Terms of Service

1. About these terms

Last updated 1 November 2026.

Who we are. Workshop Manager is provided by Callum Geary, a sole trader trading as AutoManage Solutions ("AutoManage", "we", "us"), established in the United Kingdom. AutoManage is not a company. Contact us by email at [email protected] or through our contact form. You can reach us by email at [email protected] or through our contact form.

These terms are an agreement ("the agreement") between us and the garage or business that signs up for Workshop Manager ("you", "your garage"). They cover the office app, the workshop phone view, the parts kiosk, customer job links and related support. The data processing schedule at the end is part of the agreement. If it conflicts with these terms on how personal data is handled, the schedule wins.

Workshop Manager is for businesses, not consumers. This does not affect any rights a business has as a "consumer" under the Australian Consumer Law (see section 18).

The person who creates the garage's account accepts these terms for the garage and confirms that they own the business or have authority to bind it. If you do not have that authority, do not sign up.

2. The testing period

Workshop Manager is in testing. During testing:

• You can only sign up with an invite code from us.
• The service is free.
• We make no promises about uptime or how quickly we reply.
• Features may change, be added or be removed without notice. We may reset or remove test data, telling you first where we can.
• The service runs on a single server that we own, in Australia, reached through Cloudflare.
• You must enter only made-up data for customers, vehicles, jobs, invoices, hours and pay. Do not enter real customers' or suppliers' details, real invoices or real bank details. The only real details should be the name and email address of each person you give a login to, and your garage's own business name, address, phone, email and VAT and company numbers. Staff logins may use made-up names, but the owner login must use a real email address so we can send you notices.
• Login names and email addresses, and sign-in records such as IP addresses and browser details, are real personal data. During testing they are held on our server in Australia.
• If you connect QuickBooks Online during testing, it can only be an Intuit sandbox (test) company. The test service cannot connect to a real QuickBooks company.

We will tell you before the testing period ends. Before any UK garage uses real data, live UK garage data, including its backups and logs, will be hosted in the UK, and we will update these terms first (see paragraph S9 of the schedule).

3. Your licence to use Workshop Manager

While the agreement is in force, we give you the right to use Workshop Manager to run your own garage business. The right is not exclusive to you, and you cannot pass it on to anyone else. It also covers your staff and anyone else you give a login to, such as your accountant, but only for your business.

You must not, and must not let anyone else:

• copy, sell, rent or resell Workshop Manager, let others use it under you, or use it to provide a service to other businesses;
• reverse engineer, decompile or try to extract the source code, except where the law allows this and it cannot be excluded by contract;
• try to get around sign-in, rate limits, access controls or the separation between garages;
• scan or test the service for weaknesses, or put heavy automated load on it, without our written agreement;
• use it to build a competing product.

This licence ends when the agreement ends.

4. Acceptable use

You must use Workshop Manager lawfully and fairly. In particular, you must not use it to:

• store or send anything unlawful, defamatory, threatening or abusive, including in messages to customers on job links;
• upload malicious code or interfere with the service or other garages;
• record personal data you have no lawful reason to hold;
• mislead your customers about work, prices or what they have agreed to;
• misuse the MOT check, for example by looking up number plates in bulk.

If you break this section, we may suspend access under section 16.

5. Accounts, staff logins and security

The person who signs up becomes the garage owner on the account. The owner can add staff logins and give each person a role (owner, office, mechanic or accountant). The role controls what each person can see and do. For example, only owners see pay rates, and only owners can connect or disconnect QuickBooks.

You are responsible for:

• who you give access to, and switching off logins when people leave;
• everything done through your garage's logins;
• making sure your staff follow these terms.

Keep passwords secret and do not share logins. We strongly recommend that everyone, especially owners, turns on authenticator codes for sign-in. Treat the codes, and the device that produces them, like a key to your business. We will never ask for your password or an authenticator code, so never give one to anyone who contacts you, even if they say they are from AutoManage.

There is no "forgot password" link. A garage owner can reset a staff member's password. If an owner is locked out, contact us and we will check who you are before helping.

