CarbonGloss

1. Introduction

This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the New Zealand Privacy Act 2020. We are committed to protecting your privacy and handling your personal information responsibly.

By using our website and services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following types of personal information:

2.1 Personal Details

• Full name
• Email address
• Phone number
• Physical address (service location)
• Vehicle details (make, model, registration)

2.2 Booking Information

• Service type and preferences
• Booking date and time
• Special requests or notes
• Service history

2.3 Payment Information

• Payment transaction details (processed securely via Stripe)
• Billing address
• Payment history and receipts

2.4 Technical Information

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on site
• Referral source

3. How We Collect Information

We collect information directly from you when you:

• Create an account or register on our website
• Make a booking for our services
• Submit a contact form or enquiry
• Subscribe to our newsletter or marketing communications
• Communicate with us via email, phone, or social media
• Use our website (via cookies and analytics)

4. Purpose of Collection

We collect and use your personal information for the following purposes:

• Service Delivery: To provide, schedule, and deliver our mobile car detailing services
• Communication: To contact you regarding bookings, confirmations, reminders, and service updates
• Payment Processing: To process payments securely via Stripe
• Customer Support: To respond to enquiries and provide customer service
• Business Operations: To maintain records, manage accounts, and improve our services
• Marketing: To send promotional offers, newsletters, and service updates (with your consent)
• Legal Compliance: To comply with New Zealand laws and regulations
• Website Improvement: To analyze website usage and enhance user experience

5. Third-Party Services

We use the following third-party services that may collect and process your personal information:

5.1 Stripe (Payment Processing)

Payment card details are processed securely by Stripe, Inc. We do not store your full credit card information on our servers. Stripe's privacy policy is available at https://stripe.com/nz/privacy

5.2 Email Service Providers

We use email service providers to send booking confirmations, reminders, and marketing communications. Your email address and name may be shared with these providers.

5.3 Analytics Services

We may use analytics services to understand how visitors use our website. These services may use cookies and similar technologies to collect information about your usage patterns.

5.4 Hosting Services

Our website and database are hosted on secure servers. Your data may be stored on servers located in New Zealand or overseas (including Australia, United States, or Europe) with providers who comply with appropriate privacy and security standards.

6. Data Storage and Security

We take the security of your personal information seriously:

• Secure Storage: Your information is stored in secure databases with encryption
• Access Controls: Only authorized personnel have access to your personal information
• HTTPS: Our website uses SSL/TLS encryption to protect data transmission
• Password Protection: Account passwords are encrypted using industry-standard hashing
• Regular Backups: We maintain secure backups of our data
• Security Monitoring: We monitor for unauthorized access and security threats

While we implement reasonable security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Maintain business records and comply with legal obligations
• Resolve disputes and enforce our agreements
• Comply with tax and accounting requirements (typically 7 years for financial records)

When personal information is no longer needed, we will securely delete or anonymize it.

8. Your Rights Under the Privacy Act 2020

Under New Zealand's Privacy Act 2020, you have the following rights:

8.1 Right to Access

You can request a copy of the personal information we hold about you.

8.2 Right to Correction

You can request that we correct any inaccurate or incomplete personal information.

8.3 Right to Deletion

You can request that we delete your personal information, subject to legal retention requirements.

8.4 Right to Object

You can object to or opt out of marketing communications at any time.

8.5 How to Exercise Your Rights

To exercise any of these rights, please contact us using the details in Section 12. We will respond to your request within 20 working days as required by the Privacy Act 2020.

9. Marketing Communications

We may send you promotional emails, newsletters, and service updates if you have:

• Provided your consent to receive marketing communications
• Purchased services from us (we may contact you about similar services)

You can unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us directly. This will not affect transactional emails related to your bookings.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

• Remember your preferences and settings
• Authenticate your login sessions
• Analyze website traffic and usage patterns
• Improve website functionality and user experience

You can control cookie settings through your browser preferences. Note that disabling cookies may affect website functionality.

11. Disclosure of Information

We will not sell, rent, or trade your personal information. We may disclose your information:

• To third-party service providers who assist in our operations (e.g., payment processing, email services)
• If required by law or legal process
• To protect our rights, property, or safety, or that of others
• In connection with a business sale, merger, or acquisition (with your consent if required)
• With your explicit consent

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

13. Complaints

If you believe we have breached the Privacy Act 2020, you can:

1. Contact us directly using the details above – we will investigate and respond to your complaint
2. Contact the Office of the Privacy Commissioner:
   • Website: www.privacy.org.nz
   • Phone: 0800 803 909
   • Email: enquiries@privacy.org.nz

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a new "Last Updated" date. Your continued use of our services after changes are made constitutes acceptance of the updated policy.

15. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.