1. Who we are
Intravyn Ltd trading as Intravyn, company 17252837, is registered in England and Wales at Reeth Cottage, Aysgarth, Leyburn, DL8 3AH. The Data Protection Lead is Intravyn Ltd and can be contacted at legal@intravyn.com.
This Notice applies to authorised adult users acting for UK garage businesses and visitors to vehivyn.intravyn.com and app.vehivyn.intravyn.com.
2. When we are controller or processor
Intravyn is controller for website visitors, registration and account administration, security logs, service communications, optional direct marketing, supplier management, legal compliance and our own consent-based marketing analytics.
Your garage business is controller for customer, vehicle, job, staff, quote, invoice and other personal data it chooses to enter. Intravyn processes that data on the garage’s documented instructions under the DPA. People whose information a garage enters should normally contact that garage first.
3. Personal data we use
- Account and business details: name, work email, company, role, credentials and verification state.
- Service and support records: requests, correspondence and operational activity.
- Technical and security information: IP address, user agent, authentication and audit events, device and request information.
- Marketing choices: email, channel, granted or withdrawn state, wording version, source and server timestamp.
- With analytics consent, pseudonymous visitor and session UUIDs, page path, external referrer host, consent-policy version and time; form contents and email are not included in page views.
- Garage-controlled Customer Data described in the DPA processing schedule.
4. Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Create and administer business accounts; provide Vehivyn and support | Contract and steps requested before contract |
| Protect the service, prevent abuse and keep operational records | Legitimate interests in operating a safe, reliable B2B service; legal obligation where applicable |
| Send essential verification, account and service messages | Contract and legitimate interests; these are not marketing |
| Send optional product news and garage tips by email | Consent, recorded separately and withdrawable at any time |
| Measure website use and signup conversion for statistical service improvement | Consent for optional storage/access and associated processing |
| Comply with law and establish or defend claims | Legal obligation and legitimate interests |
We do not use website analytics for advertising, behavioural targeting, user scoring or automated decisions.
6. International transfers
The primary Vehivyn server is in Manchester, United Kingdom. A provider may process support, account or email data from other countries. Where UK personal data is transferred internationally, Intravyn requires a lawful transfer mechanism such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum, plus supplementary measures where appropriate. Provider terms are linked from the Subprocessors page.
7. Retention
Account, security, support and Customer Data are retained for the service relationship and then only as needed for deletion/return, legal duties and claims. Transactional email records and backups follow documented operational schedules and are deleted or overwritten in the ordinary backup cycle, subject to technical and legal limits.
Consented raw marketing page views and signup-attribution records have no scheduled age-based deletion. They are restricted to statistical service improvement and their continued necessity is documented at least annually. A review date does not itself trigger deletion. When the visitor withdraws analytics consent, we stop tracking, delete page views tied to that visitor UUID and unlink that UUID from signup attribution. We also comply with valid erasure requests where the law requires.
Legal-acceptance and marketing-choice event records are retained as evidence of the agreement and consent history for as long as reasonably needed for legal compliance or claims.
8. Your rights
Depending on the circumstances, UK data-protection law gives rights to access, correct, erase or restrict personal data, object to processing, receive portable data, and withdraw consent without affecting earlier lawful processing. You may withdraw email marketing on the Marketing preferences page and analytics through Cookie preferences.
Contact legal@intravyn.com. We may need to verify identity and authority. If the request concerns a garage’s Customer Data, we will assist the garage as processor.
9. Complaints and the ICO
Please contact us first so we can investigate. You may also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint or by the contact methods published by the ICO.
10. Changes to this Notice
We will publish changes here and update the version and effective date. We will request a fresh cookie decision before analytics resumes where a material purpose or provider change affects that consent. Material account-processing changes will be communicated where appropriate.
Contact us
Data Protection Lead, Intravyn Ltd, Reeth Cottage, Aysgarth, Leyburn, DL8 3AH.
Email legal@intravyn.com for legal or privacy matters, or support@intravyn.com for product support.