If you think a login has been misused, tell us straight away at [email protected] or through the contact form. Then switch off the affected login or ask us to.

6. Your data

The records your garage puts into Workshop Manager stay yours. They include customers, vehicles, jobs, approvals, parts, suppliers, staff hours and pay, invoices and payments, and anything we read from your QuickBooks company. We call this "garage data".

You give us a licence to host, copy, store, back up, transmit and display garage data only as far as we need to:

• provide, maintain, secure and support Workshop Manager for you;
• follow your instructions, including syncing to QuickBooks if you connect it;
• meet a legal duty.

We do not sell, rent or trade garage data, or give it to anyone for any benefit. We do not use it for advertising, analytics, profiling or training AI models. Workshop Manager has no analytics, advertising or tracking tools and sends no marketing emails.

For the personal data in garage data, your garage is the "controller": you decide what is recorded and why. We are your "processor": we handle it only for you, on your instructions, under the rules in the data processing schedule.

We are the controller for our own records: the sign-in details of people with a login, your garage's account record with us, session and security logs, server logs, the operator audit log, enquiries and invite requests, visitors to our website, and the shared MOT lookup store described in paragraph S1 of the schedule. Where those logs mention garage data, such as a job number, we use it only to secure and support the service. Our Privacy Policy explains how we handle these records.

You are responsible for having a lawful basis to record garage data, and for giving your customers and staff your own privacy information.

Some records are protected from change on purpose, so they can serve as evidence and accounting records. Issued invoices cannot be edited or deleted; you correct them with a credit note. Customer approvals and job history cannot be edited or deleted. Customers and suppliers can be archived, but the app does not delete them. You decide how long to keep invoices and approvals for tax and evidence; 6 years is typical for UK VAT records.

7. Getting your data out and deleting it

Workshop Manager does not yet have a self-service export or account-closure feature, so we do these by hand:

• Copy: at any time while you are a customer, and for 30 days after the agreement ends, you can ask for a copy of your garage data. We will provide it within 30 days of your request, by email or a secure download link, in files you can open in a spreadsheet, such as CSV files.
• Deletion: after the agreement ends, we keep your garage data for 30 days so you can ask for a copy, then delete it within the next 30 days. If you ask for a copy, we will not delete anything until you have it. If you ask us to delete it sooner, we will do so within 30 days, unless the law requires us to keep something.
• Backups: deleted data stays in our nightly backups until they are replaced. We keep the last 14 nightly backups, so this takes about two weeks.

Send requests to [email protected] or through the contact form. Before deleting anything or sending a copy, we will check that the request really comes from your garage's owner. Data already sent to QuickBooks Online stays in your QuickBooks company; deleting it there is up to you.

Sign-in and security records we hold as controller are covered by our Privacy Policy, not this section.

8. Third-party services

QuickBooks Online

Connecting QuickBooks Online is optional. Only a garage owner can connect or disconnect it. Once it is connected, owner, office and accountant logins can run the sync and the review screen. By connecting, you authorise us to access your QuickBooks company to:

• send your customers (name, company, phone, email), issued invoices (with a private note showing the job number and number plate), payments (with any payment reference) and credit notes to QuickBooks. This happens automatically shortly after you issue or record them or, if your owner turns on review mode, when someone approves them in the review screen. You can also choose to send all customers not yet in QuickBooks;
• create the items "Labour", "Parts", "MOT test fee" and "Adjustment", and any missing payment methods, if they are not already in QuickBooks;
• when you choose to in the review screen, update a customer's details in QuickBooks to match Workshop Manager, or import customers from QuickBooks and update your Workshop Manager records with QuickBooks details;
• read your active QuickBooks customers, payment methods, tax codes, items and an income account, so we can match records and apply the right VAT codes;
• look up invoices and credit notes we sent, by their number, and their balances, so we do not create duplicates and can apply credits.

We do not read your other QuickBooks records, such as bills, bank transactions, payroll or reports.

