Privacy Notice

Last updated: September 2026

1. Who we are

KAPautolocks is a trading name of KAP DIAGNOSTICS.COM LIMITED, a company registered in England and Wales under company number 07119690.

Registered office and principal business address:

KAP HQ
12 Barlow Street
Rochdale
Lancashire
England
OL16 1TG

Website: www.kapautolocks.com
Email: info@kapdiagnostics.com
Telephone: 0333 123 0786

KAP DIAGNOSTICS.COM LIMITED is the controller of the personal information described in this Privacy Notice.

We are registered with the Information Commissioner's Office (ICO) and pay the applicable data protection fee.

2. About this Privacy Notice

This Privacy Notice explains how we collect, use, store and protect personal information when you:

  • visit the KAPautolocks website;
  • contact us or request a quotation;
  • enquire about or purchase our services;
  • book or receive automotive locksmith services from us; or
  • otherwise communicate or do business with KAPautolocks.

We process personal information in accordance with applicable UK data protection law, including the UK GDPR and Data Protection Act 2018.

3. Personal information we may collect

Depending on your interaction with us, we may collect:
Website and enquiry information

  • your name;
  • telephone number;
  • email address;
  • information contained in an enquiry;
  • vehicle make and model;
  • vehicle registration number; and
  • any other information you choose to provide.

Customer and job information

Where an enquiry progresses to a booking or job, we may also collect:

  • your address and postcode;
  • service/location address;
  • vehicle details and registration number;
  • details of the work requested and performed;
  • job history;
  • parts, keys, components or other items supplied or used;
  • quotation and invoice information;
  • payment and transaction records;
  • communications relating to the job; and
  • records required for warranty, accounting, security, compliance or dispute purposes.

Identity and vehicle-authority verification

Because automotive locksmith services can involve access to, or security systems of, vehicles, we carry out appropriate identity and authority checks for relevant services.
Where required, this may include collecting photographic identification, such as a driving licence, together with vehicle ownership, keeper or authority information.
These checks help us verify that the person requesting security-related work is appropriately entitled to request it, protect customers and KAPautolocks against fraud or misuse, and maintain an appropriate audit trail.
Certain security-related work may also be subject to SERMI requirements and associated record-keeping obligations.
We do not collect identity documentation for every type of job where it is not required by our applicable security or due-diligence procedure.

4. How we collect information

We may obtain personal information:

  • directly from you through our website;
  • by telephone or email;
  • when you request a quotation;
  • during booking or provision of a service;
  • through our ServiceM8 job-management process;
  • from documentation you provide to establish identity or authority;
  • through correspondence concerning a job or invoice; and
  • automatically through essential website technologies.

Our website does not currently provide online customer accounts, accept online payments or allow customers to complete a service booking directly through the website.

5. Why we use your information and our lawful bases

We use personal information only where we have an appropriate lawful basis.

Responding to enquiries and quotations

We use your contact, vehicle and enquiry information to respond to your request and take steps at your request before potentially entering into a contract with you.
Lawful basis: steps necessary before entering into a contract and, where appropriate, our legitimate interests in managing customer enquiries.

Providing our services

We use customer, contact, vehicle, job and transaction information to arrange and provide automotive locksmith services, communicate with you, manage the job, supply parts or keys, issue invoices and maintain appropriate service records.
Lawful basis: performance of a contract and steps taken at your request before entering into a contract.

Security, identity verification and fraud prevention

For relevant work, particularly work involving vehicle access or security, we use identity, vehicle and authority information to verify the person requesting the work, reduce the risk of fraud, theft, unauthorised access and misuse, protect our customers and business, and maintain an appropriate security audit trail.
Lawful basis: our legitimate interests in protecting customers, vehicles and our business, preventing and detecting fraud and misuse, and maintaining appropriate security controls. Where another applicable legal basis or requirement applies, we will process the information accordingly.

SERMI and other applicable requirements

Where a job falls within applicable SERMI security-related requirements, we process and retain the information required to satisfy the applicable scheme requirements and demonstrate appropriate due diligence.
Lawful basis: this will depend on the particular requirement and may include legitimate interests and/or compliance with applicable legal obligations.

Accounting, taxation and business administration

We use appropriate customer, job, invoice and transaction records for bookkeeping, accounting, taxation, stock management, auditing and normal business administration.
Lawful basis: compliance with legal obligations and our legitimate interests in properly administering our business.

Establishing, exercising or defending legal claims

We may retain and use relevant information where reasonably necessary to handle complaints, disputes, insurance matters or establish, exercise or defend legal claims.
Lawful basis: legitimate interests and, where applicable, other lawful bases available under data protection law.

