1.Who we are
This Privacy Policy explains how Autera Ltd ("Autera", "we", "us" or "our"), a company registered in England and Wales under company number 16402865, collects and uses your personal data when you use the Autera platform (the "Platform").
Autera is the "data controller" for the personal data described in this policy. We are registered with the UK Information Commissioner's Office (ICO).
This policy applies to both vehicle owners booking a repair ("Customers") and independent mechanics offering services ("Mechanics"). We handle your data in line with UK GDPR and the Data Protection Act 2018.
2.What data we collect
Depending on how you use the Platform, we may collect:
- Identity & contact details — your name, email address and phone number.
- Location data — your postcode, used to match you with nearby mechanics.
- Vehicle details — your vehicle registration and the related vehicle information we look up from it (make, model, year and similar).
- Booking information — the issues you describe, the services you request, and your booking history.
- Messages — communications you send through the Platform between Customers and Mechanics.
- Payment details — card and payment information is collected and processed securely by Stripe. Autera does not store your full card details on our systems.
- Usage & device data — information about how you interact with the Platform, collected through analytics (see section 6).
3.Why we collect it
We use your personal data to:
- provide and operate the Platform, including creating and managing your account;
- match Customers with suitable nearby Mechanics;
- process bookings and payments through Stripe;
- enable communication between Customers and Mechanics about a booking;
- send service-related communications (for example booking confirmations and updates);
- understand and improve how the Platform is used, through analytics;
- prevent fraud and keep the Platform secure;
- comply with our legal and regulatory obligations.
4.Our legal basis for using your data
Under UK GDPR, we rely on the following legal bases:
- Performance of a contract — to provide the Platform, process your bookings, and take payment, so we can deliver the service you have asked for.
- Legitimate interests — to match users, improve and secure the Platform, prevent fraud, and understand how our service is used, in a way you would reasonably expect and that does not override your rights.
- Consent — for optional marketing communications. Where we rely on consent, you can withdraw it at any time.
- Legal obligation — where we must process data to comply with the law (for example keeping financial records).
6.Analytics & cookies
We use PostHog to collect analytics about how the Platform is used, which helps us fix problems and improve the experience. We use cookies and similar technologies to operate the Platform, remember your preferences, and support analytics.
For full details of the cookies we use and how to manage them, please see our Cookie Policy.
7.How long we keep your data
We keep your personal data only for as long as we need it for the purposes set out in this policy. In general:
- account and profile data is kept while your account is active;
- booking, transaction and payment records are kept for as long as required to meet our legal, accounting and tax obligations (typically up to six years);
- where data is no longer needed, we will securely delete or anonymise it.
If you close your account, we will delete or anonymise your data unless we are required to keep certain records by law.
8.Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you;
- Rectification — ask us to correct inaccurate or incomplete data;
- Erasure — ask us to delete your data in certain circumstances;
- Restriction — ask us to limit how we use your data;
- Portability — receive your data in a portable format, or have it transferred to another provider;
- Objection — object to processing based on our legitimate interests, or to direct marketing.
To exercise any of these rights, contact us using the details in section 12. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk, although we would appreciate the chance to address your concerns first.
9.International transfers
Some of our service providers, such as Stripe, may process data outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place — such as UK adequacy regulations or the International Data Transfer Agreement / Standard Contractual Clauses — so your data remains protected to UK standards.
10.Children
The Platform is not intended for anyone under the age of 18. We do not knowingly collect personal data from under-18s. If you believe a child has provided us with personal data, please contact us and we will delete it.
11.Changes to this policy
We may update this Privacy Policy from time to time, for example to reflect changes in our services or legal requirements. Material changes will be communicated to users via the Platform or by email. The "Last updated" date at the top shows when this policy was last revised.
12.Contact us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at:
Autera Ltd · Instagram: @auterauk