Data Processing · Ottocare Garage ERP

This page summarises how we process personal data on behalf of customer organisations using Ottocare Garage ERP. It is intended as a practical overview; a signed Data Processing Agreement (DPA) may apply where agreed in writing.

Roles

Customer organisation (tenant): controller of customer, vehicle, job, and invoice data it enters.
Platform operator: processor of that data; controller of platform account, billing, and security logs.

Subject matter and duration

Processing consists of hosting, storing, transmitting, and displaying business records as needed to operate the Service for the duration of the subscription and a limited post-termination retention period.

Types of data

May include names, contact details, vehicle identifiers, job and billing records, payment references, and user account data—depending on what the organisation chooses to store.

Sub-processors

We use infrastructure, email, SMS, and payment providers. A current list can be provided on request. We require appropriate contractual safeguards.

Security measures

Access controls, tenant isolation, encryption in transit, hashed passwords, optional multi-factor authentication, logging, and staff access limited to support and operations needs.

Assistance and deletion

Organisations can export or correct much of their data in-product. Deletion requests after offboarding are handled according to retention schedules and legal holds. Contact support@ottocare.com.