Privacy Policy & GDPR

YK Services is a trading name of YK Worldwide Ltd, registered in England & Wales. We act as the data controller for any personal data we collect about you.

For all data protection enquiries, please contact us using the details above.

To provide our services we may collect the following categories of personal data:

• Name
• Phone number
• Email address
• Vehicle registration and vehicle details (make, model, mileage, MOT, service history)
• Address or location at which services are to be carried out
• Booking details and previous service history
• Warranty plan and policy information
• Warranty claim evidence (photos and videos you submit)
• Payment-related information (processed via secure third-party payment providers — we do not store full card details)
• Communication records (emails, SMS, call notes)

Personal data is collected through any of the following channels:

• Website forms — booking, warranty upgrade, warranty claim, dealer application, contact and reminder forms
• Phone calls and SMS to our published numbers
• Email correspondence
• Dealer partnerships and trade enquiries
• In-person at the point of vehicle handover or on-site appointments

We use your personal data only for the purposes set out below:

• To provide, deliver and manage the services you request
• To process bookings, diagnostics and on-site appointments
• To manage warranty agreements, upgrades and claim assessments
• To communicate with you about your booking, claim, invoice or membership
• To improve our services, internal processes and customer experience
• To meet our legal, accounting, tax and regulatory obligations
• To prevent fraud, abuse and unauthorised use of our services

Under UK GDPR, we rely on the following lawful bases for processing your data:

• Contractual necessity — to provide the services you have requested or that we are contractually obliged to deliver
• Legitimate interests — to operate, secure and improve our business (e.g. service quality, fraud prevention, internal record keeping)
• Legal obligations — to comply with HMRC, motor trade and consumer protection requirements
• Consent — for optional communications such as marketing or service reminders, which you may withdraw at any time

Your data is never sold. We will only share your personal data where it is necessary, including with:

• Dealer partners — only where you have engaged us through a dealership or where the warranty/inspection work requires it
• Payment providers (e.g. Stripe) — for processing transactions securely
• IT, hosting, and email service providers acting as our processors
• Legal, regulatory, insurance or law enforcement authorities, where required by law
• Professional advisors (e.g. accountants, solicitors) under confidentiality obligations

All third parties acting on our behalf are bound by appropriate data processing agreements.

Your data is stored on secure, reputable cloud-based systems located within the UK or EEA, with appropriate technical and organisational measures in place — including encryption in transit, restricted access, regular backups and audited service providers — to prevent unauthorised access, loss, alteration or misuse.

Where data is transferred outside the UK or EEA (for example, to certain hosting or email providers), we ensure that appropriate safeguards are in place under UK GDPR.

We retain your personal data only for as long as is necessary for the purposes for which it was collected, including:

• Active service and booking records — for the duration of the customer relationship
• Warranty obligations — for the full term of the warranty plus a reasonable period thereafter to handle late claims
• Accounting and tax records — for a minimum of 6 years, as required by HMRC
• Marketing data — until you withdraw consent or after a reasonable period of inactivity

When data is no longer required, it will be securely deleted or anonymised.

You have the following rights in relation to your personal data:

• Right to be informed about how your data is used (this policy)
• Right of access — to obtain a copy of the personal data we hold about you
• Right to rectification — to have inaccurate or incomplete data corrected
• Right to erasure — to request deletion where there is no compelling reason for us to keep it
• Right to restrict processing — to limit how we use your data in certain circumstances
• Right to data portability — to receive your data in a structured, commonly used and machine-readable format
• Right to object — including to direct marketing or processing based on legitimate interests
• Rights related to automated decision-making — we do not currently use solely automated decision-making

To exercise any of these rights please email us at Sales@ykmotors.co.uk. We will respond within one calendar month, in line with UK GDPR.

If you are unhappy with how we have handled your data you also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Where you submit a warranty claim, you may be required to provide supporting evidence such as photographs, video files, diagnostic readouts or written descriptions of the fault. By submitting this material you understand and agree that:

• It will be stored securely against your claim record
• It will be reviewed by YK Services and, where relevant, our technicians, partner dealerships, insurers, or independent assessors for the purpose of assessing the claim
• It will be retained for the period of the warranty and a reasonable period thereafter for record-keeping, dispute resolution and regulatory compliance
• It will not be used for any other purpose without your consent

Our website may use cookies and similar technologies to operate the site, remember your preferences, secure your session and gather analytics on how the site is used. You can control or disable cookies via your browser settings. Essential cookies required for the site to function cannot be disabled without affecting your experience.

We may use privacy-respecting analytics to understand how visitors use the site so we can improve performance, layout and content.

We use trusted third-party services to operate this website and our business, which may include:

• Hosting and infrastructure providers
• Email and notification services (e.g. Resend)
• Object storage providers for warranty claim evidence
• Booking, scheduling, payment and CRM systems
• Analytics and performance monitoring tools

All third-party providers we use are expected to comply with applicable UK data protection regulations and operate under appropriate data processing agreements.

In the unlikely event of a personal data breach, we will take prompt and appropriate action to investigate and contain the incident. Where the breach is likely to result in a risk to your rights and freedoms, we will notify you and the UK Information Commissioner's Office within the timeframes required by UK GDPR (within 72 hours of becoming aware of the breach where feasible).

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or for other operational reasons. The latest version will always be available on this page with the "Last updated" date below. We encourage you to review this policy periodically.

For any privacy or data protection enquiry — including subject access, correction, deletion or any other right — please contact: