Privacy Policy

Who we are

Email: Aceonegroupltd@gmail.com
Phone: 07868 638923

ACEONE AUTOS LTD. is responsible for deciding how the personal information described in this notice is used for its business purposes.

Information we collect

Depending on how you use the website or contact us, the information we collect may include:

• Contact enquiries: your name, email address, optional phone number and message.
• Part exchange enquiries: your name, email address, phone number, vehicle registration, make/model, vehicle year if supplied, mileage, condition and service-history information if supplied, and vehicle photos or information you voluntarily send through WhatsApp.
• Test drive requests: your name, email address, phone number, vehicle of interest and preferred date.
• Repair booking and booking management: vehicle registration, selected service, appointment date and time, customer name, phone number, email address, booking reference, booking status and booking-management actions such as cancellation or rescheduling.
• Technical and security information: security and rate-limiting information needed to protect the service, including hashed identifiers derived from request information where the application uses them.

Why we use personal information

We use personal information to:

• respond to enquiries and provide requested valuations;
• handle test-drive requests;
• create, review and manage repair bookings;
• send transactional booking messages when that service is enabled;
• contact customers about the service they requested;
• protect the website and booking service from abuse;
• maintain business and service records; and
• meet applicable legal obligations where relevant.

Lawful bases

Depending on the activity, ACEONE AUTOS LTD. may rely on:

• Contract or steps requested before entering into a contract: where information is needed to respond to a booking, test drive, valuation or other service request.
• Legitimate interests: for responding to general enquiries, administering requested services, maintaining operational records, protecting the website from abuse and communicating operational information, where those interests are not overridden by your rights.
• Legal obligation: where information needs to be retained or disclosed to meet an applicable legal requirement.

If ACEONE AUTOS LTD. later introduces optional marketing based on consent, this policy will be updated before doing so.

Website forms and Formspree

The Contact, Part Exchange and Test Drive forms currently submit information using Formspree, a third-party form-processing service. Information you enter into those forms is transmitted to Formspree for processing and delivery to ACEONE AUTOS LTD.

Formspree has its own security and retention practices. ACEONE AUTOS LTD. does not control those independent practices.

Third-party processors may process information outside the UK. Appropriate safeguards are relied upon where required by applicable data protection law.

Repair bookings

Repair-booking details are processed by the ACEONE AUTOS LTD. website backend and stored in the site's database so the business can review, confirm, manage, reschedule, cancel or complete the booking.

A booking reference and matching contact detail are used when you access an existing booking.

Submitting a booking request does not itself mean the appointment is confirmed.

Booking emails and Google APIs

Booking emails are not currently enabled in production. When enabled, ACEONE AUTOS LTD. will use Google OAuth and the Gmail API to send transactional repair-booking emails and internal booking notifications from the authorised ACEONE AUTOS LTD. Google account.

The application is intended to request only the Gmail permission needed to send email on behalf of that account (gmail.send). It does not require Gmail mailbox-reading access for this booking-email function and does not use the Gmail API to read customer mailboxes.

OAuth credentials used by the website are stored in private server-side configuration outside the public website directory. Access tokens are used to authenticate authorised Gmail API requests. Gmail may return a provider message identifier, which the application may retain with its delivery record so that email-delivery activity can be accounted for.

Google API data and access are used only for the functionality described above. They are not used for advertising, profiling or sale.

ACEONE AUTOS LTD.'s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Other third-party services

Hostinger provides website and server hosting infrastructure.

WhatsApp links allow you to choose to communicate through WhatsApp/Meta.

The website loads Google Fonts automatically. Embedded Instagram content loads only after you choose to load it using the video button. Doing so connects your browser to Instagram/Meta. When you interact with or load third-party services, those providers may receive ordinary connection information such as your IP address, browser or device information and request metadata under their own privacy practices.

Sharing personal information

ACEONE AUTOS LTD. does not sell personal information. Information may be shared only where reasonably necessary with:

• hosting and IT or service providers;
• form-processing providers;
• email-delivery providers;
• communication providers selected or used by you; and
• professional advisers or authorities where required by law.

International processing

Some service providers used by ACEONE AUTOS LTD. may process information in countries outside the UK. Where applicable law requires safeguards for an international transfer, ACEONE AUTOS LTD. will rely on an appropriate lawful transfer mechanism.

Retention

ACEONE AUTOS LTD. keeps personal information only for as long as reasonably necessary for the purpose for which it was collected, including handling your request or booking, maintaining appropriate business records, resolving disputes, protecting the service and meeting applicable legal or accounting obligations.

Different records may therefore be kept for different periods.

Where information is no longer required, ACEONE AUTOS LTD. will take reasonable steps to delete it or otherwise stop using it where appropriate.

Google OAuth credentials remain under ACEONE AUTOS LTD.'s control until they are rotated, revoked or no longer required.

Security

ACEONE AUTOS LTD. uses reasonable technical and organisational measures intended to protect information. These include private production runtime configuration, restricted runtime file permissions, server-side application controls, rate limiting, authenticated administration, booking-access verification and redaction of recognised secret fields from application logging.

No method of transmission or storage can guarantee absolute security.

Your rights

UK data-protection law may provide rights to access, correct or erase your personal information, restrict or object to its processing, and receive or transfer it where data portability applies. You may withdraw consent where processing actually relies on consent.

These rights depend on the circumstances and applicable legal conditions. To make a request, contact Aceonegroupltd@gmail.com.

Complaints

You can contact ACEONE AUTOS LTD. first if you have a privacy concern. You also have the right to complain to the UK Information Commissioner's Office. Visit the ICO complaints page.

Automated decisions

ACEONE AUTOS LTD. does not currently use the personal information described in this notice to make solely automated decisions that produce legal or similarly significant effects.

Vehicle registration lookup

The live vehicle registration lookup service is not currently enabled. If ACEONE AUTOS LTD. enables a third-party registration lookup service in the future, this notice will be reviewed and updated before that processing is introduced where required.

Changes to this policy

This policy may be updated if our services or data practices change. The date at the top will be updated when the policy changes.