Updated 21 October 2026.
Who is responsible
Turner Brothers (Holmfirth) Limited decides how customer information is used for its workshop and website services. Our company number is 11993464, registered in England and Wales. Our workshop and registered office are at Bottoms Mill, Woodhead Road, Holmfirth, West Yorkshire, HD9 2PX. Contact info@turnerbrothers.co.uk or 01484 682288 about your information or a privacy complaint. Catalyst Bridge supports the website on our instructions.
Your enquiry, vehicle and workshop records
We use the name, contact details, registration, vehicle details, service answers, preferred dates and messages you provide to answer enquiries and arrange work. Relevant symptoms, mileage, service history, quotes, jobs, invoices and your instructions may also come from telephone or workshop conversations and our workshop records.
A registration lookup sends the registration and plate country to LaunchControl. You can enter vehicle details manually instead. Details you save stay in your separate encrypted website session so you can review them. Choosing Send passes the reviewed request to Turner Brothers through LaunchControl. A preferred date is a request, not a confirmed booking. The website does not collect payment-card details or take payment.
We need sufficient contact, vehicle and work information to respond or provide the service. Optional questions can be left blank. Please do not put passwords, sign-in codes, payment-card details, National Insurance numbers, full driving-licence numbers or unrelated sensitive information in free-text messages. If a courtesy-car licence check is needed, the office must explain the information required and arrange the check with you.
Your account, private documents and Apollo
When account access is available, LaunchControl sends and checks a one-time code for the email on your workshop record. It supplies the account’s vehicles, visits, requests, estimates, shared inspections and contact preferences. The website keeps access credentials encrypted on the server. Account content, codes and tokens are not saved in browser local or session storage.
Keep private estimate, inspection and preference links confidential. Opening an estimate or inspection can tell the workshop it has been viewed. Approvals, declines and preferences you explicitly confirm are sent to LaunchControl. Shared inspection photos and videos may use temporary private media links.
If you choose to use Apollo while signed in, your message and account-authorised context go to LaunchControl’s customer assistant. LaunchControl supplies the displayed conversation history. The website keeps encrypted sending and recovery records to prevent uncertain connections causing duplicate messages; it does not put chat text in browser storage. Signing out clears the account chat from the page. Provider conversation retention is separate from website-session retention.
You can also choose to open a visitor chat without signing in. Messages you send go to LaunchControl’s visitor assistant; this separate chat does not use your account sign-in or provide access to your private workshop records. The website keeps an encrypted list of the conversations opened through this browser’s visitor session, including a short title from your first message, so only that session can reopen them. LaunchControl supplies the conversation content. Visitor access lasts up to 24 hours from opening the session.
Choosing “Forget this browser’s chat” removes that visitor session and its conversation list from the website, clears its cookie and removes the chat from open visitor tabs. It does not delete LaunchControl’s conversations or the website’s sending and recovery records. Clearing the cookie yourself removes browser access but does not immediately delete the server records. Contact us about a deletion request.
Apollo can make mistakes. Workshop staff confirm work, prices and arrangements; a chat answer does not authorise repairs, confirm insurance cover or cancel an appointment. The website does not make decisions with legal or similarly significant effects about you solely through automated processing.
MOT, tax and vehicle pictures
When you view account vehicles, the website sends their registrations to the DVSA MOT History service and the DVLA public vehicle enquiry service to display available MOT and tax information. It does not send your contact details for those checks. If a result is unavailable, it is not treated as a valid MOT or tax confirmation.
Vehicle picture searches send make, model and year to Wikimedia Commons, not your registration or account details. Illustrative pictures are downloaded by the website server and include a photo credit; they are not photographs of your own vehicle. The MOT planner and printed checklists do not send their calculations to the workshop.
Why we use this information
- Requested services: preparing a quote, arranging and carrying out agreed work, providing requested account access and service messages rely on steps you request before a contract or performance of that contract.
- Security and reliable administration: protecting accounts, preventing duplicate instructions, resolving errors and disputed instructions, and dealing with a company’s nominated contact rely on our legitimate interests in running a secure, reliable workshop service.
