised under UK data protection law — such as UK adequacy regulations or the International Data Transfer Agreement / Addendum — to ensure your data receives an equivalent level of protection. You can ask us for more detail about the safeguards in place.

7. How long we keep your data

We retain your account data for as long as your account is active. If you close your account we will delete or anonymise your personal data within 30 days, except where we are required to retain it by law (for example, for tax or fraud prevention purposes, typically 6 years).

8. Your rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your personal data in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Restriction — ask us to restrict processing in certain circumstances

To exercise any of these rights, email martine@scuffaroo.com. We will respond within 30 days.

9. Cookies

We use cookies and similar technologies to operate our platform and improve your experience. Please see our Cookie Policy for full details.

10. Security

We take reasonable technical and organisational measures to protect your personal data, including encryption in transit (HTTPS), secure authentication, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The date at the top of this page indicates when it was last updated.

12. Contact & complaints

For any data protection queries, contact us at martine@scuffaroo.com. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.