Privacy policy

Who is responsible

The data controller is George Cameron trading as CCUS Scotland, 47 Countess Street, Saltcoats, KA21 5HP. Contact support@ccusscotland.co.uk about privacy, your records or a deletion request.

CCUS Customer, CCUS Connect and Workshop Pro are connected parts of our service. Connect manages your customer identity; Workshop Pro holds the service and financial records shown in Customer.

Information we use

• Account and contact details: name, email, telephone number, addresses, customer references, sign-in credentials and verification information. Connect stores protected credential information and public passkey information; device biometrics used to unlock a passkey are handled by your device.
• Repairs and orders: device details and identifiers, reported faults, repair progress, approvals, inspection results, warranty dates, purchases, collection/delivery and Mail-In details, messages, photographs and documents. We obtain these from you, our staff and the service records linked to your account. Repair access information is used where you supply it for the work; do not include unrelated private information in messages or uploads.
• Payments and Club: invoices, amounts, payment status and transaction references, loyalty points, savings, reservations and settlement records. Online card details are entered into Stripe’s checkout; Customer receives payment references/status rather than collecting your full card number or security code.
• App and security information: IP addresses, browser/device information, session identifiers, sign-in/security events, notification preferences, push registration tokens, Firebase installation identifiers on Android, and delivery results. Optional Wallet use involves membership identifiers, name, barcode, points and savings displayed on your pass.

Why we use your information

• Providing the service — contract: create and manage your account, arrange and fulfil repairs, collections and deliveries, provide progress updates, process approvals/payments, administer Club and support warranties. This also covers steps you request before entering a contract.
• Tax and other legal requirements — legal obligation: retain the necessary accounting evidence and respond to applicable lawful requests.
• Security, support and claims — legitimate interests: protect accounts, prevent misuse, investigate failures, answer enquiries and establish or defend claims. We limit this processing to what is necessary and consider your rights.
• Optional features: you choose whether to enable push notifications or add a Wallet pass. Device notification permission can be withdrawn in app/device settings. Necessary service updates are part of providing your service; optional marketing requires its own applicable permission and is not authorised merely by enabling service notifications.

We need sufficient contact and service information to create an account and carry out your requested work. If required information is not provided, we may be unable to offer the relevant service. Optional push and Wallet features are not required to hold an account.

Who receives information

Authorised CCUS staff use information needed for their work. Our service providers receive the information needed for the features they supply:

• OVHcloud: hosting the CCUS applications and their records.
• Crazy Domains: email services, including verification and support messages.
• Stripe and relevant payment providers: online payment processing and related fraud/security checks.
• Apple and Google: push delivery through Apple Push Notification service and Firebase Cloud Messaging; optional Apple Wallet and Google Wallet passes. Native push alerts use a generic update message, with the details viewed after opening Customer. Web push uses your browser’s delivery service.
• Delivery/service partners and professional advisers: information necessary to fulfil a collection, delivery or repair, or provide accounting/legal assistance. Authorities receive information where disclosure is legally required.

Wallet and payment providers also process information under their own notices: Apple, Google, Firebase and Stripe.

International processing

Providers such as Apple, Google and Stripe operate internationally, including in the United States, so using their services may involve processing outside the UK. Protection depends on the service and recipient: applicable adequacy arrangements or contractual safeguards, including standard contractual clauses with the UK addendum where required, are used for relevant transfers. The providers’ linked notices describe their arrangements. You can contact us for information about the safeguards applicable to your data and how to obtain a copy.

Cookies, device storage and notifications

Customer uses cookies and device/browser storage for secure sign-in, persistent sessions, security checks, preferences such as theme, and app operation. Clearing this storage may sign you out or reset preferences. Signing out revokes the relevant app session. This notice does not ask you to accept advertising cookies.

Push registration identifies the app installation so updates can reach your device. You can disable notifications without deleting your account. Removing an account removes its unnecessary notification registrations as part of the deletion process. You control whether notification previews are visible on your lock screen. Wallet passes already saved on a device may need to be removed on that device. On updated Android apps, account deletion also requests deletion of the Firebase installation identifiers registered to your account. Requests that fail remain pending for retry. The app separately clears its current Firebase installation when it recognises that you have signed out or changed accounts; if offline, cleanup retries when you reopen the app with a connection. Enabling notifications after signing in can create a new installation identifier. Google states that associated installation data is removed from its live and backup systems within 180 days after a deletion request; accepting a request does not mean immediate provider-wide erasure. Older app versions may not have supplied their installation identifiers to us, so please update and open the app or contact us for help with those installations.

How long we keep information

We distinguish your login from records needed to provide services or meet obligations. Retention depends on the record and its purpose:

• Account information: while needed to operate your account. On confirmed deletion, access is revoked and unnecessary account/profile data, sessions and notification registrations are removed through the coordinated deletion process.
• Open work and Club settlement: the minimum details needed until repairs, deliveries, refunds, savings or reservations are resolved, followed by any applicable warranty, accounting or documented claim retention.
• Warranty evidence: necessary repair and identifying information through the actual outstanding warranty period. At expiry we review whether another justified purpose remains; we do not retain every note or photo solely because a warranty exists.
• Accounting records: relevant sole-trader tax records normally for at least five years after the 31 January submission deadline for the relevant tax year. Late returns, enquiries or other applicable requirements can require longer. This is not a blanket period for all customer data.
• Disputes and incidents: relevant evidence under a documented hold, with a reason and review date, until that purpose ends.
• Security logs: restricted Connect security entries have a 90-day retention policy, except specific evidence held for an incident. Other operational records are reviewed for their service/security purpose; this is not a claim that every log is erased after 90 days.
• Backups: deleted information may remain in restricted recovery copies until their rotation or expiry. Workshop’s configured rotation is seven daily, four weekly and three monthly periods. Superseded Connect recovery copies have a 90-day expiry policy when a verified replacement exists; copies needed for an unfinished recovery transaction remain protected. These exceptions mean there is no universal 90-day erasure promise for all backups. Deletion restrictions must be reapplied before a restored system returns to use.
• Deletion records: minimal restricted operation references and technical identifiers are kept while needed to demonstrate handling and prevent old backups restoring a deleted account. They are not treated as anonymous merely because identifiers are hashed.

Staff review retained repair notes, messages and documents and record what is still necessary. Records become eligible for removal when their retention reasons have ended. We explain relevant retained categories when responding to your request.

Your choices and rights

You can ask for access to your personal data, correction, deletion, restriction or, where applicable, a portable copy. You can withdraw consent for processing based on consent without affecting earlier lawful processing. Rights depend on the circumstances and may be limited by necessary legal obligations or claims.

Use Delete account or email support@ccusscotland.co.uk. We may ask for proportionate information to verify your identity; never email your passcode, payment-card details or device unlock code. We ordinarily respond within one calendar month and explain any lawful extension or reason we cannot fulfil a request.

Deletion does not cancel a warranty or remove statutory rights. Remaining Club loyalty points become void. Savings and active reservations are retained for management settlement, rather than automatically forfeited by deleting the login. Management records the outcome, which may include a gift-card transfer or another applicable settlement.

If you have a concern, contact us first so we can investigate. You also have the right to complain to the Information Commissioner’s Office (ICO).

Changes to this notice

We update this page when our services or data practices change. The date at the top identifies the current notice; significant changes will be brought to customers’ attention through an appropriate service channel.