6. Our legitimate interests

Where we rely on legitimate interests, those interests may include:

  • preventing and detecting fraud or misuse;
  • protecting customers and their vehicles;
  • preventing unauthorised vehicle access;
  • protecting our business, technicians and assets;
  • maintaining appropriate job and security records;
  • responding to and managing customer enquiries;
  • resolving complaints and disputes;
  • maintaining appropriate evidence of work undertaken; and
  • operating and protecting our business effectively.

We consider whether our interests are necessary and proportionate and balance them against the rights and interests of the people whose information we process.

7. Who we may share information with

Where necessary, personal information may be processed by or shared with organisations that help us operate our business, including:

  • ServiceM8, which we use for job and customer management;
  • QuickBooks Online, which we use for accounting and related business records;
  • our website/email hosting provider;
  • website and IT support providers;
  • professional advisers such as accountants, insurers or legal advisers;
  • payment/banking providers where applicable;
  • relevant manufacturers, technical/security systems or service providers where required to perform authorised work;
  • SERMI-related bodies where applicable;
  • law enforcement, regulatory bodies, courts or other authorities where required or permitted by law.

We only disclose information where there is an appropriate reason to do so.
Where another organisation processes information on our behalf, we expect appropriate data-protection and security arrangements to be in place.

8. International transfers

Some technology or service providers may process information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is made in accordance with applicable UK data-protection law, including use of applicable adequacy arrangements or appropriate safeguards where required.

9. How long we keep information

We do not apply a single retention period to every type of personal information.
We retain information only for as long as reasonably necessary for the purposes for which it was collected, taking account of:

  • the nature of the service provided;
  • security and fraud-prevention requirements;
  • accounting, tax and business record-keeping requirements;
  • warranty and service-history requirements;
  • the establishment, exercise or defence of legal claims;
  • applicable SERMI requirements;
  • other legal, regulatory or accreditation requirements; and
  • the nature and sensitivity of the information.

Records relating to qualifying SERMI security-related work are retained for at least the minimum period required by the applicable SERMI requirements.
Customer and job records may need to be retained for longer where there is a continuing legitimate, legal, accounting, security or evidential reason for doing so.
Website enquiries which do not progress to a job are periodically reviewed and deleted when they are no longer reasonably required.
We periodically review the personal information we retain and our reasons for continuing to retain it.

10. How we protect personal information

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Access to customer and security information is restricted to people who require it for legitimate business purposes.
Our operational systems include security and due-diligence controls intended to ensure that appropriate verification procedures are followed for relevant vehicle-security work.

11. Marketing

We do not currently use personal information collected through KAPautolocks to send email or SMS marketing communications to previous customers, and the website does not currently operate a marketing newsletter.
If this changes, we will update our practices and privacy information and obtain consent where required.

12. Cookies and website technologies

Our website uses technologies necessary for its operation and may use additional cookies or similar technologies as described in our Cookie Policy.
At launch, the website is not intended to use Google Analytics, Google Ads conversion tracking, Meta/Facebook Pixel or similar advertising or behavioural tracking technologies.
If non-essential analytics or advertising technologies are introduced in future, our Cookie Policy and consent arrangements will be updated as appropriate.

13. Your data-protection rights

Depending on the circumstances and the lawful basis on which we process your information, you may have rights including:

  • the right to be informed about how your information is used;
  • the right to request access to your personal information;
  • the right to request correction of inaccurate or incomplete information;
  • the right to request deletion of information in certain circumstances;
  • the right to request restriction of processing in certain circumstances;
  • the right to object to certain processing based on legitimate interests;
  • the right to data portability where applicable; and
  • rights relating to certain automated decision-making where applicable.

These rights are not absolute and may be subject to legal exemptions or circumstances in which we are entitled or required to retain information.
To exercise a data-protection right, contact:
info@kapdiagnostics.com
We may need to verify your identity before acting on a request.

14. Your right to object

Where we process your personal information on the basis of legitimate interests, you have the right to object to that processing.
If you object, we will consider your request and stop processing the information unless we have compelling legitimate grounds to continue which override your interests, rights and freedoms, or the processing is required for the establishment, exercise or defence of legal claims.

15. Complaints

If you have concerns about how we use your personal information, please contact us first so that we can investigate.
You also have the right to complain to the UK's data-protection regulator, the Information Commissioner's Office (ICO).

16. Changes to this Privacy Notice

We may update this Privacy Notice where our services, systems, legal obligations or data-processing practices change.
The latest version will be published on this website with the date of the most recent update.