Privacy Policy
This policy explains how Ubar collects, uses, and protects your personal information when you use our website or services.
1. Who we are
Ubar is a local service business based in Bangor, North Wales, providing taxi and private hire, roadside recovery (including jump starts and mobile tyre fitting), and device repair services. We operate the website at ubar.uk. For data protection purposes we are the data controller.
2. What personal data we collect
We collect personal data only when you actively provide it to us. This includes:
- Contact and request forms — your name, email address, phone number, message content, and any photos you choose to attach.
- Payment page — your name, email address, and payment reference. Card details are processed directly by SumUp and never seen or stored by us.
- Account registration — your name, email address, and password (stored securely using WordPress encryption).
We do not collect sensitive personal data (such as health, race, religion, or financial account details) and we do not use automated profiling or decision-making.
3. Why we collect it and our legal basis
- To respond to your enquiry or service request — legal basis: legitimate interests / contract performance.
- To process your payment — legal basis: contract performance.
- To send you a receipt or confirmation — legal basis: contract performance.
- To maintain your account — legal basis: contract performance / your consent at registration.
- To comply with legal obligations — legal basis: legal obligation.
4. How we use your data
Your data is used only for the purpose it was collected. We do not sell, rent, or share your personal data with third parties for marketing purposes. We will only share your data where:
- It is necessary to deliver the service you requested (e.g. passing payment details to SumUp for processing).
- We are required to do so by law.
5. Third-party services
We use the following third-party services on this website:
- SumUp — payment processing on the /payment/ page. SumUp processes card details directly and is PCI DSS compliant. See SumUp’s Privacy Policy.
- Cloudflare — content delivery and security. Cloudflare may set essential security cookies. See Cloudflare’s Privacy Policy.
- Leaflet / OpenStreetMap — interactive coverage maps on service pages. Map tiles are served by OpenStreetMap contributors.
6. Cookies
We use cookies to make our website work correctly and to remember your preferences. Cookies we use include:
- Essential cookies — required for the site to function (e.g. session cookies, security tokens, login state). These cannot be disabled.
- Performance cookies — used by Cloudflare and LiteSpeed Cache to deliver pages faster. These do not identify you personally.
- Third-party cookies — the SumUp payment widget on /payment/ may set cookies when you initiate a payment. These are only loaded with your consent.
You can accept or decline non-essential cookies using the cookie banner shown on your first visit. You can also manage cookies through your browser settings at any time.
7. How long we keep your data
- Enquiry and contact form submissions — up to 12 months, then deleted.
- Payment records — 7 years (required by UK tax law).
- Account data — for as long as your account is active. Deleted upon request.
8. Your rights under UK GDPR
Under UK data protection law you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your personal data (“right to be forgotten”).
- Restriction — ask us to limit how we use your data.
- Portability — receive your data in a structured, machine-readable format.
- Object — object to processing based on legitimate interests.
- Withdraw consent — where processing is based on consent, withdraw it at any time.
To exercise any of these rights, email us at info@ubar.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
9. Data security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website uses SSL encryption (HTTPS), and payment data is handled entirely by SumUp’s PCI DSS-compliant infrastructure — we never see or store your card details.
10. Changes to this policy
We may update this Privacy Policy from time to time. The “last updated” date at the top of this page will reflect any changes. We encourage you to review this policy periodically.
11. Contact us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
- Email: info@ubar.uk
- Phone: 07768 491888
- Address: 124 High Street, Bangor, LL57 1NT, Wales, UK