Data Processing Agreement

The agreement UK data protection law requires between your shop (the controller of your customers’ data) and do.repair (your processor). It forms part of our Terms of Service, so you accept it when you create an account.

EFFECTIVE

15 October 2026

VERSION

2026-10-15

FROM

AMIRENA LTD

ON THIS PAGE

1. Who this is between

2. What we process for you

3. Your responsibilities

4. Our commitments

5. Our providers (sub-processors)

6. Transfers outside the UK

7. Personal data breaches

8. How long data is kept

9. When the service ends

10. Liability and conflicts

Annex 1: Security measures

OTHER DOCUMENTS

Terms of Service

Privacy Policy

Cookie Policy

This agreement is between the business that holds a do.repair account (the Controller, “you”) and AMIRENA LTD, trading as do.repair, company number 16001043, Arkley Road, Birmingham B28 9PJ (the Processor, “we”). It forms part of our Terms of Service and lasts as long as you use do.repair, plus the deletion period in section 9.

Words such as “personal data”, “processing”, “controller”, “processor” and “data subject” have the meanings given in the UK GDPR.

Purpose | Providing do.repair to you: bookings, jobs, quotes, invoices, payments, customer updates, the customer portal, AI features you use, and support.

People concerned | Your customers and enquirers, people who call your shop, people named in chats you import, and your team members.

Types of data | Names and contact details; addresses; device details, faults and job history; photos; messages; call recordings and transcripts if you use the AI receptionist; quotes, invoices and payment records (card details are held by Stripe, not us); marketing and WhatsApp consent records; reviews and feedback.

Sensitive data | Not intended. Do not record health, ID document or other special category data unless you need it and have a lawful basis.

Duration | While your account is open, then the deletion period in section 9.

You have a lawful basis for the data you put into do.repair, and the consents you need, for example for marketing and WhatsApp messages.

You tell your customers how their data is used. Each shop has a ready-made privacy notice to help, which you are responsible for checking.

Your instructions to us are lawful. Using do.repair’s features and settings counts as your instructions.

We will:

process your customers’ personal data only on your documented instructions, including when it is transferred, unless the law requires otherwise. If we think an instruction breaks data protection law, we will tell you;

make sure everyone who can access it is bound to keep it confidential;

protect it with the measures in Annex 1;

use other providers only as described in section 5;

help you respond to people using their data protection rights, using the export, correction, erasure and opt-out tools in do.repair, and with further help on request;

help you with security, breach notifications, data protection impact assessments and consultations with the ICO, taking into account what we process;

delete or return the data when the service ends, as set out in section 9;

give you the information you reasonably need to show you are meeting your obligations, and allow reasonable audits on 30 days’ notice, no more than once a year unless a regulator requires it or there has been a breach.

You give us general permission to use the providers below. A provider marked “Not yet connected” does not receive any data until the feature that needs it is switched on. We will give you at least 30 days’ notice, by email or in the app, before we add a provider or start using one that is not yet connected. You can object in that time. If we cannot reasonably meet your objection, you can cancel without penalty.

Each provider is bound by a written contract with data protection terms at least as protective as this agreement, and we remain responsible to you for them.

PROVIDER | WHAT FOR | DATA | WHERE | STATUS

Cloudflare, Inc. | Secure connection to our servers and protection against attacks | IP addresses and the content of requests passing through | Global network (US company) | In use

OpenAI, L.L.C. | AI features: drafting, photo estimates, call transcription | Job details, photos, call audio and transcripts | United States | In use

Anthropic, PBC | AI features (alternative AI provider) | Job details, photos and transcripts | United States | Not yet connected

Twilio Inc. | Phone calls, the AI receptionist, SMS and WhatsApp delivery | Phone numbers, message content, call audio | United States and EU | Not yet connected

Meta Platforms Ireland Ltd (WhatsApp) | WhatsApp Business messaging | Phone numbers and message content | Ireland and United States | Not yet connected

