This privacy policy explains how Bazoo Accident Management trading as Bazoo Claims("we", "us", "our") uses personal data when you visit bazooclaims.com, submit an enquiry, or communicate with us about a motor incident.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR) where applicable.

1. Who we are

Data controller: Bazoo Accident Management (Bazoo Claims)
Contact: support@bazooclaims.com
Phone: +44 (0) 20 0000 0000

Registered office and company registration details are published in our admin settings and on correspondence we send you. If you need our full postal address, email us and we will provide it promptly.

2. What data we collect

Depending on how you interact with us, we may collect:

• Identity and contact data — name, email address, telephone number.
• Incident and vehicle data — vehicle registration, incident date, fault status, description of what happened, optional photos, and any reference you choose to provide.
• Claim and case data — if we progress your matter, notes, insurer references, repair or hire details, and documents you supply.
• Technical data — IP address, browser type, device information, and essential cookies (see our cookie policy).
• Communications — emails, WhatsApp messages, and call notes where you contact us.

We do not intentionally collect special category data (such as health information) through the website enquiry form. If you include health-related details in free text, we will treat them carefully and only use them where necessary for your case.

3. How we collect data

• Directly from you — enquiry wizard, email, phone, or WhatsApp.
• From third parties — insurers, repairers, credit-hire partners, or brokers where relevant to your case.
• Automatically — limited technical logs from our hosting provider.

4. Lawful bases for processing

We rely on the following lawful bases under UK GDPR:

• Consent — when you tick the consent box on the enquiry form and agree we may contact you about your incident.
• Contract / steps prior to contract — to assess and, if appropriate, provide accident management services you request.
• Legitimate interests — to operate our business, prevent fraud, improve our service, and follow up on enquiries, balanced against your rights.
• Legal obligation — where we must retain records for regulatory, tax, or court purposes.

5. How we use your data

• Review and respond to enquiries submitted via the website.
• Manage claims, repairs, vehicle replacement, recovery, and related services.
• Communicate with you, insurers, and approved suppliers about your case.
• Maintain internal records in our CRM (customer relationship management) system.
• Send your enquiry summary via WhatsApp when you choose to use that channel after submitting the form.
• Meet legal, regulatory, and accounting requirements.

We do not sell your personal data.

6. WhatsApp

If you use WhatsApp to contact us or send a copy of your enquiry after submitting the form, your message is processed by Meta Platforms Ireland Ltd under WhatsApp's own privacy policy. We receive the content you send to our business number and store it with your enquiry or claim file where relevant.

7. Sharing your data

We may share personal data with:

• Insurers and their representatives involved in your claim.
• Approved repairers, vehicle hire providers, recovery agents, and legal advisers.
• Service providers who host our website and CRM (for example cloud database and hosting providers), under appropriate contracts.
• Regulators, courts, or law enforcement when required by law.

We require processors to protect data and only use it as we instruct.

8. International transfers

Some service providers may store or process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place (such as UK adequacy regulations or standard contractual clauses approved for UK GDPR).

9. Retention

We keep personal data only as long as needed for the purposes above, including while a claim or enquiry is active and for a reasonable period afterwards to meet legal and insurance requirements (typically up to six years for contract-related records, or longer where law requires). Enquiries we do not take forward are usually deleted or anonymised within twelve months unless you ask us to retain them.

10. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure in certain circumstances.
• Restrict or object to processing in certain circumstances.
• Data portability where processing is based on consent or contract and automated.
• Withdraw consent at any time (without affecting prior lawful processing).

To exercise these rights, email support@bazooclaims.com. We may need to verify your identity before responding.

You may also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint.

11. Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls on our admin systems, and secure hosting. No method of transmission over the internet is completely secure; please avoid sending highly sensitive documents unless we provide a secure channel.

12. Children

Our services are not directed at children under 18. If you believe a child has submitted personal data to us, contact us and we will delete it where appropriate.

13. Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Material changes will be highlighted on this page.