Privacy Policy

Privacy Policy – H.A.S.P.R.O (Hamblett Auto Services Platform for Reporting & Operations)

(UK GDPR Compliant – Fleet Management Portal)

1. Data Controller

Hamblett Auto Services Ltd The Old Goods Yard, Off Midland Rd, Chapel‑en‑le‑Frith, High Peak, SK23 9RE

Telephone: 01298 814749

Primary Contact: Sarah Hamblett

This Privacy Policy applies to H.A.S.P.R.O – Hamblett Auto Services Platform for Reporting & Operations, operated by Hamblett Auto Services Ltd (“we”, “us”, “our”).

2. Purpose of H.A.S.P.R.O

H.A.S.P.R.O is a secure, role‑based fleet‑management platform provided to multiple external customers. It enables operators to manage DVSA‑required compliance records for their own vehicles, including:

MOT tracking
PMI scheduling and results
Brake test records
Defect reporting and rectification
Tacho calibration certificates
DVSA compliance documentation uploads
Driver compliance data
General fleet maintenance history

H.A.S.P.R.O does not collect or process telematics or GPS data.

3. Categories of Personal Data We Collect

3.1 Driver Data

Used solely for DVSA compliance purposes:

Full name
Address
Email address
Driving licence number
DVSA‑related compliance dates (e.g., CPC expiry if stored)

3.2 Customer Account Data

Customer name
Contact details
Login credentials (managed securely by Wix Members)

3.3 Vehicle Compliance Data

Required under DVSA’s Guide to Maintaining Roadworthiness:

MOT dates and results
PMI schedules and inspection outcomes
Brake test results
Safety inspection sheets
Defect reports and rectification records
Tacho calibration dates
DVSA‑related compliance documents

3.4 Uploaded Documents

Uploaded by customers or admins:

MOT certificates
VT30 fail sheets
PMI sheets
Brake test reports
Tacho calibration certificates
Defect photos
Other DVSA compliance documents

3.5 Portal Usage & Technical Data

Collected automatically by Wix:

IP address
Browser type
Device type
Login timestamps
Audit logs
Actions taken within H.A.S.P.R.O

3.6 No Telematics Data

H.A.S.P.R.O does not collect:

GPS location
Speed
Vehicle tracking
Engine diagnostics
Telematics feeds

4. Legal Bases for Processing

4.1 Contractual Necessity

We process customer and fleet data to provide H.A.S.P.R.O as a service to multiple external customers.

4.2 Legal Obligation (DVSA)

We process and retain DVSA‑required compliance records to support roadworthiness obligations.

4.3 Legitimate Interests

For:

Portal security
Fraud prevention
System auditing
Ensuring correct role‑based access
Maintaining accurate fleet compliance history

4.4 Consent

Only applies to Wix default cookies where required by PECR.

5. How Data Is Shared

5.1 With the Customer’s Own Users

Customers only see their own fleet data within H.A.S.P.R.O. No cross‑customer visibility is possible.

5.2 With DVSA or Enforcement Bodies

Only when legally required or during compliance investigations.

5.3 With Wix (as our hosting provider)

Wix processes data on our behalf as a secure platform provider.

We do not share data with:

Marketing companies
Analytics providers
Telematics providers
Third‑party advertisers

6. Security Measures

6.1 Wix Platform Security

Wix provides:

HTTPS/TLS encryption
Password hashing
Secure global data centres
Automatic security patching
DDoS protection
Redundant backups
Audit logging
Role‑based permissions
Secure authentication via Wix Members

6.2 Role‑Based Access Control

Drivers, managers, technicians, and customers only see pages permitted for their role.
Customers only see their own fleet data.
Admins and customers can upload DVSA documents.

6.3 Data Minimisation

We only collect data required for DVSA compliance and portal functionality.

7. Data Retention

7.1 DVSA Compliance Records

MOT, PMI, brake tests, defect reports, tacho certificates, and related documents Retained for 18 months (DVSA minimum is 15 months; 18 months provides a safe operational buffer.)

7.2 Driver DVSA Data

Names, licence numbers, DVSA compliance dates Retained for 18 months

7.3 Uploaded Documents

MOT certificates, VT30s, PMI sheets, brake tests, tacho certificates Retained for 18 months

7.4 Customer Account Data

Retained until the customer deletes their account.

7.5 Audit Logs

Retained for 18 months.

7.6 Portal Usage Data

Retained for 12 months.

8. Cookies & Tracking

H.A.S.P.R.O uses only Wix default cookies, which include:

Essential cookies (required for login and security)
Functional cookies (for site performance)

We do not use:

Google Analytics
Meta Pixel
Marketing cookies
Behavioural tracking
Third‑party analytics

A cookie banner may appear depending on Wix’s default behaviour.

9. International Data Transfers

Wix may store data in secure data centres outside the UK. Transfers are protected by:

Standard Contractual Clauses (SCCs)
Wix’s global security framework
UK GDPR‑compliant safeguards

10. Your Rights Under UK GDPR

Customers and drivers have the right to:

Access their data
Correct inaccurate data
Request deletion (where legally permitted)
Object to certain processing
Request portability of data
Withdraw consent (for cookies only)

Requests can be made via: hamblettautos@hotmail.com

11. Data Breach Procedure

If a data breach occurs:

We will investigate immediately
Contain and mitigate the issue
Notify affected customers
Notify the ICO where legally required
Provide guidance on protective steps

12. Changes to This Policy

We may update this policy to reflect changes in:

DVSA requirements
UK GDPR
H.A.S.P.R.O functionality
Security practices

Customers will be notified of significant changes.

13. Contact

For privacy enquiries:

hamblettautos@hotmail.com

01298 814749