Privacy Policy

What we collect

• Account details: name, email address, phone number and password (stored encrypted).
• Vehicle details: make, model, colour, registration and any notes you add.
• Booking details: packages, extras, condition answers, photos you upload, notes and appointment times.
• Payment records: amounts, status and payment references. We never store full card numbers.
• Reviews and loyalty activity linked to your completed bookings.
• Contact enquiries: your name, email address, message and the time you sent it.

Why we use it, and our lawful basis

• To provide and manage your booking — performance of a contract.
• To send booking confirmations, reminders and service updates — performance of a contract.
• To run loyalty rewards and maintenance reminders — legitimate interests, or consent where required.
• To send marketing emails — consent, which you can withdraw at any time.
• To keep financial and tax records — legal obligation.
• To protect our business against fraud and misuse — legitimate interests.
• To respond to contact enquiries — steps at your request before entering a contract, or legitimate interests for general questions.

Who we share it with

We share data only with the suppliers that let us run the service: our hosting and database provider, our email delivery provider and our payment provider. They act on our instructions and cannot use your data for their own purposes. We do not sell personal data.

How long we keep it

Account and vehicle data is kept while your account is active. Booking and payment records are kept for six years to meet UK accounting requirements. Uploaded photos are deleted on request once the related booking is complete. Marketing consent records are kept until you withdraw consent. Contact enquiries are stored securely and emailed to our business inbox so we can respond; you can ask us to delete them where there is no ongoing need to retain them.

Your rights

• Access a copy of your data.
• Correct inaccurate data.
• Erase data where we have no ongoing need to keep it.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent for marketing at any time.

To exercise any right, email us. We respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

Security

Data is stored in access-controlled databases with row-level security, so customers can only reach their own records. Photos are held in private storage and served through short-lived signed links.

Questions about this policy? Contact Two Tone Detailing.

Last updated 14/11/2026.