Privacy
Privacy Policy
Last updated: February 2026. Plain English. No legalese where we can avoid it.
Who we are
JobFlowMe is operated from the United Kingdom. We provide a workflow platform for automotive garages and their customers. The data controller is JobFlowMe Ltd.
What we collect
We collect only what’s needed to run the service:
Account information: Name, email, phone number, garage name, role.
Vehicle data: Registration, make, model, MOT dates. Used for job tracking and reminders.
Job data: Status updates, approval decisions, messages, timestamps, audit trail entries.
Payment data: Processed by Stripe. We never see or store card numbers.
Usage data: Page views, feature usage, and error logs to improve the service.
Why we collect it
Every piece of data serves the core service:
To deliver the workflow: Status visibility, written approvals, notifications, and audit trails.
To prevent disputes: Immutable records of who approved what, when, and for how much.
To send notifications: SMS, email, and WhatsApp alerts about job status and approvals.
To improve the product: Anonymous usage patterns help us build better features.
How we protect it
Encryption: TLS 1.3 in transit, AES-256 at rest.
Access control: Role-based permissions. Staff see only what their role requires.
Audit logging: All access to customer data is logged.
UK hosting: Data stored on UK/EU infrastructure. Not routed through US servers.
Data sharing
We do not sell your data. Ever. We share data only with service providers essential to running the platform: Stripe (payments), Twilio (SMS), Resend (email), and hosting providers. Each operates under appropriate data processing agreements.
Retention
Job data and audit trails are retained for as long as your account is active, plus a reasonable period for dispute resolution (typically 6 years, aligned with UK limitation periods). You can request deletion of your account and personal data at any time.
Your rights (UK GDPR)
Access: Request a copy of all data we hold about you.
Correction: Update or correct inaccurate information.
Deletion: Request deletion of your personal data (subject to legal retention requirements).
Portability: Receive your data in a machine-readable format.
Objection: Object to processing for direct marketing.
To exercise any right, email privacy@jobflowme.com.
Cookies
We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. No cookie consent banner needed because we only use strictly necessary cookies.
Contact
For any privacy questions or concerns:
privacy@jobflowme.com