How we treat QuickBooks data. Information we read from your QuickBooks company ("QuickBooks data") is garage data under section 6. We use it only to provide Workshop Manager's features to you. We do not sell, rent or trade it, and we do not give it, or access to it, to anyone else, except the service providers listed in the data processing schedule who help us run the service. We do not use it for advertising, analytics, profiling or training AI models, or keep it for any other purpose. It is kept in your garage's own separate area of our database and is never shown or given to any other garage, or to any Workshop Manager user outside your garage's logins.

Intuit. QuickBooks Online is provided by Intuit Inc. Intuit is not a party to these terms, and your use of QuickBooks is governed by your own agreement with Intuit. Workshop Manager is an independent product built to work with QuickBooks. It is not made, endorsed or supported by Intuit. Intuit gives no warranty for Workshop Manager and has no liability to you for it. For help with Workshop Manager, contact us, not Intuit. We do not process data on Intuit's behalf. Intuit, QuickBooks and QuickBooks Online are trademarks of Intuit Inc.

We are not responsible for QuickBooks itself, including its availability, changes Intuit makes, or anything in your QuickBooks company that our sync did not cause. You remain responsible for your accounts and VAT returns. Check the VAT codes and items we map before relying on them.

Disconnecting. You can disconnect at any time with the Disconnect button in Workshop Manager. We then ask Intuit to cancel our access and delete the access tokens we stored.

You can also disconnect from inside QuickBooks (Apps, then My Apps). Intuit then cancels our access straight away, so we can no longer read or write your QuickBooks data, and Workshop Manager shows QuickBooks as needing to be reconnected the next time it has something to send. The encrypted access tokens stay stored until your garage owner clicks "Remove the old connection" on the page QuickBooks sends you to after disconnecting (/integrations/qbo/disconnected), or you ask us to remove them.

Disconnecting does not change anything in your QuickBooks company. In Workshop Manager we keep the links between our records and QuickBooks records (including a copy of each synced customer's name, company, phone and email on both sides), the sync history and any customers you imported, so your records stay complete if you reconnect. You can ask us at any time to delete the information we hold that came from QuickBooks. We will delete it within 30 days, except anything the law requires you or us to keep, such as issued invoices. Deleted data stays in our nightly backups for about two weeks.

MOT information

The MOT check and vehicle lookup show MOT history from a lookup service run by Albion Test Centre Ltd, a UK MOT test centre, using DVSA (Driver and Vehicle Standards Agency) MOT history data. We send it only the registration number. We store each answer against the registration so repeat lookups are quick, and fetch a fresh one when a stored answer is more than 24 hours old. If the lookup service does not answer, we may show the last stored answer, which can be older. Stored answers are deleted 12 months after the registration was last looked up. We do not control this information and cannot promise it is complete, accurate or up to date. Check official records before relying on it, for example before telling a customer when their MOT is due.

Other services

All traffic to and from the service passes through Cloudflare. Program libraries, fonts and website images are served from our own server, so using Workshop Manager does not send your details to any other content network. Paragraph S8 of the schedule lists everyone who handles garage data for us.

9. Customer job links

Workshop Manager lets you create a job link so your customer can see the work, prices and progress, approve or decline work, and send you messages. Customers do not need a login, so anyone who has the job link can use it.

• You decide who receives a job link and how you send it. Workshop Manager does not send emails or texts. Send each job link only to the right person.
• A job link works for 30 days, or until the job is cancelled or your garage is suspended. At the moment, the only way to switch off a single job link early is to cancel the job.
• When a customer responds, we record what they chose, the name they typed, the time, and their IP address and browser details, as evidence for you. These records cannot be changed.
• We also record when the job link was first and last opened, and how many times.
• The job link shows your garage name and phone number, the customer's first name, the vehicle, the job and its prices.

The approval record helps you keep evidence. It is not legal advice. You remain responsible for meeting consumer law with your own customers, including the rules on starting work early and on safety-critical work the customer declines.

10. Fees

Workshop Manager is free during the testing period.

We may introduce charges later. If we do, we will give you at least 30 days' written notice of the prices and payment terms before any charge applies. Nothing will be charged unless you choose to continue after that notice. If you do not want to pay, you can leave before charges start, at no cost, and section 7 applies to your data.

