Purpose of this page
This is a public summary of GoGarageFlow's data protection position. It is designed to help garages understand the platform's role. The platform is operated by Robert-Iulian Kerszka trading as Smart Flow Systems. It is not a replacement for a garage's own legal advice, customer privacy notice or internal GDPR procedures.
Role of GoGarageFlow
GoGarageFlow is the software product used by garages to manage bookings, customers, vehicles, jobs, invoices, reminders, intake forms and staff access. For most workshop records entered by a garage, Smart Flow Systems acts as a processor and processes data on that garage's instructions.
For platform-level data such as our own website enquiries, billing support, account administration, security logs and direct communications with garages, Smart Flow Systems may act as a controller.
Role of each garage
Each garage is normally responsible for:
- telling its customers how their data is used;
- having a lawful basis for bookings, repairs, invoicing and customer communications;
- keeping customer records accurate and relevant;
- managing staff access inside its workspace;
- handling customer rights requests where it is the controller; and
- using SMS, email and reminder tools responsibly.
- reviewing exports, deletions and retention decisions before acting on customer data.
GoGarageFlow responsibilities
Where Smart Flow Systems acts as processor, we are responsible for processing relevant personal data only in line with the garage's instructions, applying appropriate platform security measures, assisting with reasonable data protection requests where required, and using subprocessors responsibly.
How the platform supports compliance
GoGarageFlow is designed to support responsible data handling through:
- garage-level workspace separation;
- role-based staff permissions;
- audit records and operational history in supported areas;
- controlled account access and secure sign-in;
- tools for managing customer, vehicle and job records; and
- commercial onboarding documentation, including a Data Processing Agreement where applicable.
- public privacy, cookie, subprocessor and security information for transparency.
Data Processing Agreement
Live commercial arrangements should be supported by a Data Processing Agreement or equivalent data processing terms. This helps define Smart Flow Systems' processor responsibilities, supplier handling, support obligations and instructions from the garage.
Subprocessors and suppliers
GoGarageFlow may use trusted suppliers for hosting, authentication, storage, payments, support, security and operational infrastructure. We aim to use suppliers that provide appropriate contractual and security safeguards for the services they provide. The public subprocessor list is available at /subprocessors.
International transfers
Some suppliers may process data outside the UK. Where this is necessary, Smart Flow Systems aims to use appropriate safeguards such as adequacy decisions, approved contractual clauses, transfer risk checks or equivalent protections required by UK data protection law.
Security and access
We use reasonable technical and organisational measures designed to protect platform data, including access controls, role separation, logging, secure infrastructure choices, backup practices and regular maintenance. Garages should also manage their own staff access, passwords, devices and customer records responsibly.
Rights requests
If a customer contacts GoGarageFlow about information held by a garage, we may need to direct that request to the relevant garage as controller. Where a request relates to data controlled directly by GoGarageFlow, we will handle it in line with applicable data protection law.
Contact
GDPR and data protection enquiries can be sent to admin@gogarageflow.com.