Privacy Policy

This Privacy Policy describes the policies of Qwualiti Ltd, 128 City Road, London, United Kingdom, EC1V 2NX (hello@kwoute.com) on the collection, use, and disclosure of your information when you use kwoute.com (the 'Service').

By accessing or using the Service, you consent to the practices described in this Policy. We may modify this Policy at any time and will post the revised version on the Service, updating the 'Last Updated' date above. Material changes will be communicated by email where we hold your address. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Policy.

1. Information We Collect

2. How We Use Your Information

We use the information we collect to:

• —Provide the Service — process uploaded quotes, generate assessment reports, and deliver results to you
• —Maintain your account — store your quote history, credits, and subscription status
• —Improve our benchmark data — we use anonymised, aggregated data derived from processed quotes to maintain and improve our pricing benchmarks. This data is stripped of all personal identifiers before use and cannot be used to identify you, your vehicle, or the specific garage in your quote
• —Operate the garage registry — we maintain an aggregated, anonymised registry of garage pricing patterns. Individual report data is never linked back to garages in a way that could expose your personal data
• —Process payments — manage subscriptions, credit balances, and billing
• —Communicate with you — send transaction confirmations, report notifications, and where you have opted in, product updates
• —Comply with legal obligations — retain records as required by applicable law

3. How We Share Your Information

We do not sell your personal information. We do not share individual report data with garages or any third party for commercial purposes.

We share information with the following third-party service providers who perform services on our behalf:

All third-party providers are bound by data processing agreements and are prohibited from using your information for any purpose other than providing services to us. We may also disclose your information where required by law or court order.

4. Lawful Basis for Processing (UK GDPR)

We process your personal data on the following lawful bases:

• —Contract performance — processing necessary to provide the Service you have requested
• —Legitimate interests — usage analytics, fraud prevention, service improvement, and maintenance of our aggregated benchmark data — where these interests are not overridden by your rights
• —Legal obligation — where we are required to process data by applicable law
• —Consent — where you have opted in to marketing communications; you may withdraw consent at any time

5. Your Rights Under UK GDPR

As a UK resident, you have the following rights in relation to your personal data:

• —Right of access — request a copy of the personal data we hold about you
• —Right to rectification — ask us to correct inaccurate or incomplete data
• —Right to erasure — ask us to delete your personal data, subject to certain exceptions where we are required to retain data by law
• —Right to restriction — ask us to restrict processing of your data in certain circumstances
• —Right to data portability — request a machine-readable copy of your data to transfer to another provider
• —Right to object — object to processing based on legitimate interests, including for direct marketing
• —Rights related to automated decision-making — our assessment reports involve automated processing; you have the right to request human review of any automated output that significantly affects you

To exercise any of these rights, contact us at hello@kwoute.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

6. Data Retention

When you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law.

7. Security

We implement appropriate technical and organisational measures to protect your data, including encrypted data transmission (TLS), access controls, and regular security reviews. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify you and the ICO as required by UK GDPR.

8. Cookies

Our website uses cookies and similar tracking technologies to operate the Service and understand how it is used. You can control cookie settings through your browser; disabling certain cookies may affect the functionality of the Service.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised Policy on the Service and update the 'Last Updated' date above. Material changes will be communicated by email where we hold your address.