Privacy Policy

Last updated: 07.07.2026

1.1 Introduction

This Privacy Policy explains how Mosero Performance Ltd (“Mosero Performance”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal data when you visit our website at https://mosero.co.uk (the “Website”), contact us, book a vehicle in for work, or otherwise engage our services.

We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (“PECR”), each as amended by the Data (Use and Access) Act 2025.

1.2 Who Is the Data Controller

The data controller responsible for your personal data is Mosero Performance Ltd, a company registered in England and Wales, of Unit A6 Lower Rd, Northfleet Industrial Estate, Northfleet, Gravesend, Kent, DA11 9SN. You can contact us about any privacy matter at info@mosero.store or on 07879 555 335.

1.3 Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity and contact data: your name, email address, telephone number, and any details you provide when you call, email, message us on social media, or complete a contact or booking enquiry on the Website.
  • Vehicle and service data: vehicle registration, make, model and mileage, service and MOT history, diagnostic results, and details of any work carried out or requested.
  • Enquiry and correspondence data: the content of any message, enquiry, or booking request you send us, and records of our replies.
  • Technical and usage data: your IP address, browser type and device, pages visited, time on page, and referral source, collected automatically through cookies and similar technologies when you use the Website (see our Cookie Policy).
  • Marketing preference data: your preferences for receiving marketing communications from us, and records of consent given or withdrawn.
  • CCTV footage: if you visit our premises, footage from our site security cameras, operated for crime prevention and safety purposes.

We do not intentionally collect special category data (such as health or financial background data) except where you volunteer it in the course of an enquiry. Our services are directed at adults, the Website is not intended for children, and we do not knowingly collect personal data from anyone under the age of 18.

1.4 How We Collect Your Data

We collect personal data: (a) directly from you, when you complete forms on the Website, email or call us, or bring your vehicle to us for work; (b) automatically, through cookies and analytics tools when you use the Website; and (c) from third parties, such as the DVSA, parts suppliers, or manufacturers, where relevant to a service or repair.

1.5 Purposes and Lawful Bases for Processing

We process personal data only where we have a lawful basis under Article 6 of the UK GDPR. The list below summarises our purposes and lawful bases:

  • Responding to enquiries and booking requests – lawful basis: legitimate interests in responding to business enquiries, and/or steps taken at your request prior to entering into a contract.
  • Carrying out MOT tests, servicing, diagnostics, repairs, tuning and vehicle security work you have booked – lawful basis: performance of a contract with you, and invoicing for that work.
  • Keeping MOT and vehicle safety records – lawful basis: compliance with our legal obligations to the DVSA and under UK vehicle safety law.
  • Accounting, tax and record-keeping – lawful basis: compliance with legal obligations under UK tax law.
  • Operating, securing and improving the Website, including CCTV and fraud prevention on our premises – lawful basis: legitimate interests in running a safe and functional business; consent where required for non-essential cookies.
  • Sending marketing communications about our services – lawful basis: consent, or, for existing customers, legitimate interests under the “soft opt-in” rules in PECR. You may opt out at any time.
  • Establishing, exercising or defending legal claims – lawful basis: legitimate interests in protecting our legal position.

Where the Data (Use and Access) Act 2025 lists a processing activity as a “recognised legitimate interest” (for example, certain safeguarding, crime-prevention or public-interest reporting activities), we may rely on this basis without a full legitimate interests balancing test, while still applying the wider data protection principles. Where we otherwise rely on legitimate interests, we have balanced those interests against your rights and freedoms and concluded that our processing does not unfairly prejudice you. You may request details of our balancing assessments by contacting us.

1.6 Who We Share Your Data With

We may share your personal data with:

  • Parts suppliers and manufacturers, including for BMW-specific parts, warranty claims, or software updates.
  • The DVSA and other regulators, where legally required (for example, MOT records).
  • Our service providers, including website hosting, email, and booking platform providers, who process data on our behalf under contract.
  • Payment processors, if you pay online or by card.
  • Social media and advertising platforms, such as Meta/Facebook and Instagram, where you interact with our pages or where our Website uses tracking pixels – see our Cookie Policy for details.
  • Professional advisers, insurers, or authorities, where required by law or to establish, exercise or defend legal claims.

We do not sell personal data, and we do not share personal data with third parties for their own marketing purposes.

1.7 International Transfers

Some of our service providers, such as cloud hosting, email, or social media platforms, may store or process data outside the United Kingdom, including in the United States. Where this happens, we rely on the UK’s data bridge arrangements, the UK International Data Transfer Agreement or Addendum, or another lawful transfer mechanism recognised under the UK GDPR as amended by the Data (Use and Access) Act 2025, to ensure your data receives an equivalent standard of protection. You may request further information about transfer safeguards by contacting us.

1.8 How Long We Keep Your Data

  • Vehicle service and MOT records: retained for a minimum of the period required by DVSA and industry practice, and for as long as needed to support warranty or safety queries.
  • Enquiry and booking correspondence: typically retained for up to 3 years, or as long as needed to resolve the enquiry and defend any related claim.
  • Accounting and tax records: at least 6 years, as required by UK law.
  • Marketing contact details: retained until you opt out or ask us to delete them.
  • CCTV footage: typically retained for 30 days, unless needed for an ongoing investigation.

When data is no longer required, it is securely deleted or anonymised.

1.9 How We Protect Your Data

We apply appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) on the Website, access controls on systems holding customer and vehicle records, use of reputable service providers, and limiting access to personal data to those who need it. No system can be guaranteed completely secure; if we become aware of a personal data breach likely to result in a risk to your rights, we will notify the ICO and, where required, affected individuals, in accordance with the UK GDPR.

1.10 Your Rights

Subject to certain conditions and exemptions, you have the following rights in relation to your personal data:

  • the right to be informed about how your data is used (this Policy);
  • the right of access to your personal data (a “subject access request”);
  • the right to rectification of inaccurate or incomplete data;
  • the right to erasure (“right to be forgotten”) in certain circumstances;
  • the right to restrict processing in certain circumstances;
  • the right to data portability for data you provided to us that we process by automated means on the basis of consent or contract;
  • the right to object to processing based on legitimate interests, and an absolute right to object to direct marketing;
  • the right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal; and
  • rights in relation to automated decision-making. We do not carry out automated decision-making, including profiling, that produces legal or similarly significant effects.

To exercise any right, contact us at info@mosero.store. We will respond within one month, which may be extended by up to two further months for complex requests. We will not charge a fee unless a request is manifestly unfounded or excessive.

1.11 Complaints

If you are unhappy with how we have handled your personal data, you can complain to us directly, free of charge, by email to info@mosero.store, marked “Data Protection Complaint”, or by post to our address in section 1.2. We will acknowledge your complaint within 30 days and provide a full response without undue delay, in line with the data protection complaints right introduced by the Data (Use and Access) Act 2025.

If you remain unhappy after raising a complaint with us, or wish to complain directly, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, telephone 0303 123 1113, website ico.org.uk.

1.12 Third-Party Links

The Website may contain links to third-party websites, including Instagram, Facebook, and Google Maps. We are not responsible for the privacy practices of those websites. Please review their privacy policies before providing them with personal data.

1.13 Changes to This Policy

We may update this Privacy Policy from time to time, for example to reflect legal or operational changes. The “Last updated” date at the top of this Policy shows when it was last revised. We encourage you to check this page periodically.