Privacy Policy

This is not legal advice. This page describes, in plain language, how M&M LCA STREET GARAGE LTD, trading as L.C.A Street Garage (“we”, “us”, “our”), processes personal data in connection with this website. Effective date: 29 July 2026.

1. Who we are

M&M LCA STREET GARAGE LTD, trading as L.C.A Street Garage, is a company registered in the Republic of Cyprus, VAT number CY60015337V, with its address at Andrea Souroukli 30, Larnaca 7060, Cyprus. We operate L.C.A Street Garage, an independent car repair garage in Livadia, Larnaca, Cyprus. For any question about this policy or your personal data, contact us at lcastreetgarage@gmail.com or call +357 96 606225. We are the controller of the personal data described in this policy.

2. What personal data we process, and why

The Site is intentionally simple: it has no user accounts, no online forms, and no online payments. We only process the following:

  • Language preference. If you pick a language, we store your choice in a cookie named “lca_lang” for one year so the Site remembers it on your next visit. This contains only your language choice (English, Greek or Russian), nothing that identifies you. Lawful basis: legitimate interest (Article 6(1)(f) GDPR) in remembering a basic preference; this cookie is also strictly necessary for the feature to work, so no separate consent is requested for it.
  • Light/dark theme preference. Stored in your browser’s local storage (“lca-theme”), never sent to our servers. Lawful basis: strictly necessary for the feature to function, not personal data processing by us in any meaningful sense, since it never leaves your device.
  • Cookie consent choice. When you accept or decline analytics in our cookie banner, we store that choice in your browser’s local storage (“lca-cookie-consent”) so we don’t ask again. Lawful basis: strictly necessary to respect your choice.
  • Site analytics. We use Vercel Web Analytics, a privacy-oriented analytics tool built into our hosting provider (Vercel). It tells us, in aggregate, how many people visit each page and click through to WhatsApp. According to Vercel’s published documentation, Web Analytics does not use cookies or local storage, and identifies visitors only via a rotating, non-persistent hash rather than a stable device or personal identifier, so it does not build an individual profile of you or track you across other websites. We also log one custom event, “whatsapp_click”, recording only which part of the page you clicked (for example header, homepage hero, floating button), never your name, number, or message. Lawful basis: consent, obtained via the cookie/analytics banner shown on your first visit. If you do not consent, analytics is not active for your visit (see the Cookie Policy for how to withdraw consent).
  • Contacting us by WhatsApp. The “Message us on WhatsApp” links and buttons on the Site open a WhatsApp chat via a wa.me link. We do not receive or store anything until you actually send a message, and when you do, that conversation is a normal WhatsApp/Meta chat, governed by WhatsApp’s own privacy policy and Meta’s role as controller of that channel, not by us. We only see the messages you choose to send us, which we may keep as ordinary business correspondence for as long as reasonably needed to handle your enquiry or booking (see retention, below). Lawful basis: performance of a contract or steps taken at your request prior to entering a contract (Article 6(1)(b) GDPR) when you’re enquiring about or booking a repair; legitimate interest in responding to general enquiries otherwise.
  • Phone calls. The “tel:” links on the Site simply open your phone’s own dialer. We do not collect anything about that call through the Site, only whatever a normal phone call to our business line involves (for example your number showing on caller ID, and any notes we take about the job you describe), on the same lawful bases as above.
  • Hosting logs. Like any website, ordinary technical logs (for example IP address, request timestamps, browser/device type) are generated automatically by our hosting provider, Vercel, to keep the Site running securely and reliably. We do not use these logs to identify individual visitors, and they are retained only for as long as Vercel’s own infrastructure and security practices require. Lawful basis: legitimate interest in operating a secure, reliable website (Article 6(1)(f)).

We do not use the Site to send marketing emails or SMS, we do not run advertising or retargeting pixels, we do not sell personal data, and we do not use profiling or automated decision-making that produces legal or similarly significant effects on you.

