Trust & Safety

Compliance & Regulation

We are committed to operating transparently, safely, and in full compliance with UK law.

🔒

UK GDPR Compliant

We comply with the UK General Data Protection Regulation and process personal data lawfully, fairly, and transparently.

🏛️

ICO Registered

Bolu Car Fix is registered with the Information Commissioner's Office (ICO) as a data controller.

⚖️

Consumer Rights Act 2015

Our service standards meet the obligations set out under the Consumer Rights Act 2015.

💳

Payment Card Industry (PCI DSS)

All card payments are handled by Stripe, a PCI DSS Level 1 certified payment processor.

Data Protection

Bolu Car Fix complies fully with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are registered with the Information Commissioner's Office (ICO).

We process personal data only for clearly defined, lawful purposes. Data is stored securely, retained only as long as necessary, and never sold to third parties. For full details, see our Privacy Policy.

Provider Verification

All providers on Bolu Car Fix are subject to identity and document verification before they can accept jobs. Our verification process includes:

  • Government-issued photo ID verification.
  • Business registration or sole trader documentation.
  • Relevant trade certifications (e.g. ATA, IMI accreditation for mechanics).
  • Public liability insurance confirmation.
  • Vehicle documentation for towing and recovery operators.

Providers who cannot meet these requirements are not permitted to operate on the platform.

Consumer Protection

We operate in accordance with the following UK consumer protection legislation:

  • Consumer Rights Act 2015 — services must be provided with reasonable care and skill, within a reasonable time, and at a reasonable price.
  • Consumer Contracts Regulations 2013 — customers have rights regarding cancellation and refund where applicable.
  • Equality Act 2010 — we do not tolerate discrimination on any protected characteristic.

Financial Regulation

Bolu Car Fix does not hold or manage client funds directly. Payment processing is handled entirely by Stripe, which is authorised and regulated by the Financial Conduct Authority (FCA) as an electronic money institution.

Provider earnings are held in a Bolu wallet and withdrawn to verified bank accounts only. We maintain financial records in accordance with HMRC requirements (minimum 6 years).

Payment Security

All card payments are processed by Stripe (PCI DSS Level 1 certified). Bolu Car Fix never stores raw card numbers. All transactions are encrypted using TLS 1.2 or higher. Stripe's full security credentials are available at stripe.com/docs/security.

Insurance Requirements

Providers are required to hold appropriate insurance for the services they offer:

  • Mechanics: Public liability insurance (minimum £1 million cover).
  • Towing operators: Motor trade insurance covering vehicles in their custody.
  • Garages: Employer's liability insurance where staff are employed.

Bolu Car Fix does not itself carry insurance for services provided by independent providers. Customers are advised to confirm insurance with their chosen provider before work begins.

Reporting Concerns

If you have concerns about a provider's conduct, credentials, or safety, please report them immediately via our support ticket system or contact us at compliance@bolucarfix.co.uk. All reports are treated confidentially and investigated promptly.

Contact

For compliance-related enquiries: compliance@bolucarfix.co.uk