WeSprayAnyCar.com — last updated 21 October 2026

This policy explains what information we collect when you use the wesprayanycar.com website or the WeSprayAnyCar app, what we do with it, and your rights.

Who we are

WeSprayAnyCar.com is run by WESPRAYANYCAR.COM(UK) LTD, company number 10182550, registered in England and Wales. Registered office: 128 City Road, London, EC1V 2NX. We are the “data controller” for the information described here. If you have any questions about this policy or your data, email hi@wesprayanycar.com.

We help you get vehicle bodywork damage assessed and repaired by local bodyshops and mobile repair specialists (“repairers”) across the UK.

What we collect and why

When you get a price or book a repair:

• Your contact details – your name, mobile number and email address, so the repairer can confirm your booking and we can send you confirmations, receipts and payment links.
• Your vehicle registration – used to look up your vehicle’s make, model, colour, year and type (car, SUV, pickup or van) so the repairer can price the work. See “Vehicle lookups” below.
• Your postcode or location – used to find repairers near you. If you tap “Use my location” the app or browser asks your permission first; otherwise we use the postcode you type.
• Photos of your vehicle – taken with your camera or uploaded by you. They are used to assess the damage and are shared with the repairer you choose.
• Details of the damage – which panels are affected, what kind of damage and how bad it is.
• Booking and payment records – the repairer you chose, the price, the date requested, what you paid and when, messages between you and the repairer, and the status of the job.

When you create a customer account: your name, email address and mobile number, a password that we store only in protected (hashed) form, and a one-time code sent to your email to prove it is yours.

When you leave a review: your first name, your rating and what you wrote, plus any photos you add. Reviews are shown publicly on the repairer’s listing.

If you are a repairer: your business name, address, phone, website, email, the name of the person who claimed the listing, your price list, your plan and payment status, bank details you give us for payouts, the names and email addresses of team members you invite, and everything you do in the business app (jobs, estimates, invoices, messages, photos).

Technical information: browser type, device type, operating system, IP address, pages visited and the time of each visit. This is collected by our hosting provider’s logs and, with your consent, by Google Analytics (see “Cookies and analytics”).

Vehicle lookups

When you enter a registration we send it to the Driver and Vehicle Standards Agency (DVSA) vehicle data service to identify the vehicle. The DVSA returns the make, model, colour, fuel type and year. We keep that result with your booking. We do not receive or store the keeper’s name or address.

Camera access (app)

The WeSprayAnyCar app asks for permission to use your camera for one purpose only: taking photos of your vehicle’s damage during the guided walk-around. Photos are only taken when you press the capture button. You can use much of the app without granting camera access, but a repairer cannot assess damage without photos.

Payments

Payments are taken by Stripe, our payment provider. Your card details go directly to Stripe over an encrypted connection; we never see or store your card number. Stripe tells us whether a payment succeeded, the amount and the last four digits of the card. If you choose to pay with Klarna, Klarna decides whether to offer you instalments and handles that agreement under its own privacy policy. Read Stripe’s policy at stripe.com/privacy and Klarna’s at klarna.com/uk/privacy.

Who we share your information with

• The repairer you choose – when you book or send a quote request, we pass them your name, contact details, vehicle details, damage photos, the panels you marked and your requested time, so they can confirm and do the work. Under our 24-hour promise, if a repairer does not confirm your booking in time, we pass the same details to the next nearest repairer.
• Stripe and Klarna – to take your payment and process refunds.
• Our hosting and email providers – the website and app run on WordPress.com (Automattic Inc.), which stores our data and sends our emails. Some of Automattic’s servers are outside the UK; transfers are covered by the UK’s data-transfer rules and Automattic’s standard safeguards.
• Google – Google Analytics, only if you accept analytics cookies.
• Apple and Google – if you download the app from the App Store or Google Play, they collect the usual app-store data under their own policies.
• The DVSA – your registration number, to identify the vehicle.
• Authorities – if the law requires it, or to deal with fraud or a dispute.

We do not sell your personal information to anyone, and we do not share it with marketing companies.

Our legal grounds

We use your information because it is needed to provide the service you asked for (the contract), because we have a legal duty (keeping accounting records, dealing with disputes), because you have given consent (analytics cookies, location access, camera access), and because we have a legitimate interest in keeping the site secure and preventing fraud.

How long we keep it

• Bookings, payments and invoices: 6 years after the job, because tax law requires us to keep accounting records.
• Photos and damage details that lead to a booking: 12 months after the job is finished, then deleted. The booking record stays without the photos.
• Quotes and photos that do not lead to a booking: 12 months, then deleted.
• Customer and repairer accounts: for as long as the account is open, plus 12 months. You can ask us to close your account at any time.
• Reviews: for as long as the repairer’s listing is live, unless you ask us to remove yours.
• Email and server logs: up to 90 days.

Your rights

Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you have the right to:

• See the personal data we hold about you
• Correct anything that is wrong
• Delete your data (the “right to be forgotten”), unless we have to keep it by law
• Object to or restrict how we use it
• Take your data with you in a usable format
• Withdraw consent at any time where we rely on consent (for example analytics cookies)

To use any of these rights, email hi@wesprayanycar.com. We will respond as soon as we can, and always within one month. If you are not happy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Cookies and analytics

Our website uses a small number of cookies that are needed to make the site work: for example remembering your quote as you move between steps, keeping you signed in, and protecting forms against spam. These do not need your consent.

We also use Google Analytics to understand how the site is used (which pages are visited, roughly where visitors are, how they found us). Google Analytics only runs if you accept analytics cookies in the banner when you first visit. You can change your mind at any time using the cookie link in the footer. Google’s policy is at policies.google.com/privacy.

The app stores your reg, postcode and vehicle details on your phone so they are filled in next time. They stay on your device.

Children

Our services are for vehicle owners and drivers aged 18 or over. They are not directed at children and we do not knowingly collect their data.

Security

Everything between your device and our servers is encrypted. Payment details never touch our systems. Passwords are stored only in hashed form. Access to booking data is limited to the repairer handling your job and to the people at WeSprayAnyCar who need it.

Changes to this policy

If we make meaningful changes we will update this page and the date at the top. Changes that matter to you will be mentioned in your next booking email.