Privacy Policy

Introduction

At CarWashFind ("we", "our", or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

This Privacy Policy complies with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). If you are a resident of the European Economic Area (EEA) or California, you have certain data protection rights. Please see the "Your Rights" section below for more information.

Legal Basis for Processing

Under GDPR, we process your personal data on the following legal bases:

• Consent: When you explicitly consent to our use of your data (e.g., for marketing communications)
• Contractual Necessity: When processing is necessary to fulfill our contractual obligations to you
• Legal Obligation: When processing is necessary to comply with legal requirements
• Legitimate Interests: When processing is necessary for our legitimate interests, provided these interests are not overridden by your rights

Information We Collect

Personal Information

We collect information that you voluntarily provide to us when you:

• Fill out our contact form (name, email address, phone number)
• Sign up for our newsletter (email address)
• Communicate with us via email or other means

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device, including:

• Information about your web browser, IP address, time zone, and some of the cookies installed on your device
• Information about the individual web pages that you view, what websites or search terms referred you to our website, and information about how you interact with our website

Categories of Personal Information (CCPA)

Under the CCPA, we collect the following categories of personal information:

• Identifiers: Name, email address, IP address
• Internet or Network Information: Browsing history, search history, interaction with our website
• Geolocation Data: Approximate location based on IP address
• Professional Information: Information provided in business communications

How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide customer support
• Send you marketing and promotional communications (with your consent)
• Monitor and analyze usage patterns and trends
• Improve our website and user experience
• Protect against unauthorized access to our website
• Comply with legal obligations

We do not sell your personal information. Under the CCPA, "sale" means transferring personal information to a third party for monetary or other valuable consideration. While we do share information with third-party service providers (such as Google Analytics), these relationships are not considered "sales" under the CCPA.

Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law.

• Contact form submissions are retained for 14 days after processing
• Google Analytics data is retained for 26 months
• Search queries are not stored and are cleared when you close your browser
• Marketing communications preferences are retained until you opt out

When we no longer need to process your personal information for the purposes set out in this Privacy Policy, we will delete your personal information from our systems.

International Data Transfers

We are based in the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.

For users in the EEA, we ensure that any transfer of your personal information outside the EEA is subject to appropriate safeguards as defined by GDPR Article 46. We primarily rely on Standard Contractual Clauses (SCCs) approved by the European Commission for our data transfers. These clauses provide appropriate safeguards for the transfer of personal data to countries outside the EEA.

Our data transfers are governed by the following safeguards:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Binding Corporate Rules for transfers within our corporate group
• Appropriate technical and organizational measures to ensure data security

You can obtain a copy of our Standard Contractual Clauses by contacting us using the information provided in the "Contact Us" section. We will provide this information in a commonly used electronic format.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and store certain information. The types of cookies we use include:

• Essential Cookies: Required for the website to function properly. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website. These are optional and require your consent.
• Marketing Cookies: Used to track visitors across websites for marketing purposes. These are optional and require your consent.

You can control your cookie preferences through our cookie consent banner. You can also modify your browser settings to refuse cookies, but this may affect your ability to use some features of our website.

Third-Party Services

We use the following third-party services:

• Google Analytics: We use Google Analytics to understand how visitors interact with our website. Google Analytics uses cookies to collect information such as how often users visit the site, what pages they visit, and what other sites they used prior to coming to our site. We use the information we get from Google Analytics only to improve our website. Google Analytics collects only the IP address assigned to you on the date you visit our site, rather than your name or other identifying information. You can opt out of Google Analytics by using our cookie consent settings.
• Google AdSense: We use Google AdSense to display advertisements on our website. Google AdSense uses cookies to serve ads based on your prior visits to our website and other sites. This helps us provide you with relevant advertisements and supports our ability to offer free content. You can opt out of personalized advertising by using our cookie consent settings or by visiting Google's Ads Settings page.

These third-party services have their own privacy policies and may collect information as specified in their respective privacy policies. We encourage you to review their privacy policies to understand how they handle your information.

Your Rights

GDPR Rights (EEA Users)

If you are a resident of the EEA, you have the following data protection rights:

• The right to access, update, or delete your personal information
• The right of rectification - the right to have your information corrected if it is inaccurate or incomplete
• The right to object to our processing of your personal information
• The right of restriction - the right to request that we restrict the processing of your personal information
• The right to data portability - the right to be provided with a copy of your personal information in a structured, machine-readable format
• The right to withdraw consent at any time where we relied on your consent to process your personal information
• The right to complain to a Data Protection Authority about our collection and use of your personal information

We will respond to your request within one month of receiving it. This period may be extended by two further months where necessary, taking into account the complexity and number of requests. We will inform you of any such extension within one month of receipt of the request.

To verify your identity when making a request, we may ask you to provide additional information. This helps us ensure that your personal information is not disclosed to unauthorized parties. We will only use this information for verification purposes.

CCPA Rights (California Residents)

If you are a California resident, you have the following rights:

• The right to know what personal information is collected, used, shared, or sold
• The right to delete your personal information
• The right to opt-out of the sale of personal information
• The right to non-discrimination for exercising your CCPA rights

We will respond to your request within 45 days of receiving it. This period may be extended by an additional 45 days where necessary, in which case we will notify you of the extension within the first 45-day period.

Authorized Agents

California residents may designate an authorized agent to make privacy rights requests on their behalf. To do so, the authorized agent must provide:

• Written permission from the consumer to act as their authorized agent
• Verification of the agent's identity
• Verification of the consumer's identity

We may deny requests from agents who fail to submit adequate proof of authorization. To submit a request through an authorized agent, please contact us using the information provided in the "Contact Us" section and include "Authorized Agent Request" in the subject line.

Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible. The notification will include:

• The nature of the personal data breach
• The likely consequences of the breach
• The measures taken or proposed to address the breach
• Contact details for our data protection representative

We will notify you of any data breach that is likely to result in a high risk to your rights and freedoms. This notification will be made without undue delay and may be provided through our website, email, or other appropriate means of communication.

Data Protection Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data during transmission and storage
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Regular backups and disaster recovery procedures
• Staff training on data protection and security
• Incident response and breach notification procedures

While we implement these measures to protect your personal information, please note that no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your personal information to the best of our ability.

Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we can take necessary actions.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. However, please note that no method of transmission over the Internet or method of electronic storage is 100% secure.

Contact Us

If you have any questions about this Privacy Policy, our data practices, or to exercise your privacy rights (including GDPR-related requests), please contact us at:

We will respond to your request within a reasonable timeframe.

Changes to This Privacy Policy

Last updated: June 7, 2025

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes.

For significant changes to this Privacy Policy, we will notify you through a notice on our website or via email if we have your contact information.