Introduction
This Privacy Policy explains how MD Software Limited (“MD GaragePro”, “we”, “us” or “our”) handles information in connection with the MD GaragePro garage-management platform, our websites, and related services (together, the “Services”). It applies to visitors to our website, workshops that subscribe to the Services, and the staff and customers who use them.
We act in two different roles. For information about our own account holders and website visitors, we are a data controller. For the workshop and customer records that a subscribing garage stores in the platform, we act as a data processor on that workshop’s behalf — the workshop remains the controller of its own customers’ data.
Information we collect
We collect the following categories of information:
- Account information — your name, business name, work email, phone number and password when you register or are invited to a workspace.
- Workshop & customer data — the records you enter into the platform, such as customers, vehicles, job cards, inspections, estimates, invoices, payments and inventory. This may include your own customers’ contact details and vehicle information, which we process on your behalf.
- Billing information — plan and subscription details. Card payments are handled by our payment processors; we do not store full card numbers on our servers.
- Usage & device data — log data such as IP address, browser type, pages viewed and actions taken, used to operate, secure and improve the Services.
- Communications — messages you send us (for example via the contact form or support email) and our correspondence with you.
How we use information
We use information to:
- provide, maintain and secure the Services and your account;
- process transactions, send service and verification emails, and provide support;
- detect, prevent and address fraud, abuse and security incidents;
- understand how the Services are used so we can improve them; and
- comply with legal obligations and enforce our terms.
We do not sell your personal information, and we do not use the customer data you store in the platform for advertising or to train third-party AI models.
Legal bases for processing
Where data-protection laws such as the UAE Personal Data Protection Law (PDPL) or the EU/UK GDPR apply, we rely on the following bases: performance of our contract with you; our legitimate interests in operating and securing the Services; your consent where required (for example, certain cookies or marketing); and compliance with legal obligations.
Data we process for workshops
When a workshop uses the platform, it decides what customer and vehicle data to store and for what purpose. We process that data only to provide the Services, following the workshop’s instructions and this Policy. Each workshop is responsible for having a lawful basis and appropriate notices for the data it collects from its own customers, and for handling their data-subject requests. Tenant workspaces are logically isolated from one another.
Data retention
We keep information for as long as your account is active and as needed to provide the Services, then for a reasonable period to meet legal, accounting and security requirements. When a subscription ends, we make the workshop’s data available for export for a limited window before deletion, unless a longer period is required by law.
Security
We use technical and organisational measures to protect information, including encryption in transit (HTTPS), encryption of sensitive credentials at rest, salted password hashing, role-based access control, tenant isolation and regular backups. No method of transmission or storage is completely secure, but we work continuously to protect your data and to notify you of material incidents where required.
International transfers
We operate globally, so information may be processed in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards (such as standard contractual clauses or an equivalent mechanism) as required by applicable law.
Your rights
Subject to applicable law, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent.
To exercise these rights over your own account data, contact us at support@garage-management-system.com. If your data is held by a workshop that uses our platform, please contact that workshop directly, as they control it.
Children
The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16.
Changes to this policy
We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Services after an update means you accept the revised Policy.
Contact us
For any privacy question or request, contact MD Software Limited at support@garage-management-system.com.
Questions about this document? Contact us at support@garage-management-system.com — MD Software Limited.