Your privacy matters to us. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights regarding your data. We are committed to being transparent and handling your data responsibly.
RSMECHS is operated by RCJ Mobile Mechanics Limited ("we", "us", "our"). We are the data controller responsible for your personal information collected through the RSMECHS platform at rsmechs.com and any associated mobile applications.
For privacy-related matters, contact our Data Protection contact at privacy@rsmechs.com or call 658-207-6565.
| Category | Examples | Who Provides It |
|---|---|---|
| Identity | First name, last name, profile photo | All users |
| Contact | Email address, phone number | All users |
| Account | Password (hashed), account type, plan | All users |
| Vehicle | Make, model, year, description of issue | Customers |
| Professional | Certifications, experience, speciality, work history | Mechanics |
| Identity Verification | Government-issued ID, professional certificates | Mechanics |
| Financial | Bank account details for payouts (processed by Stripe) | Mechanics |
| Reviews | Star ratings, written comments | Customers |
| Communications | Messages sent through in-app chat or email | All users |
| Category | Examples |
|---|---|
| Device & Technical | IP address, browser type, operating system, device identifiers |
| Usage | Pages visited, features used, time spent, clicks, search queries |
| Location | GPS coordinates (when you use location features), approximate location from IP |
| Cookies | Session tokens, preference cookies, analytics identifiers |
| Transaction | Booking history, payment amounts, timestamps |
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Creating and managing your account | Identity, contact, account data | Contract performance |
| Processing bookings and payments | Identity, vehicle, financial, location | Contract performance |
| Verifying mechanic qualifications | Professional, identity verification | Legitimate interests / Legal obligation |
| Facilitating GPS tracking during service | Location data | Consent |
| Sending booking confirmations and updates | Contact, transaction data | Contract performance |
| Sending marketing emails | Contact, preferences | Consent (opt-in only) |
| Improving the Platform | Usage, device data | Legitimate interests |
| Preventing fraud and ensuring safety | All categories | Legitimate interests / Legal obligation |
| Complying with legal obligations | All categories | Legal obligation |
| Resolving disputes | All relevant data | Legitimate interests / Legal obligation |
We do not sell your personal data. We share data only as necessary to operate the Platform and as described below.
When a Booking is confirmed, limited profile information is shared between the Customer and Mechanic to facilitate the service — specifically name, contact details, vehicle information (Customer to Mechanic), and general location.
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing, payouts | Identity, financial details |
| Supabase | Database and authentication hosting | All platform data (encrypted) |
| Resend | Transactional email delivery | Email address, email content |
| Netlify | Website hosting | IP address, usage data |
| Maps, location services, fonts | Location queries, IP address |
We may disclose your data if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of RSMECHS, our users, or the public.
If RSMECHS is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
Location data is central to how RSMECHS works. Here is how we handle it:
| Feature | Data Collected | When | Who Can See It |
|---|---|---|---|
| Mechanic search | Your approximate location | When you search for mechanics | Used only to find nearby mechanics |
| Live GPS tracking | Mechanic's real-time GPS coordinates | When mechanic shares location en route | Customer with active booking only |
| Mechanic registration | Service area location | During registration | Shown on public mechanic profile |
Location sharing is always initiated by the user. Mechanics control when they share their live location. We do not track mechanic location continuously — only when they explicitly activate location sharing for a specific booking.
Cookies are small text files stored on your device when you visit our Platform. We use cookies and similar technologies for the following purposes:
| Type | Purpose | Can Be Disabled |
|---|---|---|
| Essential | Authentication, security, core functionality | No — required for Platform to work |
| Functional | Remember your preferences, language settings | Yes |
| Analytics | Understand how users interact with the Platform | Yes |
| Marketing | Personalised advertising (if applicable) | Yes — opt-in only |
You can control cookies through your browser settings. Note that disabling essential cookies will affect Platform functionality. For more information on managing cookies, visit allaboutcookies.org.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account data | Duration of account + 2 years after closure | Legal obligation, dispute resolution |
| Booking records | 7 years | Financial record-keeping requirements |
| Payment records | 7 years | Tax and financial regulation compliance |
| Reviews | Duration of mechanic account | Platform integrity |
| Identity documents | 2 years after account closure | Fraud prevention, legal obligation |
| Location data (live tracking) | 30 days after booking completion | Dispute resolution |
| Communications/messages | 2 years | Dispute resolution |
| Marketing preferences | Until you opt out or close account | Consent management |
After the applicable retention period, data is securely deleted or anonymised. We may retain anonymised, aggregated data indefinitely for analytics purposes.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These include:
No system is 100% secure. While we take security seriously, we cannot guarantee absolute security. If you suspect a security breach involving your account, contact us immediately at security@rsmechs.com.
RSMECHS operates globally, and your data may be processed in countries other than your own. Our infrastructure providers (Supabase, Stripe, Netlify) may process data in the United States and other countries.
Where we transfer data outside your jurisdiction, we ensure appropriate safeguards are in place:
Depending on your location, you have various rights regarding your personal data. We respect all applicable rights:
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your data ("right to be forgotten") subject to legal obligations.
Request that we limit how we use your data in certain circumstances.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or for marketing purposes.
Withdraw consent at any time where processing is based on consent.
Not be subject to solely automated decisions that significantly affect you.
| Jurisdiction | Additional Rights |
|---|---|
| EU / EEA (GDPR) | All rights above apply in full. Right to lodge a complaint with your national Data Protection Authority (DPA). |
| United Kingdom (UK GDPR) | Same as GDPR. Right to complain to the Information Commissioner's Office (ICO). |
| California, USA (CCPA/CPRA) | Right to know, right to delete, right to opt-out of sale (we do not sell data), right to non-discrimination, right to correct. |
| Jamaica (DPA 2020) | Rights to access, correct, and object to processing of personal data. |
| Canada (PIPEDA) | Right to access, right to challenge accuracy, right to withdrawal of consent. |
| Australia (Privacy Act) | Right to access and correct personal information held about you. |
To exercise any of your rights, contact us at privacy@rsmechs.com with:
We will respond within 30 days (or sooner where required by law). We may need to verify your identity before processing your request. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive.
The Platform is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a child under 18, we will delete it promptly.
If you believe we have inadvertently collected data from a minor, please contact us at privacy@rsmechs.com immediately.
The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policies of any third-party services you use.
Third-party services we integrate with include:
We may update this Privacy Policy from time to time. When we make significant changes, we will:
Your continued use of the Platform after changes are posted constitutes your acceptance of the updated Policy. If you do not agree, please stop using the Platform and request deletion of your account.
For any privacy-related questions, requests, or concerns:
| Method | Details |
|---|---|
| privacy@rsmechs.com | |
| Phone | 658-207-6565 |
| Post | RCJ Mobile Mechanics Limited — Data Privacy, RSMECHS |
If you are not satisfied with how we handle your privacy concern, you have the right to lodge a complaint with your local data protection authority: