What we collect, and who gets it

The short version: if you request a quote, your name and email go to that workshop so they can reply. We do not add you to anything, and we do not sell anything to anybody.

If you request a quote

We collect your name, your email address, and what you write in the message — including your car, if you name it. A phone number is optional and never required.

Those details go to the workshop you contacted. That is the purpose of the request, and it is the point at which the information leaves our control: the workshop is an independent business and holds your details under its own responsibility. We keep a copy so we know the introduction happened.

We also record which page the request came from and the region the site was showing, so we can tell which parts of the register are useful.

Stopping the forms being flooded

The enquiry and claim forms are open to anyone, so we count how many requests arrive from one place in a short window and pause the ones above that. To do it we store a scrambled fingerprint of the address you connect from — never the address itself. It is one-way: we cannot turn it back into an address, and we cannot match it against a list of addresses to find you.

It is deleted an hour later. It is never attached to your enquiry, never used to count visitors, and never shared. If you are ever paused by it, the page says so and the workshop's own contact details are on it.

How long we keep it

Your name, address and message are removed from a lead after 24 months. The record of an enquiry stays so the register can count how many a listing received; you are no longer in it. Queued messages are deleted 90 days after they are sent. Ask us to remove yours sooner and we will — you do not need an account, and there is nothing to log into.

Who else sees it

Only these, and only for the reason given:

The workshop you contacted

Your name, email and message. This is the request.

Supabase

Hosts the database the register runs on.

Cloudflare

Serves the site and handles the request.

Stripe

Workshop subscriptions only. Never anything from an owner, and we never see card details.

Google

We read public review data about workshops. Nothing about you goes to Google.

When lead routing moves to WhatsApp, Meta will carry the message to the workshop's phone and an AI service will format it for reading. Neither is in the chain today, and this page changes on the day they are.

Cookies and measurement

There is no advertising, no tracking across sites, and no consent banner — because there is nothing to consent to. If we remember a region you chose, it is a single functional cookie that stores that choice and nothing else.

Page views are counted, using Cloudflare Web Analytics. It sets no cookie, stores nothing on your device and cannot follow you to another site: it records that a page was requested, roughly where from, and what referred you. That is the whole of it, and it is why there is nothing here to opt out of.

Workshops on the register

Listings hold business information: the workshop's name, address, contact details, the technicians it employs and what we checked at inspection. Technician photographs are optional and are published only with that person's consent, which they can withdraw.

Some listings we compile ourselves, before the workshop has been in touch. Those say so on the page. We use only what the business already publishes — its own website, a company register, a listing it maintains elsewhere — and we never publish a personal mobile number. Our basis for this is legitimate interest: a trade register is only useful if it is complete, and a register that lists only the businesses that replied is not.

If a listing is yours, you can claim it and correct it, or ask us to remove it. Removal is the same day, needs no account, and we do not ask why. We keep only enough afterwards to recognise the business if our own sourcing finds it again, so that it stays removed.

Asking us anything

To see what we hold, correct it, or have it deleted, write toprivacy@papayadirectory.com. You can also complain to the ICO if you think we have got this wrong.

This page describes a register whose listings were compiled from public sources and none of which has yet been inspected. The data practices are real, and so are the workshops — the earlier version of this line said they were not, which was untrue of 26 real companies.