Legal

Privacy Policy

Last updated: 2 May 2026

buRm ("we") respects your privacy. This policy explains what data we collect, why we collect it, and what your rights are under the EU General Data Protection Regulation (GDPR).

1. Data we collect

  • Order data: name, email, phone, shipping address, Eircode, order notes.
  • Contact form data: name, email, message.
  • Diagnostic data: the OBD code and optional vehicle details you submit (no personal data unless you add it).
  • Payment data: handled directly by Stripe — we never see or store your card details.

2. Why we collect it

  • To fulfil and ship your order (legal basis: contract).
  • To respond to your enquiry (legal basis: legitimate interest).
  • To improve the AI diagnosis tool (legal basis: legitimate interest).

3. Who we share it with

  • Stripe — payment processing.
  • Supabase / Lovable Cloud — secure hosting of order and contact data.
  • An Post / courier — delivery of your order.
  • OpenAI / Google AI — to generate the plain-English explanation of OBD codes (only the code text is sent, not your personal details).

We never sell your data.

4. How long we keep it

Order records are kept for 6 years to comply with Irish tax law. Contact-form messages are kept for up to 2 years. Diagnostic queries are stored without personal identifiers.

5. Your rights

You have the right to access, correct, delete, or export your personal data. To exercise any of these, email info@beyourmechanic.com and we'll respond within 30 days. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

6. Cookies

We use only essential cookies needed to run the site and process payments via Stripe. We do not use advertising or tracking cookies.

7. Data controller

Ravinder Pal Singh, trading as buRm, Ireland.
Email: info@beyourmechanic.com