Who we are
Autoclinic is operated by DAVID PHILLIPS AUTOS LTD, registered in Scotland under company number SC301609. Our registered address is 9 Pearce Road, Edinburgh, EH12 8ST.
This policy explains how we collect, use, store, and protect personal data when you use davidphililipsautos.com, our diagnostic tools, account pages, support forms, and related services.
Data we collect
We collect account data such as email address, authentication status, subscription plan, billing status, and a hashed password when password sign-in is used.
We collect uploaded vehicle photos, dashboard photos, short symptom videos, written descriptions, make, model, year, mileage, OBD-II codes, VIN if you choose to provide it, and diagnostic outputs generated for your account.
We also collect device data, log data, approximate region, cookie identifiers, consent records, product analytics events, payment event references, and support messages.
How we use data
We use personal data to provide account access, process diagnostic requests, display service credits, generate educational outputs, respond to support requests, prevent abuse, secure the service, and meet legal obligations.
Uploaded images and videos are processed only for your diagnosis. We do not sell personal data, and we do not use user uploads to train AI models. We may use anonymized aggregate signals, such as error rates and usage patterns, to improve reliability and product quality.
Retention
Vehicle uploads are deleted within 30 days unless a shorter retention period is required by account settings, law, security review, or an active support issue.
Account, billing, consent, and audit records are kept while your account is active and for 24 months after account closure where needed for legal, tax, security, dispute, and audit purposes.
Lawful bases
For UK GDPR and EU GDPR purposes, we rely on contract performance to provide the service you request, legitimate interests to secure and improve the service, consent for optional cookies and marketing, and legal obligation where we must keep billing or compliance records.
International transfers
We may use sub-processors outside the UK or EEA for hosting, analytics, payment processing, authentication, support, storage, and AI processing. Where required, we use Standard Contractual Clauses, the UK International Data Transfer Addendum, adequacy decisions, or equivalent safeguards.
Your rights
Depending on your location, you may request access, rectification, erasure, portability, restriction, objection, and withdrawal of consent. You may also complain to a data protection authority.
California residents may request to know, delete, correct, and receive information about personal data practices. We do not sell personal information. We honor Global Privacy Control signals for California residents where technically available.
Children
The service is not permitted for users under 13. Users aged 13 to 17 may use the service only with parental or guardian consent and supervision.
Security
We use encryption in transit and at rest where supported, access controls, least-privilege permissions, monitoring, and vendor due diligence. No internet service can guarantee absolute security, but we design Autoclinic to reduce unnecessary exposure.
Contact
For privacy requests or questions, contact support@davidphililipsautos.com.