This is a draft notice describing the supplied website. The business owner must confirm the legal data-controller identity and address, retention periods, lawful bases, hosting/email providers and any international transfers before publishing. It is not legal advice.
Who to contact
For questions about information supplied through this website, contact Co Star Auto Locksmiths at contact@costarautolocksmith.uk or call 07347 413845. The business owner must add their full legal identity and contact address before launch.
What the enquiry form collects
The form asks for your name, email, optional phone number, vehicle make/model/year, optional registration, key type, remaining working keys, location, authorisation confirmation and optional problem description. Do not include identity documents, payment information, access codes or vehicle security codes.
How an enquiry is sent
When you submit, the hosted website sends these details to its PHP enquiry service, which validates them and passes an email to the business mailbox. A security token and an empty anti-spam field are also checked. The form does not subscribe you to marketing and does not save your details in browser storage or a website enquiry database.
The business mailbox, hosting system and their providers may retain messages and technical logs under their own arrangements. The owner must document these providers, access controls, retention/deletion periods and any overseas processing. Use the phone or email contact if you want to discuss your data.
Why the details are needed
Vehicle and contact information is requested to assess your enquiry and respond about possible work. Security checks help prevent misuse of the form. The owner must confirm the appropriate UK GDPR lawful bases for responding to requested services and protecting the website, and explain them in the final published notice.
The postcode checker
The checker runs in your browser. It compares the format and outward postcode area against an enquiry-area guide; it does not look up a real address, track your location or send your postcode to an external service. Following its enquiry link puts the district into the quote-page URL and location field. A submitted enquiry then includes that location.
Cookies and external services
The supplied website uses no advertising cookies, analytics, third-party fonts, embedded maps or social trackers. Submitting the enquiry form starts an essential server-side session for a security token and short-term anti-abuse counters. Its session cookie is HttpOnly and SameSite Strict, and Secure on HTTPS hosting. This is not used to track you across websites.
Hosting providers may add their own cookies or scripts. Review the deployed site and update this notice if anything else is added. Do not add a blanket cookie banner without checking what the deployed site actually uses.
Your rights
Depending on the circumstances, UK data-protection law provides rights to access, correct, erase or restrict use of personal data, object to processing and request portability. Contact the business to exercise your rights. You can also complain to the UK Information Commissioner’s Office at ico.org.uk.
Keeping information safe
The hosted site must use HTTPS. Share only the initial details needed for your enquiry. Ownership checks should be arranged separately, not by uploading documents to this form. Email acceptance is not a guarantee of delivery or confidentiality beyond the security provided by the hosting and email systems.