Privacy Policy
Last updated: 16 May 2026
1. Who we are
DETAILCAR FRANQUICIAS, S.L. (“DetailCar”, “we”, “us”) operates the website detailcar.es and its associated booking and supply platform. We are the data controller for personal data collected through the Platform.
| Company | DETAILCAR FRANQUICIAS, S.L. |
| CIF | B98355530 |
| Registered office | Calle Bello 9, Bajo Izquierda, 46024 Valencia, España |
| Commercial Registry | Registro Mercantil de Valencia — Tomo 9345, Libro 6627, Folio 114, Hoja V-144277, Inscripción 1ª |
| Phone | +34 961 059 959 |
| Data protection contact | administracion@detailcar.es |
We have appointed an external Data Protection Officer (DPO), the firm AUDIDAT, who oversees our compliance with data protection law. You can reach the DPO through the data protection contact above.
2. Data we collect
2.1 Information you provide
- Account registration: name, email address, phone number, password.
- Bookings: vehicle details (make, model, registration), selected services, preferred location, date and time.
- Payments: payment card details are processed securely by our payment provider, Stripe. We do not store card numbers on our servers.
- Contact forms: name, email, phone, message content.
- Franchise applications: name, contact details, business background, territory preference.
2.2 Information collected automatically
- Device & browser data: IP address, browser type, operating system, screen resolution.
- Usage data: pages visited, time on site, referral source, clicks.
- Cookies: see Section 7 below.
- Location data: approximate location derived from IP address, used to suggest nearby centres.
3. How we use your data
| Purpose | Legal basis (GDPR) |
|---|---|
| Process bookings and payments | Performance of contract |
| Create and manage your account | Performance of contract |
| Send booking confirmations, reminders, and receipts | Performance of contract |
| Respond to enquiries and support requests | Legitimate interest |
| Send marketing emails (offers, loyalty rewards) | Consent |
| Improve the website, services, and user experience | Legitimate interest |
| Comply with legal and regulatory obligations | Legal obligation |
| Prevent fraud and protect platform security | Legitimate interest |
4. Who we share your data with
- Franchisee locations: booking details (name, vehicle, service) are shared with the centre you book at so they can perform the service.
- Payment provider: Stripe, Inc. processes all card payments. Their privacy policy is available at stripe.com/privacy.
- Communication providers: we use Twilio for SMS and Resend for email to deliver booking notifications.
- Analytics: we use privacy-focused analytics to measure site performance. No personal identifiers are shared with analytics providers.
- Legal authorities: where required by law, regulation, or court order.
We do not sell your personal data to third parties.
5. International transfers
Some of our service providers (Stripe, Twilio, Resend) process data in the United States. These transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, or the provider's certification under the EU-US Data Privacy Framework.
6. Data retention
- Account data: retained while your account is active plus 12 months after deletion request.
- Booking history: retained for 5 years for legal and tax compliance.
- Contact form messages: retained for 12 months.
- Payment records: retained for 7 years as required by Spanish tax law.
- Analytics data: aggregated and anonymised; raw data purged after 26 months.
7. Cookies
We use the following categories of cookies:
| Category | Purpose | Duration |
|---|---|---|
| Strictly necessary | Session management, authentication, CSRF protection | Session |
| Functional | Language preference, recently viewed locations | 1 year |
| Analytics | Page views, performance metrics | 26 months |
| Marketing | Ad personalisation (only with consent) | 12 months |
You can manage cookie preferences at any time via the cookie banner or your browser settings. Disabling strictly necessary cookies may affect site functionality.
8. Your rights
Under GDPR and Spanish data protection law (LOPDGDD), you have the right to:
- Access your personal data and receive a copy.
- Rectify inaccurate or incomplete data.
- Erase your data (“right to be forgotten”), subject to legal retention requirements.
- Restrict processing in certain circumstances.
- Port your data to another service in a machine-readable format.
- Object to processing based on legitimate interest, including direct marketing.
- Withdraw consent at any time for consent-based processing, without affecting prior lawfulness.
To exercise any right, email administracion@detailcar.es, or use the data tools in your account. We will respond within 30 days.
9. Security
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), hashed passwords, role-based access control, and regular security reviews. While no system is 100% secure, we continuously improve our defences.
10. Children
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
11. Changes to this policy
We may update this policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email or a prominent notice on our website. The “Last updated” date at the top indicates the most recent revision.
12. Google Calendar integration
Franchise centres may optionally connect a Google account to keep their DetailCar bookings in sync with Google Calendar. This feature is only for centre operators, is entirely optional, and is not part of customer accounts.
- Access: when you choose to connect, Google asks you to authorise access to your Google Calendar (scope
https://www.googleapis.com/auth/calendar). We only obtain access after you grant it on Google’s own consent screen. - Use: we use this access solely to create and maintain a dedicated “DetailCar” calendar for your centre, and to add, update, and remove the events that reflect your bookings. We do not use your Google Calendar data for any other purpose.
- Storage: we securely store a single Google authorisation (refresh) token so the calendar can stay in sync. We never receive or store your Google password. Short-lived access tokens are generated on demand and are never persisted.
- Sharing: Google Calendar data is never sold, never used for advertising, and never shared with third parties.
- Withdrawing access: you can disconnect at any time from the Google Calendar card in your DetailCar dashboard, or by removing DetailCar’s access at myaccount.google.com/permissions.
DetailCar’s use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements.
13. Supervisory authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.