Privacy Policy

1. Who We Are

Black Eagle Recovery Ltd ("we", "us", "our") operates the website at www.blackeaglerecovery.co.uk and provides direct, in-house vehicle recovery and roadside assistance services across London and the South East of England.

We are the data controller for the personal information we collect through this website and in the course of providing our services. All recovery and transport services are carried out by our own in-house team — we do not share your personal data with third-party recovery operators or brokers.

If you have any questions about how we handle your data, please contact us:

2. What Information We Collect

We collect personal information in the following circumstances:

a) Contact and Quote Enquiries

When you submit a contact or quote request form, call us, or message us via WhatsApp, we collect:

• Your name
• Your email address
• Your phone number
• Your vehicle make, model, and registration (where provided)
• Your location or postcode
• Details of your enquiry or breakdown situation

b) Fleet Account Enquiries

When you enquire about or apply for a fleet account, we additionally collect:

• Your company name and registered address
• Your job title and business contact details
• The number and types of vehicles in your fleet
• Your preferred invoicing and payment details

c) Website Usage Data

When you visit our website, we may collect technical information such as your IP address, browser type, pages visited, time on site, and referring website. This is collected via cookies and analytics tools (see Section 7).

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to your enquiry or quote request — so we can contact you and arrange recovery or transport services.
• To dispatch our in-house team to your location — your location, vehicle details, and contact number are passed directly to the member of our team attending your job.
• To manage fleet accounts — including invoicing, job records, and account communications for business customers.
• To provide and improve our services — including analysing response times, job outcomes, and customer feedback.
• To comply with legal obligations — including record-keeping requirements under UK law and our ISO 9001:2015 quality management obligations.
• To send service-related communications — such as job confirmations or follow-up messages. We do not send marketing emails without your explicit consent.

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following legal bases to process your personal data:

• Contract performance — processing is necessary to fulfil a service you have requested (e.g. arranging a recovery or setting up a fleet account).
• Legitimate interests — processing is necessary for our legitimate business interests, such as responding to enquiries, improving our services, and maintaining job records, provided these interests are not overridden by your rights.
• Legal obligation — processing is required to comply with applicable UK law or our ISO 9001:2015 certification requirements.
• Consent — where we rely on your consent (e.g. for non-essential cookies), you have the right to withdraw it at any time.

5. How We Share Your Information

We do not sell your personal data. We do not share your personal data with third-party recovery operators, brokers, or network intermediaries. Your information is handled exclusively by Black Eagle Recovery Ltd and our directly employed or contracted in-house team.

We may share your data only in the following limited circumstances:

• Technology service providers — third-party providers who help us operate our website, email, and communications infrastructure (e.g. hosting providers, email delivery services). These providers act as data processors under our instruction and are bound by data processing agreements. They may not use your data for their own purposes.
• Legal authorities — where required by law, court order, or to protect the rights and safety of our customers or staff.
• Business transfers — in the event of a merger, acquisition, or sale of the business, your data may be transferred to the new owner, who will be required to honour this Privacy Policy.

6. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes described in this policy. In general:

• Enquiry and contact form data is retained for up to 12 months from the date of submission.
• Job records and fleet account data are retained for up to 6 years for accounting and legal compliance purposes.
• Data required for legal or regulatory compliance, including our ISO 9001:2015 quality records, may be retained for longer where required by law or certification standards.

7. Cookies

Our website uses cookies — small text files stored on your device — to help the site function correctly and to understand how visitors use it.

Essential Cookies

These are strictly necessary for the website to work (e.g. remembering your cookie consent choice). They cannot be disabled.

Analytics Cookies

With your consent, we use analytics tools to understand visitor behaviour (e.g. which pages are most visited, how users navigate the site). This data is aggregated and anonymised where possible and is used solely to improve our website.

You can manage your cookie preferences at any time by clearing your browser's local storage or adjusting your browser settings. Our cookie consent banner allows you to accept or decline non-essential cookies on your first visit.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to ask us to correct inaccurate or incomplete data.
• Right to erasure — to request that we delete your data, subject to legal obligations.
• Right to restrict processing — to ask us to limit how we use your data in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details in Section 1. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption for all data in transit. Access to personal data is restricted to authorised members of our in-house team only.

As an ISO 9001:2015 certified business, we maintain documented procedures for data handling and security as part of our quality management system.

No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. If you believe your data has been compromised, please contact us immediately.

10. Third-Party Links

Our website may contain links to third-party websites (e.g. WhatsApp, Google Maps, Trustpilot, Yell.com). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies separately.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. The "Last updated" date at the top of this page will be revised accordingly. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us: