Working draft, pending a solicitor’s review. It is not legal advice.
Data processing terms
Last updated: 23 October 2026
These terms form part of the Terms between your business (the controller) and Local Works Labs Ltd (company number 17527661), trading as LocalMotor (the processor). They apply whenever we handle personal data about your customers for you, and they meet Article 28 of the UK GDPR.
1. What we process for you
| Whose data | People who contact your business through your LocalMotor website, booking button or QR code, and customers you add or book in |
|---|---|
| What data | Name, mobile number, email, vehicle registration and make, the service asked for, preferred days and times, messages, booking and reminder history |
| Why | To pass requests to you, let you answer them, text customers the outcome you choose, send the reminders you switch on, and show you your records |
| How long | While your account is open. Deleted within [90 days] of it closing, unless you ask us to delete sooner or the law requires us to keep it |
| Special category data | None. Don’t ask customers for health or other sensitive details through LocalMotor |
2. What we promise
- Only on your instructions. We use your customers’ data only to provide LocalMotor as you set it up, and for no purpose of our own. We will tell you if we think an instruction breaks data protection law.
- Confidentiality. Anyone who can access the data is bound to keep it confidential.
- Security. We protect it with measures suited to the risk: encryption in transit and at rest, access limited to people who need it, sign-in protection on your account, and regular backups.
- Sub-processors. You allow us to use the providers in the table below. We have written terms with each that protect the data at least as well as these terms. We will give you 30 days’ notice before adding or replacing one, and you can object or cancel.
- Helping you. We will help you respond to customers who ask to see, correct or delete their details, and with any security or impact assessment you need to do.
- Breaches. We will tell you without undue delay, and within 48 hours of becoming aware, if your customers’ data is lost, leaked or misused, with what we know and what we are doing about it.
- Ending. When your account closes we delete the data or, if you ask before then, give you a copy first.
- Checks. We will give you the information you reasonably need to show we keep to these terms, and allow a reasonable audit with notice.
- Transfers. We keep data in the UK or EEA where we can. Where a provider handles data elsewhere, we use the UK’s approved safeguards (the International Data Transfer Agreement or the UK Addendum to the EU clauses).
3. What you promise
- You have a lawful basis to collect your customers’ details and ask us to process them. For requests and reminders this is usually your legitimate interests or taking steps to provide a service.
- You tell your customers how you use their details. Your website shows a short privacy line on every form, and you can link to your own notice.
- You only switch on reminder texts for customers who would expect them from you.
4. Sub-processors
| Provider | What they do | Where |
|---|---|---|
| [Hosting provider] | Runs your website and dashboard | [where] |
| [Database provider] | Stores account and request data | [where] |
| Clerk | Sign-in and account security | United States, with UK safeguards |
| [SMS provider] | Sends request alerts and customer texts, when those are switched on | [where] |
| Resend | Sends alert and account emails | [where] |
| Stripe | Takes payments. Your billing details only, not your customers’ | [where] |
| Cloudflare Turnstile | Checks that garage search, booking requests and messages come from a person, not a bot | [where] |
| Plausible | Counts page views on garage websites, without cookies. We do not keep the IP address | [where] |
| PostHog | Shows how localmotor.co.uk is used, and records sessions | European Union |
| Google Analytics | Standard reports for localmotor.co.uk. Ad features are off | Google, with US transfer under UK safeguards |
The current list is always at localmotor.co.uk/subprocessors.
5. Liability
The limits in the Terms apply to these terms too, except where the law doesn’t allow it.