Last updated: 30 October 2026
Privacy information
DEVIREPA is the trading name of Karen Kianfar, a sole trader operating an independent device repair service in West London. Karen Kianfar is the data controller for the personal information described here.
Privacy enquiries: [email protected] or 078 338 338 08.
Postal correspondence only: DEVIREPA, 5 Brayford Square, London E1 0SG. This is not a workshop, customer reception or device drop-off location. It is not presented as an address authorised to accept court documents.
What information we use and why
When you contact us, you may provide your name, contact details, postcode or collection area, device make and model, fault description and messages. We use these to respond, discuss availability, prepare a quotation and arrange a potential repair. The usual lawful basis is taking steps at your request before entering a contract, or performing that contract if you proceed.
When a repair is agreed, necessary records may include device identification, condition and repair notes, approved prices, payment information, collection or return details, and any warranty enquiry. We use them to perform the repair, meet accounting or other legal obligations, and deal with genuine disputes. Applicable bases include contract, legal obligation and, where relevant and proportionate, legitimate interests in record-keeping and protecting the business and customers.
Hosting and security systems may process technical data such as an IP address and request information to keep the website available and reduce misuse. This is based, where appropriate, on legitimate interests in website security. This does not authorise unrelated marketing.
Website form, optional AI and WhatsApp
The repair form can organise your description locally in the browser. Typing or preparing a draft does not create a DEVIREPA Desk repair record. No message is sent to the technician until you choose to send it via WhatsApp or another contact channel.
Optional Cloudflare Workers AI is currently disabled unless appropriate technical protections are configured. If later enabled, it requires a separate unchecked opt-in before the description is submitted for AI processing. For that optional use, we rely on your specific consent. You can refuse AI and use the local form. AI only organises details and possible follow-up questions; it does not diagnose faults, approve work or set prices.
Before any optional AI request, common contact details and sensitive codes are automatically redacted where recognised, but redaction cannot guarantee that all personal information is removed. Please do not enter passwords, passcodes, payment numbers, IMEI, personal files or private photographs in the enquiry form. Where available, abuse protection uses a hashed network identifier for rate limiting.
Clicking the WhatsApp link opens a prepared message for your review. You must press Send in WhatsApp yourself. Messages you actually send will be handled by WhatsApp and are received by DEVIREPA. Emails and calls are handled through the respective service providers.
Who processes information
Cloudflare provides website delivery, security and (only when enabled and selected) AI processing. WhatsApp handles messages you send through it. Our email provider handles email. Supabase is used for authorised internal repair records in DEVIREPA Desk after a job is taken on, not as an automatic destination for website drafts.
These services operate under their own terms and data-protection arrangements. Depending on the provider, processing may take place outside the UK; the exact transfer arrangements and contractual safeguards require verification before this notice can be treated as a final compliance document.
How long information is kept
An unsent browser draft is not intentionally written to a DEVIREPA customer database and is normally lost when you reload or leave the form. If you contact us, enquiry messages are kept only while needed to respond, follow up and, where necessary, establish what was agreed. If you proceed, repair, payment and warranty records are kept for the applicable accounting, contractual and legal-claim periods.
We review records when these purposes end rather than promising deletion of provider-held logs or WhatsApp messages at a fixed time we cannot verify. The specific operational retention schedule and provider transfer details must be confirmed before the final customer privacy notice is approved.
Your rights and choices
Depending on the circumstances, you may request access, correction, erasure, restriction, portability or object to certain processing. You may withdraw any optional AI consent for future AI use; withdrawing consent does not necessarily undo processing already completed lawfully. Contact [email protected] with “Privacy request”.
You can also complain to the UK Information Commissioner's Office (ICO). We do not use the repair intake to make automated decisions with legal or similarly significant effects, and we do not use it for automatic marketing enrolment.