Data Processing Agreement

1. Purpose

This Data Processing Agreement applies where Workshop IQ processes personal data on behalf of a garage using the platform.

The garage is normally the controller for its customer and vehicle records. Workshop IQ is normally the processor for that data when providing the service.

2. Processing instructions

Workshop IQ will process garage customer data to provide, secure, maintain and support the platform, and in accordance with the garage’s lawful use of the service.

3. Categories of data

• Garage staff account and permission data.
• Customer contact details and preferences.
• Vehicle, enquiry, booking, estimate, job, approval, message, file, invoice and payment status information.
• Support, audit, security and usage records needed to operate the service.

4. Security measures

Workshop IQ will use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure.

5. Subprocessors

Workshop IQ may use subprocessors for hosting, database, storage, email, payments, AI, notifications, analytics and support operations. Workshop IQ remains responsible for subprocessors used to provide the service.

Current categories include: hosting/infrastructure, database/storage, transactional email, payment processing, AI assistance, push notifications, analytics and support tooling.

6. Assistance

Workshop IQ will reasonably assist garages with data subject requests, security incidents and compliance obligations where the request relates to data processed through the platform.

7. Deletion and export

On termination or reasonable request, Workshop IQ will support deletion or export of garage data where technically feasible and legally appropriate, subject to backup, security, fraud prevention and legal retention requirements.

8. International transfers

Where personal data is processed outside the UK or EEA, Workshop IQ will rely on appropriate safeguards made available by its providers, such as recognised contractual safeguards or adequacy arrangements where applicable.

9. Contact

Questions about this DPA can be sent through the support option inside the Workshop IQ dashboard.