- Legal duties: necessary accounting records and responses to lawful authorities are kept or used to meet the relevant legal obligation.
- Optional features: where consent is required, the feature remains optional. Sending a service request is not consent to unrelated marketing.
You can object to uses based on legitimate interests. See the separate rights section below. Our cookie notice explains browser storage and the optional map; an ordinary data-processing basis does not itself remove cookie-consent requirements.
Who receives information and where it is handled
Authorised Turner Brothers staff use the information needed for your request or job. LaunchControl, operated by LaunchCTRL Ltd, provides workshop records, vehicle lookup, account authentication, enquiries and Apollo. Catalyst Bridge provides technical support. DigitalOcean hosts the website’s main server in London; Cloudflare provides connection delivery and security. These providers may process connection addresses, request metadata and information needed to deliver their service.
DVSA, DVLA and Wikimedia receive the limited queries described above. Google receives connection information if you choose to load its map; ordinary map, GOV.UK and tyre-shop links open separate services. Necessary information may also be shared with an insurer, professional adviser, approved parts supplier or public authority for your work, a claim or a legal requirement.
A London website server does not mean every supplier processes information only in the UK. DigitalOcean and Cloudflare publish DigitalOcean’s processing terms and Cloudflare’s processing terms, which describe international arrangements. The complete processing locations and applicable transfer safeguards for LaunchControl and its Apollo providers have not yet been verified for this service. Contact us for the current position and copies of applicable safeguards; we do not promise UK-only processing.
How long information stays
Website session cookies last up to 24 hours. Ordinary website sessions and linked request records become eligible for cleanup seven days after creation; maintenance runs at startup and hourly. Sign-out or authentication expiry can remove access sooner. Private-link sessions expire after 24 hours. Completed account and private-link actions are normally eligible for cleanup after seven days; unresolved instructions are retained until their outcome is resolved to prevent conflicting or duplicate actions. Apollo sending records become eligible after seven days from their last update.
The separate visitor-chat session and its encrypted conversation list expire after 24 hours. Expired visitor records are removed when visitor-chat cleanup runs, including when availability is checked and hourly while the visitor-chat service is running. Forgetting the chat removes the session and list sooner. This website cleanup does not delete conversations retained by LaunchControl; its conversation-retention period has not yet been verified for this service.
Encrypted account-vehicle caches normally refresh MOT information after 24 hours, tax after 12 hours and available pictures after 30 days. Cache cleanup removes entries after 31 days without refresh. A failed refresh may leave an older result visible with its check date and a warning.
Service answers and interrupted-action references in browser session storage normally last for the tab session. Browser restoration can preserve them longer. Relevant answers are removed after confirmed submission. See the storage inventory.
Workshop, email, insurer and accounting records have separate purposes. Their retention depends on whether the enquiry or work remains active, what is needed to evidence agreed work and resolve a complaint or claim, and applicable accounting or other legal duties. A seven-day website cleanup does not delete a job accepted by LaunchControl or its conversation history. Ask us about the records relevant to your request.
Website recovery copies are separate from the live database. Existing website backup archives have no automatic age-based deletion, so deleting a live session does not immediately erase every backup copy. Contact us about a deletion request so relevant live, supplier and recovery records can be considered together.
Your rights and complaints
Depending on the purpose and lawful basis, you can ask for access, correction, deletion, restriction or a portable copy of your information. Where we rely on consent, you can withdraw it without affecting earlier lawful use. Some information may have to be kept for a legal duty or justified claim; we will explain any limitation.
Your right to object
You can object to processing based on legitimate interests and to the use of your information for direct marketing. Contact the workshop using the details above; you do not need a special form.
We may make a proportionate identity check before disclosing records. Rights requests normally receive a response within one calendar month, subject to lawful extensions or adjustments explained to you. We acknowledge privacy complaints within 30 days and investigate without undue delay. You can also complain to the Information Commissioner’s Office.
You can read service information, telephone the garage and avoid optional features without creating an account. We date material changes to this notice so you can see when it was updated. Our customer terms explain the workshop arrangements.