Back to SRP Pro

Privacy Policy

Last updated: 27 May 2026

SRP Pro is business management software for SMART repairers, auto bodyshops and PDR technicians. This Privacy Policy explains what personal data we collect, why we collect it, and how you can exercise your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

---

1. Who we are

SRP Pro is operated by DAA SMART SOLUTIONS LIMITED, registered in England and Wales (company number 15935224), with a registered address at 128 City Road, London, EC1V 2NX. We are the data controller for the personal data described in this policy.

If you have any questions about how we handle your data, contact us at pro@smartrepairpeople.com.

2. What information we collect

Account information

When you register for SRP Pro we collect your name, email address, phone number, business name and payment details (processed securely by Stripe — we do not store card numbers).

Customer and job data you enter

As part of using the service you will add records about your own customers, including their names, contact details, addresses and vehicle information. You are the data controller for this data; we process it on your behalf as your data processor.

Usage data

We collect information about how you interact with SRP Pro, including pages visited, features used, and device/browser information. This helps us improve the product.

Communications

If you contact our support team we keep a record of the correspondence.

3. How we use your information

• To create and manage your account
• To provide the SRP Pro service and its features (estimates, invoices, bookings, calendar, quote portal)
• To process subscription payments via Stripe
• To send transactional notifications — booking reminders, invoice alerts, quote request alerts — by push notification, email or SMS (based on your preferences)
• To send two-factor authentication codes via SMS
• To improve and develop the SRP Pro platform
• To comply with legal obligations

4. Legal basis for processing

• Contract performance — processing necessary to provide the service you have signed up for
• Legitimate interests — improving the service, preventing fraud, and keeping the platform secure
• Legal obligation — where we are required to process data to comply with the law
• Consent — for optional communications such as SMS notifications, where you have explicitly opted in

5. Third parties we share data with

We use a small number of trusted third-party services to operate SRP Pro. Each is contractually bound to protect your data and only process it as we instruct.

• Stripe — payment processing and subscription management. Stripe Privacy Policy
• Twilio — SMS delivery for notifications and two-factor authentication. Twilio Privacy Policy
• Algolia — powering the in-app search feature. Algolia Privacy Policy
• Ably — real-time data delivery (e.g. live notifications). Ably Privacy Policy
• Hetzner / cloud hosting provider — our servers and databases are hosted in the EU/UK.

We do not sell your personal data to third parties. We do not use your data for advertising.

6. How long we keep your data

• Active accounts — we retain your data for as long as your account is active.
• Cancelled accounts — account data is retained for 90 days after cancellation, then permanently deleted, unless a longer period is required by law (e.g. for financial records under HMRC requirements, which may be up to 6 years).
• Customer and job records you create — retained as above, as you are the data controller for this data.

7. Your rights

Under UK GDPR you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — ask us to delete your data (subject to legal obligations)
• Right to restrict processing — ask us to pause processing your data
• Right to data portability — request your data in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent (e.g. SMS notifications), you can withdraw it at any time in your account settings

To exercise any of these rights, contact us at pro@smartrepairpeople.com. We will respond within 30 days. If you are unhappy with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Cookies

SRP Pro uses a small number of cookies that are strictly necessary for the service to function:

• Session cookie — keeps you logged in during your session. Expires after 24 hours of inactivity.
• CSRF token — protects against cross-site request forgery attacks.

We do not use advertising cookies, analytics cookies, or tracking pixels.

9. Security

We take appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), hashed passwords (bcrypt), two-factor authentication, and regular security reviews. However, no system is completely secure and we cannot guarantee absolute security.

10. Contact us

For any privacy-related questions or requests:

• Email: pro@smartrepairpeople.com
• Post: 128 City Road, London, EC1V 2NX