We will give the same notice before changing the price of a paid plan. You can leave before the change takes effect, and we will refund anything you have prepaid for the period after you leave.

11. Our intellectual property and feedback

We, or our licensors, own Workshop Manager and all rights in it, including its software, design, text and the AutoManage name. Apart from the licence in section 3, these terms give you no rights in it.

If you give us ideas, suggestions or bug reports, we may use them to improve Workshop Manager without paying you or owing you anything. When we do, we will not identify you or share your garage data.

12. Confidentiality

Each of us will keep the other's confidential information secret, use it only for the agreement, and share it only with people who need it for that purpose and are bound to keep it secret. For us, confidential information includes your garage data. For you, it includes anything we tell you that is not public, such as unreleased features.

This does not cover information that is public through no fault of the person receiving it, was already lawfully known to them, or that they developed independently. Either of us may disclose information where the law, a court or a regulator requires it, telling the other first where the law allows.

This section continues after the agreement ends.

13. Availability and support

We will use reasonable efforts to keep Workshop Manager available and working. During testing there is no service level agreement. The service may be unavailable for maintenance, updates, faults or reasons outside our control, sometimes without notice. It runs on a single server, so a fault there can take the whole service offline.

We back up the database every night and keep the last 14 nightly backups (about two weeks). The backups are on the same server, with no off-site copy yet. Keep your own copies of anything you cannot afford to lose, such as invoices you have issued.

We give support by email at [email protected] and through the contact form, and will use reasonable efforts to reply promptly.

14. Warranties

We will provide Workshop Manager with reasonable care and skill.

During testing, Workshop Manager is provided "as is". Apart from that duty of care and anything else the law does not let us exclude, we give no other promises, conditions or warranties, express or implied. In particular, we do not promise that it will be uninterrupted, error-free or suitable for every purpose, or that its calculations of totals, VAT, hours or pay are right in every case. Check figures before relying on them, especially invoices, VAT and staff pay.

We will update this section before paid plans start (see section 17).

Each of us confirms that it has the right to enter into the agreement.

15. Liability

What we never limit. Nothing in these terms limits or excludes liability for:

• death or personal injury caused by negligence;
• fraud or fraudulent misrepresentation;
• anything else that cannot be limited or excluded by law.

These terms also do not limit any rights you have under the Australian Consumer Law that cannot be excluded (see section 18).

Losses neither of us is responsible for. Subject to "What we never limit", neither of us is liable to the other, however the loss arises (including through negligence or breach of contract), for:

• loss of profit, revenue, business or goodwill;
• indirect or consequential loss;
• loss that was not reasonably foreseeable when you accepted these terms.

Cap. Subject to "What we never limit", each party's total liability under or in connection with the agreement, for all claims arising in any 12-month period starting on the date you accepted these terms (or an anniversary of that date), is limited to the greater of:

• £1,000 (or the equivalent in Australian dollars on the date of the claim);
• the fees you paid us in the 12 months before the event that gave rise to the claim.

Data. If garage data is lost or damaged because of our breach, our first duty is to make reasonable efforts to restore it from our most recent backup. The cost of doing so counts towards the cap. This does not affect the rights of the people the data is about.

We have set these limits because the service is free during testing, you may enter only made-up data, and our business is small. If you need a different level of cover once live data is allowed, tell us before you start using it.

16. Suspension and ending the agreement

You can end the agreement at any time by telling us by email or through the contact form. There is no closure button yet.

We can end it:

• with at least 30 days' notice, for example if we end the testing programme;
• straight away, by notice, if you seriously breach these terms and do not put it right within 14 days of our asking, or if the breach cannot be put right.

Suspension. We may suspend your garage's access, or specific logins, if:

• it is reasonably necessary to protect the service, other garages or people's data from a security threat;
• you use the service in breach of section 3 or 4;
• the law requires it;
• once paid plans exist, fees remain unpaid 14 days after we have reminded you.

Where we reasonably can, we will give notice and a reason first. We will keep a suspension no longer than needed and restore access once the problem is fixed. A suspended garage's data is kept, not deleted. While your garage is suspended, we do not sync with QuickBooks and your customers' job links do not open.

