Last updated 17 October 2026
Softalake Oy ("we", "us") operates Fixamotor, a marketplace where car owners request repair quotes and independent repair shops respond. We are the data controller for the personal data described in this policy.
We have not appointed a Data Protection Officer, as the law does not require one for our activities. Send any privacy question or request to the address above.
This policy applies to everyone whose personal data we handle through Fixamotor:
It does not cover how a repair shop handles your data after you choose them. Each shop is a separate controller for its own customer records and invoicing, and its own privacy policy applies.
We collect only what we need to run the marketplace. Most of it you give us directly.
| Category | What it includes | Who it concerns |
|---|---|---|
| Account data | Name, email address, phone number, login identifiers, language preference | Car owners, shop users |
| Vehicle data | Make, model, year, registration number, description of the fault, photos you upload | Car owners |
| Location data | Address or area you enter, used to find shops near you; shop address shown on the map | Car owners, shops |
| Quote and booking data | Repair requests, quotes, prices, chosen shop, booking dates, status | Car owners, shops |
| Messages | Messages exchanged between car owners and shops on the platform | Car owners, shop users |
| Reviews | Ratings and written reviews, with your display name | Car owners |
| Business and billing data | Business name, VAT number, billing address, invoices, lead fees, disputes and credit notes | Shops (personal data for sole traders) |
| Payment data | Payment method details are collected and stored by Stripe; we receive only a reference, card brand and last four digits | Shops |
| Technical data | IP address, browser and device type, timestamps, security and error logs | Everyone |
| Correspondence | Emails and support requests you send us | Everyone |
| Launch notifications | Email address, the country you asked about, and whether you're a car owner or a shop | People who ask to be told when we launch in their country |
We also check shop VAT numbers against public registers (the EU VIES service and, for Polish shops, the Polish Ministry of Finance taxpayer White List).
Please do not include sensitive information, such as health data, in repair descriptions or messages.
Each use rests on one legal basis under Article 6 GDPR.
| Purpose | Legal basis |
|---|---|
| Creating and running your account | Contract (Art. 6(1)(b)) |
| Sending your repair request to suitable shops nearby and showing you their quotes | Contract |
| Letting car owners and shops message each other and arrange bookings | Contract |
| Charging shops lead fees, issuing invoices and credit notes, handling disputes | Contract |
| Keeping accounting records and checking VAT numbers | Legal obligation (Art. 6(1)(c)) under Finnish accounting and EU VAT law |
| Sending service emails (quote received, booking confirmed, invoice ready) | Contract |
| Publishing reviews so other car owners can choose a shop | Legitimate interest (Art. 6(1)(f)) in a trustworthy marketplace |
| Keeping the platform secure, preventing fraud and fake requests, fixing errors | Legitimate interest |
| Improving the service using aggregated statistics | Legitimate interest |
| Sending newsletters or marketing emails | Consent (Art. 6(1)(a)); you can withdraw it at any time |
| Emailing you once when we launch in a country you asked about | Consent; you can withdraw it at any time |
| Establishing or defending legal claims | Legitimate interest |
Where we rely on legitimate interest, you can object (see section 8). We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Matching a request to nearby shops is automated, but you and the shops decide who does the work.
We do not sell your personal data.
Other users. When you send a repair request, the shops it goes to see your first name, vehicle details, fault description, photos and approximate area. Your full name and contact details are shared with a shop only once you accept its quote. Shops see the messages you send them. Your reviews are public with your display name.
Service providers. These companies process data on our behalf under data processing agreements and only on our instructions.
| Provider | Purpose | Location of processing |
|---|---|---|
| Render | Hosting of our application and database | EU (Frankfurt) |
| Auth0 (Okta) | Login and account security | EU |
| Stripe | Payment processing for shops | EU and USA |
| AhaSend B.V. | Sending service emails | EU (Netherlands) |
| Microsoft Azure | Storage and delivery of uploaded photos | EU |
| Mapbox | Maps and location search | USA |
| NoCFO | Bookkeeping | EU (Finland) |
| Umami Software Inc. | Web analytics | EU and USA |
Authorities and advisers. We share data with tax authorities, accountants, lawyers or courts when the law requires it or to defend legal claims.
Business transfers. If our business is sold or merged, personal data may pass to the new owner, who must continue to protect it under this policy.
We store our main database in the EU. Some service providers, or their support staff and sub-processors, are based in the USA. When personal data leaves the EU/EEA, we rely on one of these safeguards:
You can ask us for a copy of the relevant safeguards using the contact details in section 1.
We keep personal data only as long as the purpose requires, then delete or anonymise it.
| Data | Retention period |
|---|---|
| Account data | While your account is active; deleted as soon as you delete your account (see section 9) |
| Inactive accounts | Closed and deleted after 3 years without a login, after an email warning |
| Repair requests, quotes, bookings, messages | While your account is active, then 3 years to handle disputes and claims (the general Finnish limitation period). If you delete your account, your name, contact details, address and registration number are removed from your requests straight away, and your messages are shown as from "Deleted user" |
| Invoices, credit notes and other accounting records | 6 years from the end of the year in which the financial period ended; ledgers and financial statements 10 years (Finnish Accounting Act) |
| Reviews | While published; shown as written by "Deleted user" if you delete your account |
| Security and server logs | 90 days |
| Marketing consent records | Until you withdraw consent, plus proof of consent for 3 years |
| Launch notification sign-ups | Until we send the launch email for that country, or until you withdraw consent |
When the law requires us to keep accounting records after you delete your account, we keep only what that obligation covers and restrict all other use of it. These records name only the shop and the quote request's reference number, not you.
You have the following rights under the GDPR:
How to make a request. Email privacy@fixamotor.com from the address linked to your account. We may ask you to confirm your identity. We answer within one month. For complex or numerous requests we may extend this by two more months, and we will tell you within the first month if we do. Requests are free unless they are clearly unfounded or excessive.
You can delete your account at any time in User settings → Delete account. Deletion takes effect immediately and can't be undone.
When you delete your account:
If you're the only admin of a shop account, you need to make another member an admin before you can delete your account. If the shop has no other members, contact us at privacy@fixamotor.com.
We use only cookies and similar storage that are strictly necessary for the service to work, such as keeping you logged in and remembering the country and language you chose. These do not require consent.
To understand how our website is used, we use Umami Analytics. Umami does not use cookies or store anything on your device. It records which pages are viewed, the referring website, browser, operating system, device type and approximate location (country and region).
Your IP address is used only momentarily to determine that approximate location and to create a periodically rotating, irreversible identifier for counting unique visits. The IP address itself is not stored, and we cannot identify you from the statistics.
Our legal basis is our legitimate interest in understanding and improving our website (Art. 6(1)(f)). You can object at any time by contacting us, and blocking our analytics script in your browser stops the collection. Umami is provided as a service by Umami Software, Inc., with data hosted in Europe.
We protect your data with encrypted connections (TLS), encryption at rest in our hosting and storage providers, access controls with multi-factor authentication for administrative access, and the principle of least privilege. No system is perfectly secure. If a breach is likely to put your rights at risk, we will notify the supervisory authority and, where required, you.
Fixamotor is intended for adults. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, contact us and we will delete it.
We may update this policy when our service or the law changes. We will show the date of the latest version at the top, and notify you by email or in the app before any material change takes effect.
If you are unhappy with how we handle your data, please contact us first so we can try to fix it. You also have the right to complain to a data protection authority. In Finland this is the Office of the Data Protection Ombudsman (tietosuoja.fi). You can also complain to the authority in the EU country where you live or work, for example the Data Protection Commission in Ireland, UODO in Poland or IMY in Sweden.