Privacy Policy

1. Who we are

Clean & Pristine Car Care (Marco Cavallo, sole trader) provides mobile car valeting and detailing services across Edinburgh, Lothians & The Borders.

We are the “data controller” for the personal information described in this policy. That means we decide what data we hold about you and why. If you have any questions about this policy or your data, contact us at booking@cleanandpristinecarcare.com or by post at 26 Leighton Crescent, Easthouses, Dalkeith, EH22 4DX.

2. What personal information we collect

• Contact details: your name, phone number, email address, and the postcode or address where we carry out the work.
• Your vehicle and service history: the car(s) we have worked on, the services booked, dates, and prices paid.
• Account notes: whether you are a member, and any operational notes (for example, access instructions).
• Basic website usage: anonymous, aggregated visitor statistics (see section 10). We do not use tracking cookies.

We do not collect any special-category data (such as health, ethnicity, or financial account details). Payment is taken in person on the day, so we do not store card details.

Providing your contact and vehicle details is necessary for us to carry out a booking; without them, we cannot provide the service.

3. Where we get your information

• Directly from you when you book through our website, contact us, or give us details in person.
• From our existing booking records.If you have been a customer of Clean & Pristine before, your contact and service history may already be in our records, transferred from the business’s existing booking calendar so we can continue to serve you. You can ask us to remove this at any time (section 8).

4. Why we use your information, and our legal basis

• Arranging and carrying out your valet or detail, and managing your booking — Performance of a contract with you.
• Sending booking confirmations, reminders, and cancellation or reschedule notices — Performance of a contract with you.
• Planning efficient routes and travel times (we look up postcodes and addresses) — Our legitimate interests in running the business efficiently.
• Keeping customer and visit records so we can serve returning customers — Our legitimate interests in running the business efficiently and serving returning customers.
• Running the members club — Performance of a contract with you.
• Keeping financial and transaction records for tax — Compliance with a legal obligation.

5. Marketing emails

We do not send marketing emails. The only emails we send are about a booking you have actually made (a confirmation, a reminder, or a cancellation or reschedule notice). We do not run an email newsletter or promotional list. If that ever changes, we will ask for your clear consent first, and you will be able to opt out at any time.

6. Who we share your information with

We do not sell your data or share it for anyone else’s marketing. We use a small number of trusted service providers (“processors”) to run the service, and they only process your data on our instructions:

• Cal.com — scheduling and availability for bookings.
• Resend — sending our emails to you.
• Supabase — secure hosting of our customer database.
• Vercel — hosting our website and providing anonymous visitor statistics.
• Google (Maps Platform) — converting postcodes and addresses into locations so we can plan routes and travel times.

Subcontractors. Some bookings include specialist work, such as smart (cosmetic) repairs, that we carry out using a trusted subcontractor. Where that applies to your booking, we pass the subcontractor only the details they need to do your specific job, such as your name, contact details, the address where the work takes place, and your vehicle. They receive only the information for that job and do not have access to our customer database.

Some of these providers may process data on servers outside the UK. Where they do, we rely on UK “adequacy” regulations or, where none applies, the ICO’s International Data Transfer Agreement or Addendum, to keep your data protected to UK standards. We may also disclose information if required by law.

7. How long we keep it

• Contact details: kept while you are an active customer, and deleted after 3 years with no bookings.
• Booking and financial records: kept for around 6 years to meet tax and accounting obligations, then deleted.
• If you ask to be deleted, we remove your contact details promptly and keep only what we are legally required to (for example, minimal transaction records for tax), then delete those when the period above ends.

8. How we protect your information

Your data is stored in a secured database that is not accessible to the public — only our own systems can reach it, using a private key. Data is encrypted by our hosting providers. We keep access to the minimum needed to run the business.

9. Your rights

Under UK data protection law you have the right to:

• be told what we hold about you and why (this policy, and on request);
• access a copy of your personal data;
• correct anything that is wrong;
• erase your data (the “right to be forgotten”);
• restrict or object to how we use it;
• portability — receive your data in a usable format;
• withdraw consent at any time where we relied on it.

To exercise any of these, email booking@cleanandpristinecarcare.com. We will respond within one month (we may extend this by up to two months for complex requests, and will tell you if so). There is normally no charge.

We do not make decisions about you by solely automated means.

10. Cookies and website analytics

Our website uses privacy-friendly, cookieless analytics (via Vercel) to count visits and see which pages are popular. This does not identify you and does not track you across other websites. We do not use advertising or tracking cookies.

11. Children

Our services are aimed at adults (vehicle owners). We do not knowingly collect data about children.

12. Complaints

If you are unhappy with how we have handled your data, please contact us first so we can put it right. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO) — ico.org.uk, helpline 0303 123 1113.

13. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows the current version.