3. Google Analytics 4

We use Google Analytics 4 (GA4) to understand how the Site is used, and only after you accept analytics cookies in the cookie banner. If you do not accept, GA4 never loads. Lawful basis: consent (Article 6(1)(a) GDPR). Declining is exactly as easy as accepting, and you can withdraw your consent at any time via the Cookie settings link in the footer.

GA4 is provided by Google Ireland Ltd, acting as our data processor. Data may be transferred to Google LLC in the United States; such transfers are covered by the EU adequacy decision for the EU-US Data Privacy Framework and, where needed, the EU Standard Contractual Clauses. IP anonymization is enabled. What we see is aggregate statistics (page views, approximate location, device type), never your identity.

4. Children

The Site is a general business website for a car repair garage and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us personal data (for example, via WhatsApp), contact us at lcastreetgarage@gmail.com and we will delete it.

5. Who we share data with

  • Vercel Inc. (our hosting provider), which processes hosting logs and analytics data as described above, acting as our processor for hosting purposes.
  • Google Ireland Ltd (Google Analytics), which processes analytics data on our behalf as described in section 3, with possible transfer to Google LLC (USA) under EU adequacy and Standard Contractual Clauses safeguards.
  • Meta Platforms (WhatsApp), if and when you choose to message us; Meta acts as an independent controller of that channel once you send a message, under its own privacy policy.
  • We do not sell, rent, or otherwise disclose your personal data to third parties for their own marketing purposes.
  • We may disclose personal data if required to do so by Cyprus or EU law, or to protect our legal rights.

6. International data transfers

Our hosting provider, Vercel, operates a global network and may process data (including the hosting logs and analytics data described above) outside the European Economic Area, including in the United States. Where this happens, Vercel relies on the EU Standard Contractual Clauses (and, for UK data, the UK Addendum) as an approved safeguard for the transfer, together with its own technical and organisational security measures, as set out in Vercel’s Data Processing Addendum. Google Analytics data may likewise be transferred to Google LLC in the United States, under the EU adequacy decision for the EU-US Data Privacy Framework and the EU Standard Contractual Clauses.

7. How long we keep data

  • lca_lang cookie: up to 1 year, then it expires automatically (or until you clear your cookies).
  • Theme and cookie-consent local storage: until you clear your browser storage.
  • Google Analytics cookies (_ga, _ga_*): up to 2 years; see the Cookie Policy for details.
  • Analytics data: retained by Vercel and Google according to their own data retention practices for aggregated, non-identifying analytics; see their privacy documentation for current retention periods.
  • WhatsApp/phone/email correspondence about a repair or enquiry: kept for as long as reasonably necessary to complete the job, resolve any follow-up questions or warranty issues, and meet any applicable Cyprus legal/accounting retention requirements, after which it is deleted.

8. Your rights

Under the GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data (“right to be forgotten”), where applicable; request restriction of processing; object to processing based on legitimate interest; request portability of data you provided to us, where technically feasible; withdraw consent at any time (for example, via the Cookie settings link in the footer), without affecting the lawfulness of processing before withdrawal; and lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at lcastreetgarage@gmail.com. We will respond within the timeframe required by the GDPR.

9. Supervisory authority

If you are not satisfied with how we handle your personal data, you have the right to complain to the Cyprus data protection authority: Office of the Commissioner for Personal Data Protection, 1 Iasonos Street, 1082 Nicosia, Cyprus (postal: P.O. Box 23378, CY-1682 Nicosia); tel. +357 22 818 456; website www.dataprotection.gov.cy.

10. Changes to this policy

We may update this policy from time to time, for example if we change what data we process or the law changes. The effective date at the top shows when it was last revised. Material changes will be reflected here; please check back periodically.

11. Contact

M&M LCA STREET GARAGE LTD (trading as L.C.A Street Garage)
Andrea Souroukli 30, Larnaca 7060, Cyprus
Email: lcastreetgarage@gmail.com
Phone: +357 96 606225