Privacy Policy

1. Who We Are

FoneFix Honiton is an independent phone and tablet repair business based at 34 New Street, Honiton, Devon EX14 1EX.

For the personal information we collect directly through our website, bookings and repair services, FoneFix Honiton is the data controller.

If you have questions about how we handle your information, you can contact us using the details at the end of this policy.

2. Information We Collect

2.1 Information you provide

When you contact us, make a booking or use our repair services, we may collect:

• Your name, address and contact details.
• Device manufacturer, model, serial number or other relevant device identifiers.
• Details of the fault, requested repair and relevant device history.
• Booking, appointment, delivery and collection information.
• Payment and transaction information, with payments handled through third-party payment providers.
• Information you provide in emails, telephone conversations, contact forms or other correspondence.
• Optional screen-unlock information where you choose to provide it for repair testing.

2.2 Information collected automatically

When you use our website, certain technical information may be collected, including your IP address, browser type, device information, website activity and cookie-related information.

Further information about cookies is provided in Section 8.

3. How We Use Your Information

We use personal information where necessary to provide our services, manage our business and meet applicable legal obligations.

This includes:

• Managing repair bookings and appointments.
• Diagnosing faults and carrying out requested repairs.
• Testing device functions before and after repair.
• Contacting you about repair progress, collection or delivery.
• Processing payments and refunds.
• Providing receipts, invoices and warranty documentation.
• Responding to enquiries, complaints and warranty claims.
• Maintaining appropriate business, accounting and transaction records.
• Protecting our website and services against fraud, misuse and unauthorised access.

4. Our Lawful Basis for Processing

Under UK data protection law, we rely on appropriate lawful bases depending on why information is being processed.

• Contract: Where processing is necessary to provide a repair or service you have requested.
• Legal obligation: Where we must retain or provide information to comply with applicable law, including accounting obligations.
• Legitimate interests: Where necessary to operate, protect and improve our business, respond to enquiries and maintain appropriate records, provided those interests do not override your rights.
• Consent: Where consent is required for a particular activity, such as certain non-essential cookies or optional communications.

Providing a screen-unlock code is optional. Where supplied, it is processed for the limited purpose of carrying out and verifying the requested repair service.

5. Device Screen-Unlock Codes

Some repairs require us to access a device to check its functions, investigate a reported fault or confirm that a repair has been successful.

When booking a repair online, you may choose to provide your device's screen unlock PIN, password or Android unlock pattern.

5.1 Providing a code is optional

You can choose to provide your code during online booking, provide it when your device arrives, or decline to provide it altogether.

You can still book a repair without providing an unlock code. However, certain diagnostic or post-repair tests may be limited.

5.2 How online codes are protected

Screen-unlock information submitted through our online repair booking system is encrypted and stored separately from normal booking and payment information.

Access to stored codes is restricted to an authorised account and is subject to additional security controls. Codes are not included in booking confirmation emails or standard order details.

We use this information only where reasonably necessary to carry out diagnostic checks and verify the requested repair.

5.3 How long codes are retained

Online screen-unlock information is retained only for the period required for the booking or repair. The booking system applies the following retention rules:

Expired codes become inaccessible through the normal retrieval system when their retention deadline is reached. Physical removal of expired encrypted records is performed by scheduled and activity-based cleanup, which may run after that deadline.

For completed repairs, deletion is triggered when the device is marked as returned to the customer in the repair system.

These periods describe the online screen-unlock collection system. Other repair records may need to be retained for longer for warranty, accounting or legal purposes.

6. General Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, handling warranty claims, maintaining records and meeting legal obligations.

Different categories of information may have different retention periods. Once information is no longer required, it is deleted or anonymised where appropriate.

Backup copies may remain for a limited period under the applicable backup retention arrangements.

7. Sharing Your Information

We may share information with trusted service providers where necessary to operate our business and deliver our services.

These may include:

• Website hosting and technical service providers.
• Payment processors used to handle transactions and refunds.
• Booking, website and communication service providers.
• Professional advisers where reasonably necessary.
• Regulatory or law-enforcement authorities where disclosure is legally required.

Where a provider processes personal information on our behalf, we require appropriate safeguards and compliance with applicable data protection law.

If personal data is transferred outside the UK, we take steps to ensure appropriate legal protections are in place.

8. Cookies and Website Technologies

Our website uses cookies and similar technologies to support essential functions, such as maintaining booking sessions and enabling checkout.

Other cookies may be used for analytics or additional website features, depending on the services enabled.

Where required by law, we will request your consent before placing non-essential cookies on your device.

You can manage cookies through your browser settings and any cookie controls provided on our website. Disabling essential cookies may prevent parts of the booking or checkout system from functioning correctly.

9. Your Data Protection Rights

Under the UK GDPR, you may have the following rights, depending on the circumstances:

• To request access to personal data we hold about you.
• To request correction of inaccurate or incomplete information.
• To request deletion of personal data where applicable.
• To request restriction of certain processing.
• To object to processing in certain circumstances.
• To request data portability where applicable.
• To withdraw consent where processing relies on consent, without affecting earlier lawful processing.
• To complain to the Information Commissioner's Office (ICO).

To exercise your rights, please contact us using the details below. We may need to verify your identity before responding to certain requests.

You can also contact the ICO through its official website: ico.org.uk .

10. Data Security

We use appropriate technical and organisational safeguards designed to protect personal information against unauthorised access, accidental loss, alteration or disclosure.

These measures include access restrictions and, where appropriate, encryption of sensitive information.

Although no website or storage system can guarantee absolute security, we take the protection of customer information seriously and review our arrangements as appropriate.

11. Third-Party Websites

Our website may contain links to third-party websites or services. We are not responsible for the content or privacy practices of websites that we do not control.

We recommend reviewing the privacy policies of those services before providing personal information.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes to our services, technology or legal obligations.

When changes are made, the effective date at the top of this page will be updated. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us.