Privacy Policy

1. INTRODUCTION

Careful Autodetailing ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Django-based platform and services (the "Services").

Please read this policy carefully. By using our Services, you consent to the practices described herein.

2. INFORMATION WE COLLECT

2.1 Personal Information You Provide

• Account & Booking Data: Full name, email address, phone number, and service address.
• Vehicle Information: Vehicle make, model, year, and license plate. We collect vehicle photos only when necessary to document the vehicle's condition before or after a service. We automatically remove metadata (like GPS location) from all photos.
• Payment Information: Payment details are processed directly by our third-party payment processors (e.g., Stripe, PayPal). We do not store or have access to your full credit card numbers.
• Communications: Records of your communication with us, your service preferences, and feedback.

2.2 Information Collected Automatically

• Usage Data: We collect information about your interaction with our platform, such as your IP address, browser type, device type, pages visited, and the dates/times of your visits.
• Cookies and Tracking Technologies: We use the following categories of cookies:
  • Strictly Necessary: Essential for the platform to function (e.g., user session management).
  • Performance/Analytics: Help us understand how visitors use our site (e.g., Google Analytics). This data is aggregated and anonymized.
  • Marketing: Used to deliver relevant advertisements. We will only use marketing cookies with your explicit prior consent, which you can manage via our cookie banner.

3. HOW WE USE YOUR INFORMATION

We use your information for the following lawful purposes:

• To Fulfill Your Service Request: To schedule, provide, and invoice for auto-detailing services.
• To Manage Your Account: To create and maintain your user account.
• To Process Payments: To facilitate payment through our secure third-party processors.
• To Communicate With You: To send booking confirmations, service reminders, and respond to your customer service inquiries.
• To Improve Our Services: To analyze platform usage and performance to enhance the user experience.
• For Marketing: To send you marketing and promotional communications only if you have explicitly consented to receive them. You may opt-out at any time.

4. HOW WE SHARE YOUR INFORMATION

We do not sell, rent, or trade your personal information. We only share your data in the following circumstances:

• With Service Providers: We share information with third parties who provide services on our behalf, under strict data processing agreements. These categories include:
  • Payment Processors (Stripe, PayPal)
  • Cloud Hosting Providers (e.g., AWS, Google Cloud)
  • Analytics Providers (Google Analytics, in anonymized form)
  • Communication Tools (e.g., email/SMS services)
• For Legal Reasons: We may disclose information if required by law, a legal process, or to protect our rights, property, or safety, or that of others.
• Business Transfers: In the event of a merger, sale, or acquisition, your information may be transferred to the new owners, who will be obligated to uphold the promises in this policy.

5. INTERNATIONAL DATA TRANSFERS

Your data is processed and stored in Canada. If we ever need to transfer your data outside of Canada, we will ensure it is protected by appropriate safeguards, such as data processing agreements that include standard contractual clauses.

6. DATA SECURITY

We implement a comprehensive, state-of-the-art security program to protect your data. This includes:

• Encryption of data in transit (using HTTPS/TLS) and at rest.
• Regular security testing and vulnerability assessments.
• Strict, role-based access controls for our staff.
• Mandatory security and privacy training for all employees.

While no system is 100% secure, we are committed to implementing and maintaining reasonable and industry-standard safeguards.

7. DATA RETENTION

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law (e.g., for tax or financial record-keeping). You may request deletion of your account at any time (see Section 9).

8. YOUR PRIVACY RIGHTS

In accordance with Canadian privacy law (PIPEDA) and as a core principle of our business, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete data.
• Delete your personal information, subject to legal limitations.
• Withdraw Consent for marketing communications at any time.
• Data Portability to receive your data in a structured, machine-readable format.
• Object to certain processing activities.
• Non-Discrimination for exercising your privacy rights.

We will respond to all verified requests within 30 days.

9. EXCERCISING YOUR RIGHTS & CONTACT US

To exercise your rights or for any privacy-related questions, you may contact us at:

For efficiency and security, you can also manage your data directly through the "Privacy Dashboard" in your user account settings, where you can view, correct, export, and delete your data.

10. CHILDRESN'S PRIVACY

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from minors. If we become aware that we have done so, we will take steps to delete that information.

11. THIRD PARTY LINKS

Our platform may contain links to third-party websites. This Privacy Policy does not apply to those sites. We encourage you to read the privacy policies of any third-party site you visit.

12. UPDATES TO THIS POLICY

We may update this policy to reflect legal or operational changes. The "Last Updated" date at the top will indicate revisions. We will notify you of any material changes by email or a notice on our platform. Continued use of our Services after such changes constitutes your acceptance of the new policy.

This policy is designed to be compliant with Canada's PIPEDA and is structured to align with global best practices.