When the agreement ends, your licence and your staff's access end, and section 7 applies to your data. We will also stop all access to your QuickBooks company straight away, ask Intuit to cancel our access, and delete the access tokens we hold.

Sections 6, 7, 11, 12, 15, 18, 19, 20 and 21 and the data processing schedule continue for as long as needed.

17. Changes to these terms

We may update these terms, for example for new features, paid plans or changes in the law. We will publish each new version at automanagesolutions.co.uk/terms with a new "last updated" date.

If a change is to your disadvantage, we will email your garage owner, at the address they sign in with, at least 30 days before it takes effect, unless the law requires the change sooner. You can end the agreement without penalty before the change takes effect. If you carry on using Workshop Manager after that date, the new terms apply.

Where a change affects how we handle QuickBooks data, we will also tell Intuit where our agreement with Intuit requires it.

Changes to the service itself during testing are covered by section 2.

18. Garages in Australia

If your garage is in Australia:

• Nothing in these terms excludes, restricts or changes any right or remedy you have under the Australian Consumer Law, or any other law, that cannot lawfully be excluded. Where our liability for failing to meet a consumer guarantee can be limited, and the service is not of a kind ordinarily acquired for personal, domestic or household use, our liability is limited to supplying the service again or paying the cost of having it supplied again.
• We intend these terms to be fair and transparent. A term will not apply to the extent that it would be unfair under the Australian Consumer Law.
• Paragraph S14 of the schedule covers how we handle your data under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. The privacy regulator is the Office of the Australian Information Commissioner (oaic.gov.au).
• You may bring proceedings in Australia to enforce rights under Australian law that cannot be excluded.

19. Governing law and disputes

These terms, and any dispute arising from them, are governed by the law of England and Wales, and the courts of England and Wales have jurisdiction, subject to section 18 for Australian garages. If your garage is based in Scotland or Northern Ireland, you may also bring proceedings in your local courts.

If you have a complaint, please contact us first at [email protected] or through our contact form so we can try to sort it out. You can also complain about how we handle personal data to the Information Commission (ico.org.uk) or, in Australia, the OAIC (oaic.gov.au).

20. Notices

Send notices to us by email at [email protected], starting the subject line with "Notice under the terms". You can also use the contact form, starting your message the same way.

We send notices by email to your garage owner at the address they sign in with. Workshop Manager itself does not send email, so we send these by hand. Ask us to change that address if it stops being right. Notices count as received when sent, unless the sender knows they failed.

21. General

• These terms, including the schedule and the documents they refer to, are the whole agreement between us about Workshop Manager and replace anything said earlier.
• You may not transfer the agreement without our written consent. We may transfer it to anyone who takes over Workshop Manager. If we do, we will give you at least 30 days' notice, the new provider must keep to the data processing schedule and handle QuickBooks data under the same limits as section 8, and you may end the agreement without penalty before the transfer takes effect. You may need to reconnect QuickBooks.
• Neither of us is liable for delay or failure caused by events beyond our reasonable control.
• If a court finds part of these terms invalid, the rest still applies.
• If either of us does not enforce a right straight away, that does not mean the right has been given up.
• No one other than you and us, including Intuit and your customers, has any right to enforce these terms.
• You and we agree that regulations 9(1), 9(2) and 11 of the Electronic Commerce (EC Directive) Regulations 2002 do not apply to the agreement. You can save or print these terms from this page at any time, and we keep a copy of each version we publish.

Schedule: Data processing

This schedule meets Article 28(3) of the UK GDPR. It applies whenever we process personal data in garage data on your behalf. Words such as "controller", "processor", "personal data" and "personal data breach" have their UK GDPR meanings. Paragraphs are numbered S1 to S14 so they are not confused with the sections of the terms.

S1. Subject matter, nature and purpose

Subject matter: providing Workshop Manager to your garage.

Nature: storing, organising, displaying, backing up, transmitting, syncing to QuickBooks Online (if you connect it) and deleting the data, on our server.

