Privacy Policy

SYA Rescue ("we", "us", "our") provides vehicle recovery and roadside assistance in the United Kingdom. This policy explains what we do with personal data when you use this website, contact us, or ask us to recover a vehicle. We handle personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). Where visitors are in the EEA, the EU GDPR and the ePrivacy rules may also apply.

Placeholder — to be confirmed by SYA Rescue: registered company name and number, registered office address if different from the address below, ICO registration number, and the name and contact details of the person responsible for data protection enquiries. These are marked here because we will not publish details we have not been given.

1. Who is responsible for your data

SYA Rescue is the data controller for the personal data described in this policy. You can reach us by email at info@syarescue.co.uk or by post at SYA Rescue, Unit 4, VW House, Selinas Lane, Dagenham, Essex RM8 1QH, United Kingdom.

2. Enquiry and contact forms

Our enquiry forms collect your name, telephone number, and the message you write describing what you need. The contact page form may also collect your email address and, where you enter them, vehicle and location details. The page you submitted the form from is stored with the message so our team knows what you were reading.

• Why we collect it: to reply to you, arrange recovery or assistance, and keep a record of the job.
• Legal basis: performance of a contract, or steps taken at your request before a contract; our legitimate interests in responding to enquiries and keeping service records; legal obligations for accounting and insurance records.
• Who receives it: our own staff and recovery operators working on your job, our hosting and database provider, and our email provider. We do not sell personal data and we do not share it for advertising.
• Retention: enquiry records that do not become jobs are kept for up to 24 months. Where work is carried out, records connected to invoicing are kept for up to 7 years to meet accounting and insurance obligations.
• Analytics separation: nothing you type into a form is sent to analytics. Analytics records only that an enquiry form was successfully submitted, and from which page.

Do not include information you do not want us to hold. Please avoid sending health details or payment card numbers through the forms.

3. Calls, WhatsApp and email

When you call us, we process your telephone number and what you tell us so we can help. Selecting a WhatsApp button opens WhatsApp on your device with a message to our business number. Anything you then send is processed by WhatsApp under its own terms and privacy notice, and by us as the recipient of your message so we can arrange assistance.

With analytics allowed, our website records only that a call, phone number, WhatsApp or email button was used, and on which page. We cannot see your WhatsApp messages, conversation history, contact list, profile information or account details through this website, and we do not collect them.

4. Website analytics

Where you allow analytics, we measure how the website is used so we can improve pages and understand which areas and services generate enquiries. We collect:

• Pages viewed, the first page of your visit, and the time of each event
• A random visit reference and a random visitor reference (not your name or email)
• Whether the visit is new or returning
• Approximate location supplied by our hosting network: country, region and city. No GPS or device location, and no IP address is stored
• Device type, operating system and browser family
• How you arrived: referring website domain and any campaign parameters in the link
• Conversion events: call button click, phone number click, WhatsApp click, email click, enquiry form started, enquiry form submitted

Legal basis: your consent, both for storing analytics identifiers in your browser (PECR) and for the related processing. You can withdraw consent at any time using the privacy settings link in the footer.

Random references may still count as personal data in some circumstances because they can single out a device, so we treat analytics data as personal data and keep it to the minimum described above. Analytics records are kept for 14 months and then deleted.

5. Cookies and similar technologies

Our cookie & tracking policy lists every cookie, local storage and session storage item we use, its purpose, duration, category and whether consent is needed. Necessary items keep the site working, keep it secure, allow administrators to sign in, and remember your privacy choice.

6. Consent records

When you make a privacy choice, we store a record of that choice: a random reference with no personal meaning, the choice made, the version of this policy, approximate country, and the date and time. This lets us respect your choice and show that a choice was made. We do not use it to identify you.

7. Providers and third parties

• Hosting and content delivery: serves the website and supplies approximate location information.
• Database, authentication and storage provider (Supabase): stores enquiries, reviews, analytics events and consent records.
• Google Analytics 4 (Google): loaded only after you allow analytics.
• Google Maps: embedded map on some pages, loaded from Google when the page is opened.
• WhatsApp (Meta): only if you choose to open a WhatsApp conversation.
• Placeholder — to be confirmed: email, telephony and payment providers used by SYA Rescue, and whether calls are recorded.

8. International transfers

Some providers, including Google, may process data outside the UK and EEA. Where that happens, transfers rely on the safeguards those providers offer, such as the UK Addendum to the EU Standard Contractual Clauses or an adequacy decision. Hosting region details for our database are available on request.

9. Security

The website is served over HTTPS. Enquiries are validated on the server before being stored, are not publicly readable, and are only visible to authorised administrators after signing in. Analytics data is stored separately from enquiry data and contains no contact details or message content.

10. Your rights

Under UK GDPR you have the right to:

• Ask what personal data we hold about you and get a copy
• Ask us to correct inaccurate data
• Ask us to delete data where we no longer need it
• Object to, or ask us to restrict, certain processing
• Ask for data portability where it applies
• Withdraw consent at any time, including analytics consent
• Complain to the Information Commissioner's Office at ico.org.uk

To make a request, email info@syarescue.co.uk. We normally reply within one month.

11. Changes to this policy

If we change how we use personal data or which technologies we use, we will update this page and, where required, ask for your consent again.

12. Contact

Email info@syarescue.co.uk, or write to SYA Rescue, Unit 4, VW House, Selinas Lane, Dagenham, Essex RM8 1QH, United Kingdom.