Privacy Policy

Fyca (“we”, “us”, “our”) is a vehicle booking platform operated from the United Kingdom. Our website is fyca.co.uk. If you have questions about this policy, contact us at privacy@fyca.co.uk.

We collect the following categories of personal data:

• Account data — your name and email address, collected when you sign up via Clerk.
• Booking data — vehicle registration, service type, date and time of appointment.
• Garage data — if you register as a garage owner: your garage name, address, phone number, and email.
• Usage data — anonymised analytics about how you use the site (via Vercel Analytics). No cookies are used for tracking.

We use your data to:

• Create and manage your account
• Process and confirm bookings between drivers and garages
• Send transactional emails (booking confirmations, updates, and notifications)
• Improve the platform through anonymised usage analytics

We do not sell your data. We do not use your data for advertising.

We process your personal data under the following lawful bases (UK GDPR):

• Contract — processing necessary to provide the booking service you signed up for.
• Legitimate interests — anonymised analytics to improve the platform.
• Legal obligation — where we are required to retain records by law.

We use trusted third-party service providers to operate the platform. These providers act as data processors on our behalf and are contractually bound to process your data only on our instructions. They fall into the following categories:

• Authentication — managing user accounts and sign-in.
• Email delivery — sending transactional emails such as booking confirmations.
• Database hosting — secure storage of booking and account data.
• File storage — hosting images uploaded by garage owners.
• Website hosting and analytics — serving the platform and collecting anonymised usage data.

All providers are either based in the UK or EEA, or operate under appropriate safeguards for international data transfers (such as UK Standard Contractual Clauses). We do not sell your data to any third party.

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required to retain it for legal purposes.

Booking records are retained for 2 years for operational and legal reasons.

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (right to erasure)
• Restrict or object to processing
• Data portability — receive your data in a machine-readable format

To exercise any of these rights, email us at privacy@fyca.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

We use only essential cookies required for authentication (set by Clerk). We do not use advertising or tracking cookies. Our analytics (Vercel) are cookieless and anonymous.

We may update this policy from time to time. We will notify registered users of material changes by email. Continued use of Fyca after changes constitutes acceptance of the updated policy.

For any privacy-related questions, contact us at privacy@fyca.co.uk.