GDPR · Art. 13
Privacy Notice
This notice explains how After 6 Mobile Mechanic (“After 6”, “we”, “us”) uses personal data when you book a visit or receive a digital inspection report. It is a first draft for legal review before go-live — placeholders needing human sign-off are marked below.
Last updated: 19 July 2026
Who we are
After 6 Mobile Mechanic is the data controller for personal data collected through this booking and reporting service. We operate as an evening-only mobile mechanic in Dublin & surrounding areas, Republic of Ireland.
- Contact: hello@after6mechanic.com
- Phone / WhatsApp: 087 123 4567
- Service area: Dublin & Surrounding Areas
- [Legal review] Registered business name, CRO number, and postal address — confirm before go-live.
Why we use your information
We only collect what we need to run the booking and inspection service. Typical data includes your name, email, phone, visit address, vehicle registration (VRM), make/model, and inspection photos of the vehicle. We do not store payment-card data in the current version of the service.
| Purpose | Lawful basis |
|---|---|
| Fulfil your booking and perform the inspection / service | Contract (GDPR Art. 6(1)(b)) |
| Produce and send your digital inspection report (including vehicle photos) | Contract (GDPR Art. 6(1)(b)) |
| Keep transaction / financial records (invoices, amounts) | Legal obligation (GDPR Art. 6(1)(c)) — Irish tax record-keeping |
| Retain records to establish or defend a legal claim | Legitimate interests (GDPR Art. 6(1)(f)) |
| Marketing emails or promotions (only if you opt in) | Consent (GDPR Art. 6(1)(a)) — not used unless you separately agree |
Who we share data with
We use trusted service providers (data processors) to host and operate the platform. They process data only on our instructions and under data-processing terms:
- Vercel — application hosting
- Neon — database (PostgreSQL, EU region)
- Upstash — rate limiting / Redis (EU region)
- Cloudflare — object storage for inspection photos (R2) and DNS
- Transactional email provider — booking and report emails ([Legal review] name the live provider before go-live)
- Google — OAuth for admin staff login only (not customer accounts)
Some providers are US companies or may process data outside the EEA. Where that happens we rely on appropriate safeguards such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses. [Legal review] Confirm transfer mechanisms recorded in the RoPA for each processor.
We do not sell your personal data.
How long we keep data
We keep personal data only as long as needed for the purposes above, then delete or anonymise it. Starting retention windows (subject to legal review):
- Invoices and financial records: 6 years from the transaction (Irish Revenue record-keeping).
- Customer, vehicle, and job records: for the customer relationship, then a defined tail aligned with the Irish contract limitation period (typically up to 6 years), then delete/anonymise. [Legal review] Confirm the exact tail period.
- Inspection photos and report content: kept while useful for the job / customer, with a shorter defined window than indefinite storage. [Legal review] Confirm the photo retention window.
- Marketing contacts: until you withdraw consent or the list becomes stale (only if marketing is enabled).
Your rights
Under the GDPR you can ask us to:
- Access a copy of your personal data (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erase data when it is no longer needed (Art. 17), subject to legal retention duties such as tax records
- Restrict processing in certain cases (Art. 18)
- Receive data you provided under contract/consent in a portable format (Art. 20)
- Object to processing based on legitimate interests, and to direct marketing (Art. 21)
- Withdraw consent at any time where processing is based on consent (Art. 7(3))
Contact us at hello@after6mechanic.com. We aim to respond within one month. Exercising these rights is free of charge in normal circumstances.
Complaints
You have the right to lodge a complaint with the Irish Data Protection Commission (DPC) if you believe we have not handled your personal data correctly. See dataprotection.ie. We would appreciate the chance to resolve your concern first via hello@after6mechanic.com.
Changes to this notice
We may update this notice from time to time. The “Last updated” date at the top will change when we do. Material changes will be reflected on this page before they take effect for new bookings.