Privacy policy.

Last updated 14 October 2026

Who is responsible

Dynamo Works Limited, trading as Carb Cleaning, is responsible for the personal information collected through carbcleaning.co.uk. Write to 52 Kinglake House, Denman Avenue, Southall, UB2 4GA or email admin@carbcleaning.co.uk about privacy or your rights.

What we collect and where it comes from

You provide your name, email, optional phone number, return address, account details, part descriptions and dimensions, service choices, condition notes, enquiries and correspondence. We record quotations, order progress and acknowledgements of the terms and service risks. Passwords are hashed. We may retain photographs or inspection notes supplied or created in relation to a job. Please avoid sending unrelated sensitive information.

Our servers receive technical information such as IP addresses, request times, browser details and security events. Payment providers process card or banking details on their own systems; we receive the information needed to identify a payment and manage the order, and store the payment link and status. We do not store full card details.

Why we use information

• Steps towards a contract and performance of a contract: answering quote requests, managing accounts and accepted jobs, arranging payment and returning parts.
• Legitimate interests: responding to general enquiries, protecting the website against abuse, administering the workshop and handling complaints or legal claims, balanced against your rights.
• Legal obligations: retaining records required for tax, accounting or other applicable duties.

Acknowledging this notice is not consent to marketing. We do not sell your information or use these forms to subscribe you to advertising. We do not make decisions with legal or similarly significant effects solely by automated processing.

Who receives it

Access is limited to those who need it to provide the service. Hosting, email and IT providers process information needed to run the site; payment providers process payments; and delivery providers receive the details necessary to return your items. Professional advisers or public authorities may receive information where needed to meet a legal obligation or manage a claim. A provider may have its own privacy notice.

Service providers may process information outside the UK. Where a restricted international transfer requires safeguards, we must use an applicable adequacy arrangement or appropriate contractual safeguards. Contact us for details of the providers and transfer safeguards relevant to your information.

How long information is kept

We retain order, payment and associated complaint records for the period needed to complete the job and meet accounting or legal requirements, normally up to six years after the relevant financial year. Enquiries that do not become orders are normally reviewed for deletion after 12 months. Account information is retained while the account is active; contact us to close it. Closing an account does not automatically remove records that must be retained for another stated purpose.

Routine application logs are retained for up to 30 days. Security incidents, unresolved complaints and legal holds may require relevant records to be kept longer. Copies in backups expire in the normal backup cycle and are not used for routine operations. We limit information retained to what is needed.

Cookies and external links

Essential cookies maintain your session, protect forms against forgery and support login. A normal session expires after 120 minutes of inactivity. If you choose “Keep me signed in”, a persistent login cookie may remain for up to five years unless you log out, clear it or it is invalidated. Avoid this option on a shared device. We do not use analytics or advertising cookies. Fonts and site assets are served from our own site. External payment and other websites operate under their own policies.

Security and your choices

We use HTTPS, password hashing and access controls. Keep your password private and contact us if you suspect unauthorised access. No online system can be guaranteed completely secure.

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal information, and object to processing based on legitimate interests. These rights are subject to legal conditions. We may need to verify your identity before responding and normally respond within one month. If we ever rely on consent for a separate purpose, you may withdraw it without affecting earlier lawful processing.

Complaints and changes

Please contact us first so we can address concerns. You may complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We update this notice when practices change and show the current date above.