Privacy Policy

This Privacy Policy explains how EDYCAR AUTO BODYREPAIR LTD (trading as Mirage Body Shop) collects, uses, stores and protects personal data when you use this website or contact us about our services. It is written in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Data Controller: EDYCAR AUTO BODYREPAIR LTD

Trading name: Mirage Body Shop

Company number: 14618944

ICO registration number: ZB890228

Registered contact address: UNIT 5 STAR INDUSTRIAL PARK,BODMIN ROAD CV2 5DB, Coventry

Contact email: contact form

Contact phone: contact form

MirageBodyShop is a trademark name used by EDYCAR AUTO BODYREPAIR LTD.

2. Personal Data We Collect

• Identity and contact data you provide (such as name, email address, phone number).
• Vehicle and booking details (such as registration number, service requirements, appointments and related notes).
• Communications data (messages, attachments, images or documents you submit to us).
• Technical and usage data needed for website operation and functional analytics (for example page visits, referral source, browser/session information, and cookie preferences).

3. How and Why We Use Your Data (Lawful Bases)

• Contract: to respond to requests, provide quotes, schedule and deliver booked services, and manage aftercare.
• Legitimate interests: to run and improve our website and services, maintain security, prevent abuse, and monitor functional analytics that help website reliability and performance.
• Legal obligation: to keep records for tax, accounting and compliance purposes.
• Consent: where required (for example for optional cookie categories); you can withdraw consent at any time.

4. Cookies and Functional Analytics

We use cookies and similar technologies required for essential site functionality and limited analytics to understand how the website performs. We do not sell your personal data and we do not use your data for third-party marketing sales. Where non-essential cookies are used, these are managed via your consent choices.

5. Nova AI Assistant and Artificial Intelligence

You are talking to an AI, not a person. Nova is Mirage Body Shop's AI assistant, and it says so at the start of every conversation. It can help with general questions about our public services, but its replies are generated automatically and may be incomplete, out of date, or simply wrong. Nova does not make decisions that produce legal effects or similarly significant effects for you. If you need a confirmed answer, please ask a member of our team.

We give you this notice to meet our transparency obligations, including Article 50 of the EU Artificial Intelligence Act, which requires people to be told when they are dealing with an AI system. The United Kingdom is no longer in the EU and has not passed an equivalent AI statute, but those rules can still apply to us where our AI is available to people in the EU. In any case we think telling you plainly is the right thing to do, wherever you are.

What happens to your messages. When you send a message, that message, recent conversation context, and relevant public Mirage Body Shop content are sent to our AI service provider so it can generate a reply. Depending on which provider is in use, that processing may happen outside the UK or European Economic Area. Where international transfer rules apply, we rely on an appropriate transfer mechanism and safeguards in our arrangement with the provider.

What we store. To run and secure the service and to review conversation quality, we keep chat records for a limited time: your messages, Nova's replies, a session identifier, hashed network and browser identifiers, the page path, event type, message count, and provider and model details. We keep these for up to 30 days and then delete them automatically, unless we need a specific record longer to investigate abuse, meet a legal obligation, or bring or defend a legal claim.

Please do not type sensitive information into Nova. That means no passwords, payment card or bank details, health information, biometric or genetic data, government identifiers, precise location data, information about children, or other confidential or special category personal data. If you have already shared something you should not have, contact us and we will review or delete it.

Our lawful basis for routine Nova processing is our legitimate interest in answering general enquiries, running the service, and protecting it from misuse. If you move from Nova to a contact, booking or estimate form, whatever you submit there is handled under the relevant purpose and lawful basis set out elsewhere in this policy.

You can ask for access, correction, deletion, restriction or objection where the law gives you that right, and you can always ask for a human to look at anything you discussed with Nova.

6. Sharing Your Data

We only share personal data where necessary, such as with service providers that help us host, secure or maintain our systems. Those providers must protect your data and process it only on our instructions. We do not knowingly share your personal data with third parties for their own direct marketing.

7. International Transfers

If any supplier processes data outside the UK, we ensure appropriate safeguards are in place (for example adequacy regulations or approved contractual protections) as required by UK data protection law.

8. Data Retention

• Customer booking and invoice records: normally up to 6 years to meet legal/accounting obligations.
• General enquiry records: normally up to 24 months from last meaningful contact.
• Functional analytics data: retained only as long as required for operational reporting, then aggregated, anonymised or deleted.

We may keep data for longer where required by law or to establish, exercise or defend legal claims.

9. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. Access is limited to people who need it for legitimate business purposes.

10. Your UK Data Protection Rights

Subject to legal conditions and exemptions, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request erasure of your data;
• request restriction of processing;
• object to processing based on legitimate interests;
• request data portability;
• withdraw consent at any time where processing relies on consent.

To exercise your rights, contact us using the details in this policy.

11. Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can resolve it. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version is always published on this page.

13. Contact Us

Email: contact form
Address: UNIT 5 STAR INDUSTRIAL PARK,BODMIN ROAD CV2 5DB, Coventry
Phone: contact form

Last updated: 21 February 2026