Privacy Policy
Last updated: [01/08/2026]
This policy explains how Permit Automotive LTD, trading as CAARSAP (referred to as “we” or “us”), collects and uses your personal information when you use caarsap.com or our services.
We are the data controller for the information described below.
Contact details
Company name: Permit Automotive LTD
Company number: 12724972
Address: Avon House, Avonmore Road, London, W14 8TS
Email: info@permitautomotive.com
Phone: +44 208 191 8753
ICO registration number: ZB273037
Information we collect
When you request a repair quote
- Your name, phone number and email address
- Your vehicle registration, make, model and mileage
- Photographs and any video you upload of the damage
- Your collection and delivery address
- A description of the damage and what you would like repaired
When you contact us after a non-fault accident
- The information above, plus
- The date, time and location of the incident
- Details of the other vehicle and driver involved, including their registration and insurer where you provide it
- Your own insurer and policy details where you choose to give them to us
- Whether you need vehicle recovery or a replacement vehicle
When you contact us by phone or WhatsApp
- Your phone number and the content of your messages
- We may keep a note of what was discussed so we can deal with your enquiry
Automatically, when you visit our website
- IP address, device and browser type, pages visited and how you arrived at the site
- Information collected through cookies (see our Cookies Policy)
Photographs
Damage photographs sometimes capture more than the damage a driveway, a house, a number plate, occasionally a person in the background. We use these images only to assess and carry out the repair, and we ask that you avoid including other people where you can.
Why we use your information, and our legal basis
What we use it for | Legal basis
- Preparing a repair quote from your photos | Steps taken at your request before entering a contract
- Arranging and carrying out the repair, including collection and delivery | Performance of our contract with you
- Arranging vehicle recovery and a replacement vehicle after a non-fault accident | Performance of our contract with you
- Recovering the cost of repair, recovery and vehicle hire from the at-fault driver’s insurer | Our legitimate interest in being paid for services provided, and the establishment or defence of legal claims
- Responding to your calls, messages and enquiries | Our legitimate interest in responding to people who contact us
- Keeping records of work carried out, quotes and payments | Legal obligation, and our legitimate interest in keeping proper business records
- Improving our service and our website | Our legitimate interest in running and improving our business
- Marketing emails or messages, where you have asked for them | Your consent
- Analytics and advertising cookies | Your consent
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights, and we have concluded it is not. You can object at any time; see section 7.
Who we share your information with
We share only what is necessary, and only with:
- Repair garages in our network: To quote for and carry out your repair, we pass your name, contact number, vehicle details and damage photographs to the garage allocated to the work.
- Vehicle recovery operators: Where recovery is needed.
- Replacement vehicle providers: Where a hire vehicle is arranged for you.
- The at-fault driver’s insurer and their agents: Where we are recovering the cost of your repair, recovery or replacement vehicle from them. This will include the details of the incident and the vehicle, and the costs incurred.
- Our professional advisers: Including accountants, solicitors and insurers, where needed.
- Service providers who run our systems: Including our website host, email provider, cloud storage and analytics providers.
- Payment providers: Where you pay us for a repair.
- Authorities and regulators: Where we are required to disclose information by law.
We do not sell your personal information, and we do not share it with anyone for their own marketing.
We do not pass your details to solicitors or personal injury firms.
International transfers
Some of our providers store data outside the UK. Where that happens, we rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum, so your information receives an equivalent standard of protection. You can ask us for details.
How long we keep your information
- Quote enquiries that don’t proceed: 12 months
- Repair records, invoices and job files: 6 years from completion, so we can deal with any dispute, warranty issue or claim
- Non-fault accident files, including recovery and hire records: 6 years from the date the matter concludes, as recovery from an insurer can take time and may lead to litigation
- Call and message records: 12 months
- Marketing preferences: until you withdraw consent
We then delete the information or anonymise it.
Security
We hold your information on access-controlled systems, restrict access to those who need it, and require our providers to keep it secure. No system is completely secure, but we take these obligations seriously. If a breach occurs that is likely to risk your rights, we will report it to the ICO and, where required, tell you.
Your rights
Under UK data protection law, you have the right to:
- Ask for a copy of the information we hold about you
- Have inaccurate information corrected
- Ask us to delete information, in certain circumstances
- Ask us to restrict how we use it, in certain circumstances
- Object to us using it where we rely on legitimate interests
- Receive certain information in a portable format
- Withdraw consent at any time, where we rely on consent
To exercise any of these, email: info@permitautomotive.com. We will respond within one month. There is no charge in most cases.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, or on 0303 123 1113.
Marketing
We will only send you marketing where you have asked for it, or where you are an existing customer and we are telling you about similar services. Every message includes a way to opt out, and you can also email us to stop at any time.
If you contact us on WhatsApp, your messages are also processed by WhatsApp under its own privacy policy. Please don’t send us anything through WhatsApp that you wouldn’t want handled that way. You are welcome to email or call instead.
Children
Our services are for people aged 18 and over. We do not knowingly collect information about children.
Changes
We may update this policy. The current version is always on this page, with the date it was last updated at the top.