Purpose: to let you run your jobs, approvals, parts, staff hours and pay, invoices and payments, and to support and secure the service. We will not process garage data for any purpose of our own.

One exception: when your staff look up a vehicle, we send the number plate to the MOT lookup service run by Albion Test Centre Ltd and keep the answer (public MOT history for that plate) in a shared store that we control. We reuse it for any garage or website visitor who looks up the same plate, and delete each entry 12 months after the plate was last looked up. The store does not record which garage or customer the plate belongs to. We are the controller for it, and our Privacy Policy covers it.

S2. Duration

For as long as the agreement lasts, and afterwards until the data is returned or deleted under section 7 of the terms. Copies remain in backups for about two weeks after that.

S3. Your rights and obligations

As controller, you decide why and how your customers' and staff's data is used. You are responsible for having a lawful basis, giving people your own privacy information and answering their requests. You may give us documented instructions, receive the help and information set out in this schedule, object to sub-processor changes, audit us under paragraph S13, and have your data returned or deleted at the end.

S4. Types of personal data and categories of people

Workshop Manager is not designed for special category data. Do not record health or similar sensitive details in notes.

S5. Your instructions

We process garage data only on your documented instructions, including on transfers of personal data outside the UK (see paragraphs S8 and S9). Those instructions are:

• these terms;
• the settings you choose and the actions your logins take in the app, including connecting QuickBooks;
• anything you ask of us in writing, by email or through the contact form.

The exception is where the law of the UK, or for Australian garages the law of Australia, requires us to do something else. In that case we will tell you first, unless the law forbids it. We will tell you straight away if we think an instruction breaks data protection law.

S6. Confidentiality and who can access garage data

Within AutoManage, only the people who run the service ("operators") and our server administrators may access garage data. Before anyone is given that access, they must commit in writing to keep it confidential. They look at garage data only where needed to give support you asked for, keep the service secure, fix a fault or meet a legal duty. Operators will not connect or disconnect your QuickBooks company, or run a QuickBooks import or review, except at your request. The sub-processors in paragraph S8 handle data only as described there.

S7. Security

We take appropriate technical and organisational measures under Article 32. Current measures include:

• a separate database area for each garage;
• role-based access in the app;
• passwords stored only as argon2id hashes, with sign-in rate limits and lock-outs;
• authenticator codes for sign-in, optional for garage logins and required for AutoManage operators;
• HTTPS everywhere with HSTS, security headers and protection against cross-site requests;
• QuickBooks tokens and authenticator secrets encrypted (AES-GCM);
• customer approvals and issued invoices that cannot be altered;
• a hardened server whose website traffic reaches it only through a Cloudflare tunnel;
• nightly database backups, keeping the last 14 (about two weeks), on the same server.

Error messages returned by QuickBooks are kept in the sync history and our server logs only to diagnose sync problems.

Operator access. The admin panel is available only to AutoManage operators and hidden from everyone else. Operators can view garage data through a read-only data browser and a read-only database tool (pgAdmin). pgAdmin is reached only through the app, by an operator who signed in with a password and an authenticator code. To give support, an operator can also open your garage with the same rights as your owner login for up to 12 hours, which lets them view and change records. We also have administrator access to the server itself.

We keep an audit log of operator access for 6 years. It records each time an operator opens your garage as owner, opens one of your garage's tables in the data browser (its first page), or starts a pgAdmin session. It does not yet record what an operator views or changes after opening your garage as owner, individual pgAdmin queries, later pages or searches in the data browser, or direct administration of the server, such as maintenance over a secure shell.

S8. Sub-processors and other recipients

Sub-processors are other organisations that handle garage data for us. You give general authorisation for us to use them. Each must be bound by written terms that protect the data at least as well as this schedule, and we remain fully liable to you for them.

Before adding or replacing a sub-processor, we will update the list below and email your garage owner, at the address they sign in with, at least 30 days in advance. If you object on reasonable data protection grounds and we cannot meet the objection, you may end the agreement before the change takes effect.

Current list:

If a provider's UK Extension certification lapses, transfers to it will rely on the UK International Data Transfer Addendum to its standard contractual clauses.

