Privacy Policy

1. General information

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how personal data may be collected, used, stored and shared when you visit grbaba.com, submit an enquiry form, contact us by telephone or email, or otherwise use this website.

This Privacy Policy is intended for users in the United Kingdom and is written with reference to the UK GDPR, the Data Protection Act 2018 and, where relevant, the Privacy and Electronic Communications Regulations 2003 (“PECR”).

2. Who we are

grbaba.com is a site operated by The Motorists Organisation Ltd (“TMO”, “we”, “us” or “our”). BookMyGarage is a trading name of The Motorists Organisation Ltd.

The Motorists Organisation Ltd is registered in England and Wales under Company No. 08339147.

Registered office: 1000 Lakeside, Western Road, Portsmouth, PO6 3EN, United Kingdom.

Telephone: 0330 124 5662
Opening hours: Mon–Fri, 9am–5pm
Website: grbaba.com

3. How to contact us about privacy

If you have any questions about this Privacy Policy, how we use personal data, or how to exercise your data protection rights, you can contact us using the details above.

When contacting us about privacy matters, please include enough information for us to identify your enquiry, request, appointment or website interaction.

4. Personal data we may collect

Depending on how you use the website, we may collect and process the following categories of personal data:

Contact details: name, telephone number, email address and preferred contact method.

Vehicle and enquiry details: vehicle make, model, year, registration details, location, service requirements, appointment preferences, messages and any other information you choose to provide.

Technical usage data: IP address, browser type and version, device type, operating system, referring page, pages visited, date and time of access, website interaction data, cookie preferences and similar technical information.

Communication records: emails, telephone notes, form submissions and other correspondence relating to your enquiry or use of the website.

5. Technical data when you visit the website

When you visit our website, our server and website systems may automatically process technical information. This is used to deliver the website, maintain security, prevent misuse, diagnose technical issues and improve website stability.

The lawful basis for this processing is usually our legitimate interests in operating a safe, secure and functional website.

6. Enquiry forms and contact requests

If you submit an enquiry form or contact request, we use the information you provide to respond to your request, assess vehicle details, discuss service options, check availability, provide relevant information and arrange next steps where appropriate.

This may include contacting you by telephone, email or other contact method you have provided.

The lawful basis for this processing may be performance of a contract or steps taken before entering into a contract, where your enquiry relates to a requested service. In other cases, the lawful basis may be our legitimate interests in responding to enquiries and managing customer communications.

7. Telephone communication

If you telephone us or request a call back, we may process your name, telephone number, enquiry details, vehicle information and any other information discussed during the call.

We use this information to respond to your enquiry, provide support, arrange next steps and keep a record of communications where reasonably necessary.

8. Email communication

If you contact us by email, we may process your email address, message content, technical transmission data and any attachments or information you choose to include.

Please avoid sending sensitive information by unencrypted email unless it is necessary for your enquiry.

9. Sharing personal data with service providers and partners

We may share personal data with trusted service providers and partners where this is necessary to operate the website, respond to your enquiry, provide customer support, arrange appointments, process form submissions, deliver email communications, maintain IT security or provide vehicle-related services.

This may include hosting providers, IT support providers, communication providers, analytics providers, partner garages, installers or other vehicle service providers involved in handling your request.

Where a third party acts as our processor, we require them to process personal data only on our instructions and to protect it appropriately. Where a third party acts as an independent controller, their own privacy information may also apply.

10. Marketing communications

We may send you marketing communications only where we have a lawful basis to do so. This may include your consent, or another basis permitted under applicable UK data protection and electronic marketing rules.

You can opt out of marketing communications at any time by using the unsubscribe option where provided, or by contacting us using the details in this Privacy Policy.

We may keep a suppression record to make sure we do not send further marketing communications where you have opted out.

11. Cookies and similar technologies

Our website may use cookies and similar technologies such as Local Storage, Session Storage, pixels, tags or scripts. These technologies may store information on, or access information from, your device.

Some cookies are necessary for the website to work properly, for example to remember cookie preferences, support forms or maintain website security. Other cookies, such as analytics, advertising or tracking cookies, are used only where required consent has been obtained.

For more information, please read our Cookie Policy.

12. Lawful bases for processing

We may rely on the following lawful bases under the UK GDPR:

Consent: where you have given clear consent for a specific purpose, such as certain marketing or non-essential cookies.

Contract: where processing is necessary to take steps at your request before entering into a contract or to perform a contract with you.

Legal obligation: where processing is necessary to comply with a legal obligation.

Legitimate interests: where processing is necessary for our legitimate interests or those of a third party, provided your interests and rights do not override those interests.

13. Legitimate interests

Where we rely on legitimate interests, those interests may include operating and securing the website, responding to enquiries, managing customer communications, preventing fraud or misuse, improving our services, keeping appropriate business records, and establishing, exercising or defending legal claims.

14. International transfers

Some service providers may process personal data outside the United Kingdom. Where this happens, we take steps designed to ensure that appropriate safeguards are in place, such as adequacy regulations, approved contractual safeguards or other lawful transfer mechanisms.

15. How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including to respond to enquiries, manage service requests, comply with legal or accounting obligations, resolve disputes and maintain appropriate records.

Enquiry form data is generally kept only for as long as needed to handle and document the enquiry, unless a longer retention period is required or justified by law, contract, complaint handling or legitimate business needs.

16. Security

We use appropriate technical and organisational measures designed to protect personal data against accidental loss, misuse, unauthorised access, alteration or disclosure.

However, no method of transmission over the internet can be guaranteed to be completely secure. Please take care when sending information online or by email.

17. Your data protection rights

Under UK data protection law, you may have the following rights, subject to legal conditions and exceptions:

the right to be informed, the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object, and rights relating to automated decision-making and profiling.

Where processing is based on consent, you can withdraw your consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.

18. Right to object

You may have the right to object to processing based on legitimate interests where you have grounds relating to your particular situation.

You can object to direct marketing at any time. If you object to direct marketing, we will stop processing your personal data for that purpose.

19. Complaints

If you are unhappy with how we use your personal data, please contact us first so that we can try to resolve the issue.

You also have the right to complain to the UK Information Commissioner’s Office (“ICO”), the UK supervisory authority for data protection matters.

20. Providing personal data

Providing personal data through the website is generally voluntary. However, if you do not provide information required to handle your enquiry, we may not be able to respond properly, check compatibility, discuss pricing, arrange next steps or provide the requested information.

21. Automated decision-making

We do not use personal data collected through this website for automated decision-making that produces legal or similarly significant effects, unless this is clearly explained separately.

22. Links to other websites

This website may include links to third-party websites, partner pages, booking systems, maps or external media. We are not responsible for the privacy practices, content or security of those third-party websites.

Please read the privacy information provided by any third-party website before submitting personal data to it.

23. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the website, our services, legal requirements or how we process personal data.

The latest version of this Privacy Policy will be available on this page.

24. Contact details

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us using the details below:

The Motorists Organisation Ltd
1000 Lakeside, Western Road
Portsmouth
PO6 3EN
United Kingdom

Telephone: 0330 124 5662
Opening hours: Mon–Fri, 9am–5pm