top of page

 Privacy Policy

​

1. Introduction

Extreme Body Centre Ltd (“we”, “us”, “our”) is committed to protecting your personal data and complying with UK GDPR. This policy explains how we collect, use, store, and share your information via our website or direct enquiries.

2. Data Controller

Extreme Body Centre Ltd
Units 4–5 Pottery Business Park, Ringwood Road, Poole, Dorset, BH14 0RG

Phone: 01202 722222 | Email: accounts@extremebodycentreltd.co.uk 

3. Personal Data We Collect

  • Enquiry forms: name, email, telephone, vehicle details and message via contact form

  • Communications: information exchanged during phone, email or in-person discussions

  • Usage data: IP address, device/browser, pages viewed, timestamps (via essential and performance cookies) 

4. How We Use Your Data

We use your data to:

  • Provide quotes, arrange accident repairs, smart repairs, alloy refurbishments, body kits, restoration, etc. 

  • Respond to enquiries and confirm appointments.

  • Enhance our website through anonymised usage analysis.

  • Meet legal obligations (accounting records, audits).

5. Legal Basis for Processing

  • Contractual necessity: to deliver services requested

  • Legitimate interests: to run our business and optimise services

  • Consent: if you agree to receive follow-up communications

  • Legal compliance: for statutory record‑keeping and business operations

6. Data Sharing

We do not sell or rent your data. We may share it with:

  • Service providers, like IT, hosting, or email platforms, as data processors

  • Regulatory authorities, if legally required

7. Cookies & Tracking

  • Essential cookies enable website functions (forms, navigation)

  • Performance cookies (e.g. Google Analytics) support website improvement

  • No advertising or profiling cookies are used
     

8. Data Retention

  • Service records: retained for 6–7 years for legal compliance

  • Enquiries: kept for up to 2 years if unused for services

  • Usage logs: session logs are deleted after 24 months; aggregated analytics retained

9. Your Rights

Under UK GDPR, you have rights to:

  • Access, correct, delete, restrict, or object to processing

  • Withdraw consent for follow-up communications

  • Receive your data in a portable format

Contact us via phone, email, or post to exercise your rights. If dissatisfied, you may lodge a complaint with the ICO.

10. Security

We implement SSL encryption, secure hosting, and restricted data access—though no system is completely immune from risk.

11. International Transfers

All personal data is processed and stored in the UK—no international transfers occur.

12. Policy Updates

We may update this Privacy Policy. Any significant changes will include a new Effective Date.

bottom of page