Privacy Policy

1. Summary

We collect only what we need to answer your quote request and perform the services you book. We do not sell your data, we do not run advertising trackers, and we do not send marketing email without your opt-in.

2. What we collect

Quote requests: name, phone number, email address, vehicle (year/make/model), services of interest, shade preference, coverage, shop-or-mobile preference, preferred date, budget range, and anything you write in the message field.

Client records: if you become a client, we keep your contact details, vehicle information, booking history, invoices, and payment status in our operations console.

Staff accounts: employees and contractors sign in with an email and password; sign-in sessions are stored in an essential cookie.

Payment data: handled entirely by Stripe. We never receive or store card numbers.

3. How we use it

To respond to quotes, schedule and perform work, send transactional emails (quote confirmations, invoices, appointment details), process payments through Stripe, keep business records as required by tax law, and maintain the security of the website.

4. Who we share it with

Only the processors required to run the business: Supabase (database and authentication hosting), Resend (transactional email delivery), Stripe (payments), and Lovable Cloud (application hosting). Each processes data on our behalf. We disclose information to others only if required by law, and we never sell personal information.

5. Cookies

We use only strictly necessary cookies: an authentication session cookie for staff sign-in, and spam protection on the quote form. There are no advertising, analytics, or cross-site tracking cookies. See our Cookie Notice for details.

6. Retention

Quote requests that do not convert are deleted after 12 months. Client records are retained for as long as needed to provide service and satisfy tax and warranty obligations (typically 7 years for invoicing records). You can request deletion sooner - see below.

7. Your rights (California)

If you are a California resident, you have the right to know what personal information we hold, request a copy, request correction or deletion, and request that we not sell or share your personal information. We do not sell or share personal information as those terms are defined by the CCPA/CPRA. To exercise any right, email luxurytintmotorsports@gmail.com; we respond within 45 days. We do not discriminate against you for exercising your rights.

8. Security

Data is stored in Supabase with row-level security; administrative access is limited to authorized staff accounts with individual credentials. Payment processing is handled entirely by Stripe (PCI DSS Level 1). No system is perfectly secure, but we take reasonable measures appropriate to a small business.

9. Children

This website is not directed at children under 16 and we do not knowingly collect their information.

10. Changes

We may update this policy as the business changes; the date above reflects the current version. Material changes will be noted on this page.