UnderTorque Privacy Policy v1.1 1. Who we are UnderTorque is a technician-focused diagnostic knowledge platform. It is designed to let approved users record, organise and share their own diagnostic reports, tips, repair learning and workshop knowledge. 2. Personal information we collect UnderTorque may collect and store the following information: - name, username and email address; - password hash, account role and account status; - garage or workplace application details; - signup IP address, login/session security information, user agent and timestamps; - policy and terms acceptance records; - audit history, notifications, sharing activity, garage membership records and system activity logs; - reports, tips, comments, attachments and other content that you choose to submit. Diagnostic reports and tips should not include customer personal data. Users must not include customer names, addresses, phone numbers, email addresses, registration numbers, VINs, finance details, complaint records, health information, or anything else that could identify a customer or individual unless they have a clear lawful basis and explicit authority to do so. 3. Why we use personal information UnderTorque uses personal information to: - create and manage user accounts; - review and approve or decline access requests; - operate private, garage, direct-share and rule-based sharing features; - keep audit records of important account, access and sharing actions; - provide notifications and platform administration; - protect the security and integrity of the platform; - investigate misuse, unauthorised access, rights concerns, data concerns or support requests; - comply with legal, regulatory, accounting or record-keeping obligations where required. 4. Lawful basis Depending on the purpose, UnderTorque may rely on one or more lawful bases, including: - contract or steps before entering a contract, where information is needed to provide the account and platform service; - legitimate interests, including platform security, audit history, misuse prevention, access control, user support and operation of a technician knowledge platform; - legal obligation, where information must be kept or disclosed to comply with the law; - consent, where a specific consent is requested, such as acceptance of updated policy documents. 5. User-generated content and confidentiality Reports, tips and attachments are user-generated content. Users are responsible for making sure that the content they submit does not contain confidential, proprietary, commercially sensitive, restricted, copyrighted or third-party information that they do not have permission to share. This includes manufacturer technical information, service literature, workshop manuals, wiring diagrams, internal dealer communications, warranty documents, diagnostic procedures, training material, software screenshots, employer documents, garage reports, customer information and any other material that belongs to or is controlled by another person or organisation. UnderTorque may restrict, remove or investigate content if it appears to contain personal data, confidential information, third-party intellectual property, unsafe material, or content shared without permission. 6. Who information may be shared with Content and activity may be visible to other users depending on the access settings chosen by the content owner, garage membership, direct sharing, role permissions and active sharing rules. UnderTorque does not sell user personal data. Information may be shared where necessary with service providers who help operate the platform, with authorised administrators, with other approved users according to platform access rules, or where required by law. 7. Retention UnderTorque keeps personal information only for as long as reasonably necessary for the purposes described in this policy. Account records, audit logs, policy acceptance records and sharing records may be retained where needed for security, access-control, dispute, legal or accountability reasons. If an account is closed, some records may need to be retained in limited form so that audit history, content ownership, previous access decisions, legal rights and platform integrity can be maintained. 8. Your rights Depending on the circumstances, users may have rights to request access, correction, erasure, restriction, objection, portability and information about automated decision-making. These rights are not always absolute and may depend on the lawful basis and the reason information is held. 9. Security UnderTorque uses account controls, role permissions, access checks and audit history to help protect information. Users are responsible for keeping their login details secure and for not sharing content they are not authorised to share. 10. Policy updates If this Privacy Policy is updated, users may be asked to review and accept the new version before continuing to use the platform. 11. Contact Contact the site administrator if you want to raise a privacy request, report content containing personal data, report content shared without permission, or ask how your information is used.