Privacy policy

Contact us about your data

Ace of Spray, trading locally as Ace of Sprayed, is the workshop receiving your enquiry. Write to 4 Northern Court, Vernon Place, Nottingham, NG6 0DE or call 07566 718700.

Information you provide

The estimate form collects your name, phone number, postcode, vehicle registration, make and model, selected repair services and any photos you choose to attach. You can also give an email address; this is optional and is used only to send you a copy of your enquiry. It also records an enquiry reference, submission time and repair status. Please avoid uploading unrelated personal information.

How your information is used

Your details and photos are used to assess your repair enquiry, contact you and manage follow-up. The form requests your agreement before submission. You can contact the workshop to withdraw that agreement; this does not undo processing already carried out. If you proceed with a repair, necessary information may also be used to arrange and perform that service.

The website also uses a salted hash derived from the connection IP address to limit repeated submissions and protect the enquiry service. These rate-limit records expire after an hour and are removed during subsequent submission processing.

Registration lookup

When registration lookup is enabled, selecting Find car sends the plate to the Driver and Vehicle Standards Agency (DVSA) to retrieve the vehicle make and model. Your name, phone number and photos are not sent with the lookup. You can instead enter vehicle details manually. See DVSA MOT history API for provider information. Lookup limits use a salted connection hash; hourly and daily usage counters are cleared after expiry during later requests.

Storage and access

The enquiry service stores records in a private Supabase database and uploaded photos in private Supabase storage. The workshop inbox and photo retrieval require an administrator access key. Local development uses separate storage on the development computer.

Enquiries remain in storage until removed by an authorised operator; automatic deletion is not currently configured. Contact the workshop to request removal or ask how long a particular record is needed. Hosting providers may process technical connection information in providing their services, including outside the UK. See Render’s privacy policy and Supabase’s privacy policy for provider information.

When a new enquiry is saved, the workshop receives an email notification containing your name, phone number, email address (if given), postcode, registration, vehicle, selected services, number of photos and enquiry reference. Photos are not included. If you gave an email address, you are also sent one confirmation email with a copy of your enquiry details and the workshop’s contact details; it is not used for marketing, and the workshop may reply to it about your enquiry. These emails are sent through Resend, an email delivery provider, which may process this information outside the UK. See Resend’s privacy policy for provider information.

External services and cookies

The website includes a Google Maps embed. Your browser connects to Google when the map loads, sharing connection information such as your IP address. Embedded content may use provider cookies or similar technologies.

WhatsApp links open WhatsApp only when selected. Information you send there is handled under its own privacy terms. The quote form does not automatically send WhatsApp messages. The website has no custom advertising or analytics integration; the hosting platform may use cookies needed for access and security.

Your choices and rights

You can ask about access, correction, deletion, restriction, objection or portability of your personal information, where applicable. Contact the workshop using the details above. Identity confirmation may be necessary to protect your information.

If you are concerned about how your data is handled, contact the workshop first. You can also raise a concern with the Information Commissioner’s Office.