PRIVACY POLICY

Last updated: February 2026

1. Introduction

NC Recovery ("we", "us", "our") takes your privacy seriously. This policy explains how we collect, use, store, and protect your personal data when you use our vehicle recovery services or visit our website at ncrecovery.co.uk.

We're based in Salisbury, Wiltshire, and we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

NC Recovery is the data controller responsible for your personal data. If you have any questions about this privacy policy or how we handle your data, you can contact us at:

• Email: info@ncrecovery.co.uk
• Phone: 01722 466784
• Address: NC Recovery, Salisbury, Wiltshire

3. What Data We Collect

We may collect and process the following personal data:

• Contact information: your name, phone number, and email address when you call us or contact us through our website
• Vehicle information: your vehicle make, model, registration number, colour, and location when you request recovery services
• Location data: the location of your vehicle when you request recovery services
• Payment information: payment details when you pay for our services
• Website usage data: information about how you use our website, including IP address, browser type, pages visited, and time spent on the site, collected through cookies and similar technologies
• Communication records: records of phone calls, emails, and other correspondence between you and us

4. How We Use Your Data

We use your personal data for the following purposes:

• To provide vehicle recovery and roadside assistance services that you have requested
• To communicate with you about your recovery, including providing updates and confirming arrangements
• To process payments for our services
• To comply with legal obligations, such as maintaining records for insurance, tax, and regulatory purposes
• To improve our services and website
• To respond to your enquiries and provide customer support

5. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Contract: processing is necessary for the performance of a contract with you (i.e., providing recovery services)
• Legal obligation: processing is necessary to comply with our legal obligations (e.g., tax records, insurance requirements)
• Legitimate interests: processing is necessary for our legitimate interests, such as improving our services, provided these interests don't override your rights
• Consent: where you have given us specific consent to process your data for a particular purpose

6. Who We Share Your Data With

We may share your personal data with the following third parties where necessary:

• Insurance companies. when processing claims related to your recovery
• Police and law enforcement. when required by law or in connection with police-related recoveries
• Relevant authorities. in connection with vehicle-related enquiries and recoveries
• Payment processors. to process payments for our services
• Garages and repair centres. when transporting your vehicle to a garage at your request
• Our professional advisors. such as accountants and legal advisors, where necessary

We don't sell your personal data to anyone. We don't share your data for marketing purposes without your explicit consent.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Specifically:

• Service records are retained for 6 years for insurance and legal purposes
• Payment records are retained for 6 years as required by HMRC
• Website usage data is retained for up to 26 months
• Communication records are retained for up to 3 years

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: you can request a copy of the personal data we hold about you
• Right to rectification: you can request that we correct any inaccurate or incomplete data
• Right to erasure: you can request that we delete your personal data in certain circumstances
• Right to restrict processing: you can request that we limit how we use your data
• Right to data portability: you can request a copy of your data in a structured, machine-readable format
• Right to object: you can object to our processing of your data in certain circumstances

To exercise any of these rights, contact us at info@ncrecovery.co.uk or call 01722 466784. We'll respond to your request within one month.

9. Cookies

Our website uses cookies to improve your experience. Cookies are small text files stored on your device when you visit our website. We use the following types of cookies:

• Essential cookies: necessary for the website to function properly
• Analytics cookies: help us understand how visitors use our website so we can improve it

You can control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

10. Data Security

We take appropriate measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. That said, no method of internet transmission or electronic storage is completely secure, and we can't guarantee absolute security.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Complaints

If you're unhappy with how we've handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority:

• Website: ico.org.uk
• Phone: 0303 123 1113

We would appreciate the opportunity to address your concerns before you contact the ICO, so please contact us first at info@ncrecovery.co.uk.