Garolex

Privacy policy

Last updated: 30 October 2026

This policy explains how Garolex handles personal information. Garolex is run by Lloyd Wightman t/a Garolex, a sole trader based in Warrington, UK ("we", "us"). You can contact us about privacy at [email protected].

1. Who is responsible for what

Your account information (the garage that subscribes and its users): we are the data controller.

Information you put into Garolex about your own customers (for example names, phone numbers, vehicles, invoices and bookings): your garage is the data controller and we process it on your behalf, only to provide the service to you. You are responsible for having a lawful basis to hold your customers' information.

2. What we collect

  • Account details: garage name, your name, email address, phone number and password (stored only as a secure one-way hash).
  • Company details you choose to add: address, logo, website, bank details, VAT number, terms and footer text.
  • Billing information: your package, subscription status and payment history. Card payments are handled by our payment provider (Stripe); we do not see or store your full card number.
  • Technical information: sign-in times, IP address and browser type, used to keep accounts secure and prevent abuse.
  • Messages you send us, including website requests on the Ultimate package.
  • Booking requests made by members of the public through a garage's Garolex page, which are passed to that garage.

3. How we use it and our lawful basis

  • To provide the service you've signed up for, take payments and send service emails such as payment reminders (contract).
  • To keep Garolex secure, prevent fraud and fix problems (legitimate interests).
  • To meet our legal and accounting obligations (legal obligation).

We do not sell personal information and we do not use it for third-party advertising.

4. Who we share it with

We use trusted service providers to run Garolex: Cloudflare (hosting, storage, email routing and the automatic reading of photos you choose to upload), Stripe (subscription payments) and an email delivery provider for service emails. They only process information on our instructions. Some providers may process data outside the UK; where they do, appropriate safeguards such as the UK International Data Transfer Addendum or standard contractual clauses are used.

5. How long we keep it

We keep your account and garage data while your account is open. If you close your account, we delete your garage data within 90 days, unless we must keep certain billing records for longer for tax and accounting purposes (normally 6 years). You can export your data to CSV before you leave.

6. Cookies

We use only essential cookies needed to keep you signed in securely. We don't use advertising or tracking cookies.

7. Your rights

You have the right to ask for a copy of your personal information, to have it corrected or deleted, to object to or restrict how we use it, and to data portability. Email [email protected]. If you're a customer of a garage that uses Garolex, please contact that garage first. You can also complain to the Information Commissioner's Office (ico.org.uk).

8. Security

Connections to Garolex are encrypted, passwords are hashed, and each garage's data is stored separately. No system is perfectly secure, so please use a strong password and don't share your login.

9. Changes

We may update this policy. If we make significant changes we'll let account holders know by email or in the app.