Namecheap, Inc. | Hosts our do.repair email inboxes (such as hello@ and privacy@), which receive contact form messages | Email addresses and the content of emails and contact form messages | United States company; data centre depends on the hosting plan | In use

Twilio SendGrid | Sending emails | Email addresses and email content | United States | Not yet connected

Stripe | Card payments and do.repair subscriptions | Payment details (held by Stripe, not us), names, amounts | UK, EU and United States | Not yet connected

Functional Software, Inc. (Sentry) | Finding and fixing errors in the software | Technical error reports, which can include an IP address | United States | Not yet connected

Xero Limited | Accounting sync | Invoices and customer contact details | United Kingdom, New Zealand and United States | Only if the shop connects it

Intuit Inc. (QuickBooks) | Accounting sync | Invoices and customer contact details | United States | Only if the shop connects it

Also contacted by visitors’ browsers, without data from us: Google Fonts (Google LLC) (loads the typefaces the site uses).

Hosting: do.repair runs on servers operated by us in the United Kingdom. Nightly backups are also kept in the UK.

Your data is stored in the UK. Some providers above are based in or process data in other countries, mainly the United States. We only make such a transfer with a safeguard UK law accepts: the UK International Data Transfer Agreement or Addendum, or the UK–US data bridge where the provider is certified under it.

If we become aware of a breach affecting your customers’ data, we will tell you without undue delay, and in any case within 48 hours, with what we know about what happened, the data and people affected, the likely consequences and what we are doing about it. We will keep you updated as we learn more, so you can meet the 72-hour deadline for reporting to the ICO where it applies.

do.repair applies these limits automatically every day. They are also shown in Settings → Privacy & data.

DATA | KEPT FOR | NOTES

Job records | 7 years | Required for tax and warranty disputes

Invoices, quotes & evidence PDFs | 7 years | HMRC record-keeping

Customer personal data | Relationship + 2 years, then anonymised | Names, phones and emails are pseudonymised

Message content | 2 years, then archived |

AI interaction logs | 1 year | Used for quality and cost tracking only

Job photos | 2 years (thumbnails kept) |

Voice call recordings | 30 days | Transcripts follow job retention

WhatsApp import files | 30 days | Only the extracted customers/prices are kept

Data export files | 30 days | Download links expire after 1 hour

Deleted accounts | 30 days, then permanently deleted | You can ask us to restore within 30 days

Login sessions | Until expiry (7 days) |

You can export all your data at any time from Settings → Privacy & data. When you close your account, we keep the data for 30 days so it can be restored if you change your mind, then delete it permanently, unless the law requires us to keep it. Backups are overwritten in their normal cycle. Make sure you have exported any records you must keep.

The limits of liability in the Terms of Service apply to this agreement, except where data protection law does not allow them to. If this agreement conflicts with the Terms on how personal data is handled, this agreement wins.

In transit: all connections use HTTPS. Our servers are reached only through Cloudflare’s secure tunnel and are not open to the internet directly.

Separation: each shop’s data is kept separate at the database level (row-level security), so one shop cannot reach another’s data.

Secrets: passwords are hashed. Connection tokens, keys and two-factor secrets are encrypted in the database (AES-256-GCM).

Access: staff access needs two-factor sign-in and is limited to what a person needs. do.repair staff can open a shop’s account only to give support, must record a reason, and each session ends after 30 minutes and is logged.

Accounts: sessions expire, sign-in attempts are limited, and sign-in links are single use.

Records: important actions are recorded in an audit trail.

Resilience: nightly backups, with tested restores.

AI: customer-written text is treated as data, never as instructions to the AI. Money matters and public replies need human approval.

Questions about this document: [email protected].

Version 2026-10-15, effective 15 October 2026. First published 10 October 2026. Changed on 15 October 2026: card payment fees, refunds and chargebacks, and VAT wording in the Terms of Service.