Privacy Policy

WAC Automotive Solutions Ltd ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal information we collect when you contact us or use this website, why we collect it, and what rights you have over it. It applies to wacauto.co.uk and to any enquiry you make by phone, email, WhatsApp or our contact form.

1. Who we are

WAC Automotive Solutions Ltd is a mobile auto locksmith and vehicle security business operating across Shrewsbury, Shropshire, Powys and the West Midlands. The business is operated by William Church.

For the purposes of UK data protection law, we are the data controller for the personal information described in this policy.

2. What information we collect

We only collect information that we need in order to respond to your enquiry and carry out work on your vehicle. Depending on how you contact us, this may include:

• Contact details — your name, phone number and email address
• Location details — the address, postcode or roadside location where your vehicle is
• Vehicle details — make, model, year and registration number
• Enquiry details — a description of the problem, such as whether keys are lost, whether a working key remains, or which security system you are interested in
• Proof of ownership — for key replacement and programming work we are required to verify that you are entitled to have keys made for the vehicle. This may involve viewing identification and vehicle documentation.
• Website usage data — see the cookies section below

We do not collect payment card details through this website. Payment is taken directly at the time of work.

3. How we use your information

We use the information you provide for the following purposes only:

• To respond to your enquiry and provide a quotation
• To identify the correct key type, security system or programming route for your vehicle
• To attend your location and carry out the work you have requested
• To verify vehicle ownership before producing or programming keys
• To keep a record of work carried out, which may be needed for warranty, insurance or future servicing
• To meet our legal and regulatory obligations, including those relating to SERMI-accredited work
• To send you an invoice and maintain accounting records

We do not sell your information. We do not use it for marketing unless you have specifically asked us to contact you about a service.

4. Legal basis for processing

Under UK GDPR we must have a lawful basis for using your personal information. The bases we rely on are:

• Contract — where processing is necessary to provide the service you have asked for, such as attending your vehicle and replacing a key
• Legal obligation — where we are required to keep records or verify identity, including for accredited vehicle security work and for HMRC accounting requirements
• Legitimate interests — for keeping records of completed work, responding to enquiries, and protecting our business against fraudulent requests. We balance this against your rights and only process what is necessary.
• Consent — for non-essential website cookies and for any optional marketing communication, which you can withdraw at any time

5. Who we share information with

We do not share your personal information with third parties for marketing purposes. We may share limited information in the following circumstances:

• Vehicle manufacturers and accredited data providers — where secure vehicle data must be requested to complete key or immobiliser programming under the SERMI scheme
• Our accountant — for invoicing and statutory accounting purposes
• Service providers — such as our website host and email provider, who process data on our behalf under contract
• Law enforcement or insurers — where we are legally required to do so, or where a vehicle is reported stolen and we are asked to confirm work carried out

All third parties we work with are required to keep your information secure and to use it only for the purpose we have shared it for.

6. Cookies and website analytics

This website uses cookies — small text files stored on your device — to make the site work properly and to help us understand how visitors use it.

Essential cookies

These are required for the website to function, for example to remember your cookie preferences or to keep a contact form working correctly. They cannot be switched off.

Analytics cookies

We use analytics to understand which pages visitors find useful and how they arrived at the site. This information is aggregated and does not identify you personally. We may also use Google Search Console, which reports search performance without sharing individual user data with us.

Third-party content

Our reviews section displays live Google reviews through a third-party widget. When this loads, the provider may set its own cookies. Social media links to Facebook and Instagram do not set cookies until you click them.

You can control or delete cookies through your browser settings. Blocking all cookies may affect how parts of this website function.

7. How long we keep your information

We keep personal information only for as long as we need it:

• Enquiries that do not lead to work — deleted within 12 months
• Records of completed work — kept for 6 years, in line with the standard limitation period for contract claims and HMRC record-keeping requirements
• Accounting and invoice records — kept for 6 years as required by HMRC
• Vehicle security and key programming records — retained as required under the accreditation schemes we operate within

8. Your rights under UK GDPR

You have the following rights over the personal information we hold about you:

• Access — request a copy of the information we hold about you
• Rectification — ask us to correct anything inaccurate or incomplete
• Erasure — ask us to delete your information, where we are not legally required to keep it
• Restriction — ask us to limit how we use your information
• Objection — object to processing carried out under legitimate interests
• Portability — request your information in a transferable format
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, email info@wacauto.co.uk or call 07356 240424. We will respond within one month. There is no charge for making a request.

9. How we protect your information

This website uses an SSL certificate, so information sent through it is encrypted in transit. Enquiry details and work records are stored securely and accessed only by William Church, who operates the business. Because WAC is a sole-operator business, the number of people with access to your information is deliberately minimal.

Vehicle security data accessed under the SERMI scheme is handled in accordance with the scheme's own security requirements.

10. Children's privacy

Our services are provided to vehicle owners and are not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time to reflect changes in how we operate or in the law. The date at the top of this page shows when it was last updated. This version was published in September 2026.

12. How to contact us or make a complaint

If you have a question about this policy or how we handle your information, please contact us first — most issues can be resolved quickly and directly.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or by calling 0303 123 1113.