Privacy Policy

Torque DMS — Dealer Management Software Platform · Last updated: June 2026

1. Who We Are

Torque DMS is a trading name of Worldwide Pay Limited, a company registered in England and Wales (company number 14773225), with its registered office at Unit A, 82 James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE.

For all data protection matters, you can write to us at our operating address: Timsons Business Centre, Bath Road, Kettering, United Kingdom, NN16 8NQ, or email privacy@torquedms.com.

This Privacy Policy explains how we collect, use, store, and protect personal data when you use the Torque DMS software platform (the "Service"), visit our website, or otherwise interact with us. It should be read alongside our Terms of Service and Cookie Policy.

2. What Personal Data We Collect

2.1 Account & Business Data

When you or your business registers for the Service, we collect information such as your name, email address, phone number, business name, business type, and login credentials.

2.2 Customer Data You Input

As a garage or dealership using the Service, you may input personal data about your own customers — for example, names, contact details, vehicle registration and history, booking details, and payment records ("Customer Data"). You remain the data controller for this Customer Data; we process it on your behalf as described in Section 6.

2.3 Website & Enquiry Data

If you submit an enquiry through our website (for example via the contact form), we collect the information you provide — name, email, phone number, business details, and your message.

2.4 Usage & Technical Data

We automatically collect technical information such as IP address, browser type, device information, and how you interact with the Service, partly via cookies and similar technologies. See our Cookie Policy for full details.

3. How We Use Personal Data

We use personal data to:

• Provide, operate, and maintain the Service
• Create and manage your account
• Respond to enquiries and provide customer support
• Process transactions and facilitate partner services you choose to use (e.g. finance, payments)
• Send service-related communications, such as booking confirmations and invoices
• Improve and develop the Service, including through aggregated, anonymised analytics
• Detect, prevent, and address fraud, security, or technical issues
• Comply with our legal obligations

4. Our Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

• Contract: to provide the Service you have signed up to use
• Legitimate interests: to operate, secure, and improve our business and the Service
• Consent: where you have given specific consent, such as for marketing communications or certain non-essential cookies
• Legal obligation: where we must process data to comply with the law (e.g. accounting and tax records)

5. Marketing Communications

We will only send you marketing communications where you have consented or where permitted under the "soft opt-in" rules for existing customers. You can opt out of marketing at any time by clicking "unsubscribe" in any email or by contacting us at privacy@torquedms.com.

6. Sharing Personal Data

6.1 Service Providers and Integrations

We share personal data with trusted third-party providers who help us deliver the Service, including:

• Payments & finance: Stripe, Bumper, Codeweavers
• Accounting: Xero, Sage
• Communications: Mailgun (email), Twilio (SMS and WhatsApp)
• Vehicle data: AutoTrader, DVLA, CAP HPI
• Parts & labour data: GSF Car Parts, HaynesPro
• Scheduling: Google Calendar (where connected)
• Infrastructure & hosting: our cloud hosting and database providers

Each of these providers processes personal data only as needed to deliver their part of the Service, under their own terms and privacy policies, which we encourage you to review.

6.2 Partner Services You Choose to Use

If you or your customer opts to use a partner service (such as a finance quote or payment plan), we share the data necessary to facilitate that specific transaction with the relevant partner. We do not share this data with partners for their own independent marketing purposes without consent.

6.3 Legal Requirements

We may disclose personal data if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Torque DMS, our users, or others.

6.4 Business Transfers

If Torque DMS is involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction. We will notify you of any such change.

We do not sell personal data to third parties.

7. International Data Transfers

Some of our service providers may process data outside the UK or European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Addendum or adequacy decisions, to protect your personal data to a standard equivalent to UK law.

8. Data Retention

We retain personal data for as long as your account remains active, and for up to 30 days after account termination to allow for data export, in line with our Terms of Service. We may retain certain data for longer where required by law, for example for tax, accounting, or fraud prevention purposes.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including encryption in transit, access controls, and regular security reviews. No system can be guaranteed completely secure, and you are responsible for keeping your own login credentials confidential.

10. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your data, in certain circumstances
• Restrict or object to certain processing
• Request a copy of your data in a portable format
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at privacy@torquedms.com. We will respond within one month, as required by law.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

11. Children's Privacy

The Service is intended for business use by adults aged 18 and over. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. We will post any changes here and update the "Last updated" date. Material changes will be communicated in line with our Terms of Service.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle personal data, please contact us at:

Email: privacy@torquedms.com
Address: Timsons Business Centre, Bath Road, Kettering, United Kingdom, NN16 8NQ
Data Controller: Worldwide Pay Limited (company number 14773225), trading as Torque DMS