Albion Test Centre Ltd. The MOT lookup is our own processing as controller (see S1), so Albion Test Centre Ltd is not our sub-processor. It is a UK MOT test centre that runs the MOT history lookup service we use, based on DVSA MOT history data. It receives only the registration number looked up, and there is no transfer outside the UK.

Intuit. Intuit is not our sub-processor. If you connect QuickBooks Online, you instruct us to send data to your own QuickBooks company, which Intuit provides under your agreement with Intuit and may process in the US and elsewhere. Intuit Inc. is certified under the UK Extension to the EU-US Data Privacy Framework, and transfers to it rely on that. During testing, only Intuit sandbox test companies can be connected. If Intuit's UK Extension certification lapses, transfers to it will rely on the UK International Data Transfer Addendum to Intuit's standard contractual clauses.

S9. Where data is held

During testing, the service, its database, backups and logs are on one server in Australia that we own and run ourselves. Because it is our own equipment and not another organisation's, holding data there is not a "restricted transfer" under the UK GDPR, but this schedule applies to it in full. Apart from the names and email addresses of the people you give logins to, and your garage's own business details, it must hold made-up data only. By using the service during testing, you instruct us to hold those details there.

Live UK garage data, including its backups and logs, will be hosted in the UK before any UK garage uses real data, and we will update these terms first. Real UK garage records will not be stored in Australia. We may reach the service from Australia for support and maintenance; that is AutoManage itself, and the same protections apply.

Before accepting live data from Australian garages, we will tell them where it will be stored. Once live data is accepted, we will not move your data to another country without telling you first and putting lawful safeguards in place.

Cloudflare decrypts and re-encrypts traffic on its global network, so data in transit may be handled outside the UK or Australia, under the safeguard listed in paragraph S8.

S10. Helping with people's rights

Your customers and staff cannot change their records themselves. Requests to see, correct, delete or move their data are for you to answer. If we receive one, we will pass it to you promptly and will not reply ourselves unless you tell us to.

On request, we will help you within a reasonable time, for example by extracting or deleting a person's records by hand where the app cannot. Records kept as evidence, such as issued invoices and approvals, cannot be changed through the app; we will discuss with you what the law requires in each case.

S11. Helping with security, breaches and impact assessments

We will tell you without undue delay after we become aware of a personal data breach affecting garage data. Where we can, we will do so within 48 hours, by email to your garage owner at the address they sign in with. We will tell you what we know about:

• what happened and when;
• the categories and approximate numbers of people and records affected;
• the likely consequences;
• what we have done or plan to do about it;
• who at AutoManage you can contact for more information.

We will follow up as we learn more. You decide whether to notify the people affected and the regulator: the Information Commission (ico.org.uk) or, for Australian garages, the Office of the Australian Information Commissioner (oaic.gov.au). On request, we will give you reasonable help with data protection impact assessments and with consulting the regulator.

S12. End of the service

At the end of the agreement, we will return or delete garage data, at your choice, as set out in section 7 of the terms, and delete remaining copies. Backup copies are removed after about two weeks. The only exception is where the law requires us to keep something.

S13. Information and audits

On request, we will give you the information you reasonably need to show that this schedule is being met, and allow and contribute to audits by you or an auditor you appoint who is bound by confidentiality. Audits are limited to once a year unless there has been a breach or a regulator requires one. They need 30 days' notice, are at your cost, and must be arranged so that other garages' data stays protected. We may first answer your questions in writing.

S14. Australian garages

For garages in Australia, we will:

• handle garage data only to provide, secure and support Workshop Manager for you, consistently with the Australian Privacy Principles;
• place the same limits on any subcontractor;
• leave you in control of who has access, and let you access, correct, retrieve and delete your data as set out above;
• tell you before live Australian garage data is stored outside Australia.

If we suspect a data breach, we will tell you promptly and help you assess it within the time allowed by the Notifiable Data Breaches scheme (Australia's rules on reporting serious data breaches). Unless we agree otherwise, you will make any notification to the OAIC and to affected people, because you have the direct relationship with them. For data we hold as controller, such as sign-in records, we make any notification ourselves.