Privacy Policy

NGC Hybrid & EV Ltd ("we", "us", "our") is a company registered in England and Wales (company number 15301784). We operate https://www.ngc-hybridev.co.uk and provide hybrid & EV battery repairs, servicing and parts from Unit 15 Cedars Hill, Brockford, Suffolk IP14 5PQ.

You can reach us at contact@ngc-hybrid.co.uk or 01473 561230.

We are the data controller for the personal information described in this policy and process it in accordance with UK GDPR and the Data Protection Act 2018.

Contact form: your name, email address, phone number, vehicle details and the message you send us.

Sell-your-vehicle enquiries: vehicle registration, mileage, condition details and your contact information.

Bookings & payments: your name, address, contact details, vehicle information, work performed and payment status.

Shop orders (when enabled): billing address, delivery address and order history. Card payments are processed by our payment provider — we never see or store full card numbers.

Technical data: IP address, browser type, pages visited and referrer, collected via strictly-necessary and (with your consent) analytics cookies.

We do not knowingly collect data from children, and we do not collect special-category data (such as health or biometric information).

To respond to enquiries, provide quotes and arrange work on your vehicle.

To fulfil contracts you enter into with us (repairs, servicing, parts supply, shop orders).

To comply with our legal obligations, including tax, accounting and consumer-protection law.

With your consent, to send occasional updates about our services — you can withdraw consent at any time.

Contract: processing necessary to provide the services you ask us for.

Legal obligation: keeping invoicing and accounting records as required by HMRC.

Legitimate interests: running and improving our website and protecting it from abuse.

Consent: marketing emails and non-essential cookies.

Our hosting and database providers (Vercel and Supabase), which store site content, bookings and customer records on our behalf.

Email and messaging providers used to deliver booking confirmations and replies to your enquiries.

Payment processors when you pay for goods or services online.

Parts suppliers and couriers, only where needed to fulfil a specific order.

HMRC, our accountants and our insurers where required by law or to protect our legitimate interests.

We do not sell your personal data to third parties.

Your data is stored with reputable providers using encryption in transit (TLS) and at rest, with access restricted to staff who need it to do their job.

Admin access to our systems is protected by authentication, and we review who has access regularly.

If a personal-data breach occurs that risks your rights or freedoms, we will notify the ICO within 72 hours and inform you where the law requires.

Our website and database are hosted in the UK/EEA (our database is located in the EU). Some service providers (such as email delivery) may process data outside the UK.

Where data leaves the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement / standard contractual clauses to keep it protected to UK GDPR standards.

Contact and quote enquiries: up to 24 months from your last contact, then deleted.

Customer, job and payment records: 7 years to comply with HMRC requirements.

Marketing consent records: until you withdraw consent, plus a short audit period.

Website analytics: aggregated and anonymised after 14 months.

Under UK GDPR you have the right to access, correct, delete or restrict our processing of your personal data, to object to processing, to data portability, and to withdraw consent at any time where processing is based on consent.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

To exercise any of these rights, email contact@ngc-hybrid.co.uk. We will respond within one month and will never charge you for a reasonable request.

If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

We use a small number of cookies and similar technologies (such as local storage) to make the site work and, with your consent, to understand how it is used. See our Cookie Policy for the full list and how to change your choices at any time.

We may update this policy from time to time. The current version is always shown on this page with the 'last updated' date above.