Privacy Policy

We collect only what a repair actually requires.

• Name, phone number and (optionally) email address — to confirm your appointment and let you track the repair.
• Address and PIN code — only when you choose pickup or an at-home repair, because we cannot come to you otherwise.
• Device details: brand, model, the fault, and optionally the IMEI so we can order the correct part.
• Your repair history with us, so a warranty claim can be verified.
• Contact-form enquiries, so we can reply to them.

We do not require an account, and customers never set a password. Tracking a repair uses your repair ID together with the phone number on the booking.

• Content from your device — photos, messages, contacts, files.
• Payment card numbers. Where online payment is enabled, card details go directly to the payment provider and never reach our servers.
• Location data beyond the address you type in yourself.
• Advertising or cross-site tracking identifiers.

To perform the repair you asked for, to contact you about it, to honour warranty claims, and to meet tax and accounting obligations. We do not sell personal data, and we do not use it for advertising.

• Booking and repair records: for the warranty period plus the statutory retention period for financial records.
• Contact enquiries: 24 months from the last message in the thread.
• Staff session records: automatically purged shortly after expiry.
• IMEI numbers: kept with the repair record so a warranty claim can be matched to the right device.

Only where it is needed to deliver the service, and only the minimum required in each case:

• The technician assigned to your repair.
• Our SMS, email or WhatsApp provider, to send booking and status notifications.
• Our payment provider, where online payment is used.
• Authorities, where we are legally required to disclose.

Notification and payment providers are configured per deployment. Where none is configured, no third party receives your data at all.

• Traffic is encrypted in transit over HTTPS.
• Staff passwords are stored as bcrypt hashes, never in a readable form.
• Staff sessions are server-side and can be revoked immediately.
• Access to customer records is restricted by role, and every repair status change is recorded against the staff member who made it.
• Input is validated and sanitised on the server, not only in the browser.

We use one essential cookie, and only for staff: a signed session cookie for the admin dashboard. It is httpOnly, SameSite=Lax and secure in production. Customers browsing or booking are not given a tracking cookie, and there are no third-party analytics or advertising cookies — which is why this site has no cookie consent banner to dismiss.

Your light or dark theme preference is stored in your browser’s local storage. It never leaves your device and is not sent to us.

You can ask us to:

• Tell you what we hold about you and provide a copy.
• Correct anything inaccurate.
• Delete your records, where no legal obligation requires us to keep them.
• Stop sending you notifications.

Email support@mymobifix.com with your request. We respond within 30 days and will verify your identity first, using the phone number on your bookings.

Privacy questions or complaints: support@mymobifix.com, or write to us at Placeholder Address, Sector 00, City 000000.