Who owns your garage's customer data — and why it matters

Most independent garages hold a genuinely valuable asset in the worst possible format: customer names and numbers in a counter notebook, vehicle history in a filing cabinet, and the rest in the owner's memory. It works right up until the notebook is lost, the phone breaks, or the person who remembers everything is off for a fortnight.

A common assumption is that a small, low-risk business sits outside data protection law. The Information Commissioner's Office is direct about this: if you hold and use people's personal information as part of your usual course of business, the law probably applies to you ICO, Data protection: advice on common topics. Names, phone numbers and vehicle details tied to an owner all count.

What UK GDPR expects, in plain terms

• Collect only what you need for the job — name, contact number, vehicle registration, described fault.
• Keep it accurate and keep it no longer than you need it.
• Keep it secure, and be able to say who can access it.
• Be able to find, correct or delete a person's record if they ask.

The ICO's own starting point is to make a list of the personal information you hold, what you use it for and why ICO, Getting started with data protection. They also publish a free self-assessment checklist aimed specifically at small business owners and sole traders, which is a better use of an evening than any paid GDPR course ICO, assessment for small business owners and sole traders.

None of that is realistic with paper and voicemail. A structured record, searchable by customer, vehicle registration or date, is what makes those obligations routine rather than a scramble.

Questions to ask any software vendor

• Where is the data physically stored, and is it inside the UK or EU?
• Is my customer data pooled with other businesses in any way?
• Is it used to train third-party models?
• Can I export it, and can I delete a record myself?
• Are you registered with the ICO?

How Garage Ghost answers those

Call and booking data is processed on UK/EU infrastructure. Your records live in your own dashboard and are never pooled with other garages, sold, or used to train third-party models. You can search, correct or delete a customer record yourself. Garage Ghost Ltd is registered in England and Wales, company number 17140314, and is registered with the Information Commissioner's Office under reference ZC199049. Our privacy policy sets out the detail, and under the hood explains how a call is handled from ring to record.