Garage Service Reminders and GDPR in Ireland

A reminder can be useful to the customer and still count as direct marketing. Calling it a courtesy message does not decide the legal position; its content, purpose, recipient and the way contact details were obtained all matter.

Irish garages should design reminders around current Data Protection Commission guidance, keep evidence of the basis used and make opting out straightforward. This article is practical information, not legal advice.

Start with the general rule

The Data Protection Commission says the general rule for electronic direct marketing is clear, affirmative consent from the recipient. A pre-ticked box, silence or contact details collected for an unrelated reason should not be treated as an opt-in.

The DPC also describes a limited exception for existing customers. Consent is not specifically required only where all of the stated conditions are met:

1. The contact details were lawfully obtained from a customer in the context of a sale.
2. The message concerns the organisation’s own product or service.
3. That product or service is similar to the one originally supplied.
4. The customer was given a clear opportunity to object when the details were collected.
5. The customer is given an opportunity to object in every message.
6. The first marketing message is sent within 12 months of the original sale.

Read the full DPC explanation of consent and the existing-customer exception. If the garage cannot demonstrate every condition, do not assume the exception applies.

Separate operational messages from marketing campaigns

An appointment confirmation requested by the customer serves a different purpose from a campaign promoting a pre-NCT service to every person in the database. Keep those purposes distinct in templates, preferences and logs.

Common workshop communications include:

• booking confirmations and changes
• notice that requested work is ready for approval
• invoice or statement delivery
• requested updates on a current repair
• annual service promotions
• NCT or CVRT due-date campaigns
• follow-up offers for previously deferred work

The first group may be necessary to deliver the service the customer requested. The later messages are more likely to involve direct marketing. The exact assessment depends on context, so the garage should document its policy and obtain advice where uncertain.

Do not use an essential service-message channel to bypass a marketing opt-out.

Record consent and objections as data

A consent checkbox without history is weak evidence. Retain:

• who made the choice
• channel covered, such as email or SMS
• wording shown at the time
• date, time and collection source
• purpose described
• any later withdrawal or objection

Keep email and SMS preferences separate where the collection wording or technology differs. A customer who accepts an emailed invoice has not necessarily agreed to promotional text messages.

Motorworks customer accounts include communication and data-protection fields alongside customer details. The garage remains responsible for choosing the lawful basis and using the fields consistently.

Every marketing message needs a working opt-out

The DPC says a valid opt-out address must appear in every electronic direct-marketing message. It also states that when a person objects to processing for direct marketing, their personal data must no longer be processed for that purpose.

Read the DPC’s guidance on objections to electronic direct marketing.

In practice:

• make the opt-out clear and easy to use
• do not require a login to unsubscribe from an email
• process requests promptly across the relevant campaign lists
• retain enough suppression data to avoid adding the person again accidentally
• test unsubscribe links and reply handling before a campaign

Deleting every trace of the person can be counterproductive if it also removes the record needed to respect the objection. A suppression record should contain only what is necessary for that purpose and follow the garage’s retention policy.

Use the minimum customer data needed

A reminder does not need the customer’s complete history. Select only the fields required to identify the relevant due date and personalise the message appropriately.

Useful controls include:

• filtering by recorded due date or last completed service
• excluding customers without an applicable communication basis
• excluding all channel opt-outs
• reviewing duplicate customer records
• previewing recipients before send
• limiting staff access to campaign tools
• keeping a send and delivery record

The DPC’s data-protection principles include purpose limitation, data minimisation, accuracy, storage limitation, security and accountability. Those principles apply to the customer list as much as to the message itself.

Review reminders before sending

Motorworks identifies records that may be due for follow-up and allows a user to select recipients and send reminders. It does not need to send every possible reminder automatically.

That review step is useful because records can be wrong. A vehicle may have been sold, serviced elsewhere or linked to an outdated customer. A staff member should check the selected audience, message and communication preference before starting the send.

The service-reminder feature is intended to support that controlled workflow, not to turn the customer database into an unattended mailing list.

Write a useful message

A responsible reminder explains why the person is hearing from the garage and gives a proportionate next step.

Include:

• the garage’s identity
• the relevant vehicle or service context where appropriate
• why the reminder is being sent
• a clear contact or booking route
• the required opt-out

Avoid claims that the vehicle is unsafe, overdue or legally non-compliant unless the garage has current verified information supporting that statement. A recorded due date can be stale, so phrase unverified reminders accordingly and link customers to the official checker where relevant.

Keep evidence of what happened

For each campaign or batch, retain:

• selection criteria
• template version
• sending identity
• recipient list or reproducible audience record
• send time
• provider acceptance, delivery, failure and bounce events where available
• opt-outs and complaints
• staff member who initiated the send

An accepted API request is not the same as delivery. Motorworks document history distinguishes supported email events so staff can investigate rather than relying on a generic “sent” label.

A pre-send checklist

Before sending service, NCT or CVRT reminders, confirm:

1. The purpose and legal basis are documented.
2. The selected recipients meet the applicable criteria.
3. Channel preferences and objections have been applied.
4. Vehicle and due-date data are sufficiently accurate for the wording used.
5. The message identifies the garage and includes a valid opt-out where required.
6. Replies, bounces and opt-outs have an owner.
7. The send will be logged.

That is a manageable process, and it is safer than assuming every past customer wants every future campaign.

Book a Motorworks demo to see how customer history, due records and staff-reviewed reminders fit together.

Official sources

• DPC: Consent and electronic direct marketing
• DPC: Objections to electronic direct marketing
• DPC: Principles of data protection

Reviewed against the linked DPC guidance on 2 September 2026. Obtain data-protection advice for your garage’s specific campaigns and lawful-basis decisions.