This Privacy Policy ("Policy") describes how Onyx Mobile Detailing, a mobile automotive detailing business operating in the State of Colorado ("Onyx," "Company," "we," "us," or "our"), collects, uses, discloses, and safeguards information obtained through onyxdetailing.com (the "Site") and in connection with the booking and performance of our detailing services (collectively, the "Services").

This Policy applies to visitors, prospective customers, and customers of the Site and the Services. By using the Site or engaging our Services, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described here, please do not use the Site or the Services.

Information You Provide Directly. When you request a quote, book an appointment, create an account, or otherwise contact us, we collect information such as: your full name; email address; telephone number; service address (street, city, state, ZIP code); any notes, gate codes, or special instructions you provide; and the content of any messages you send us.

Account Information. If you create an account, we store your email address and associate it with a secure sign-in link and your booking history.

Payment Information. We do not collect, process, or store full payment card numbers, card verification codes, or bank account numbers on our own servers. Payments are processed by our third-party payment processor, Block, Inc. (Square), which maintains its own privacy policy and PCI-DSS-compliant security practices governing the payment data it handles on our behalf.

Automatically Collected Information. Our Site uses a limited number of first-party cookies described in Section 5 below. We do not currently use third-party advertising, tracking, or analytics cookies.

We use the information described above to: (a) schedule, confirm, and perform detailing services; (b) process payments through our third-party payment processor; (c) respond to quote requests, customer service inquiries, and other communications; (d) send transactional communications such as booking confirmations, appointment reminders, and cancellation notices; (e) maintain business, accounting, and tax records; (f) improve, secure, and troubleshoot the Site and our Services; and (g) comply with applicable law and enforce our Terms of Service.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes, and we do not use your information for any purpose materially different from those described in this Policy without providing notice.

We disclose personal information only in the following circumstances: (a) to service providers who perform functions on our behalf, including payment and scheduling processing (Square), website hosting and infrastructure, transactional email delivery, and database hosting, each of whom is authorized to use your information only as necessary to provide those services to us; (b) to comply with a valid subpoena, court order, or other legal process, or to establish or exercise our legal rights or defend against legal claims; (c) to protect the rights, property, or safety of Onyx, our customers, or the public; and (d) in connection with a merger, acquisition, financing, or sale of business assets, subject to standard confidentiality protections.

We do not sell personal information as that term is defined under applicable state privacy laws, and we do not share personal information with third parties for cross-context behavioral advertising.

The Site uses the following categories of first-party cookies: (a) a locale preference cookie that remembers whether you prefer to view the Site in English or Spanish; and (b) an authentication/session cookie that keeps you signed in to your customer account or, for authorized personnel, the administrative dashboard.

These cookies are strictly necessary for the Site's core functionality and are not used for advertising or cross-site tracking. You can configure your browser to refuse cookies, but doing so may prevent certain features of the Site, such as remaining signed in, from functioning correctly.

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Policy, including to provide the Services, maintain accurate business and tax records, resolve disputes, and comply with our legal obligations. Retention periods vary depending on the type of information and the purpose for which it was collected.

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, alteration, or disclosure, including encrypted data transmission (HTTPS), hashed authentication credentials, and access controls limiting internal access to customer data to authorized personnel.

No method of electronic transmission or storage is completely secure, and we cannot guarantee the absolute security of your information. In the event of a security incident affecting your personal information, we will notify affected individuals and any applicable regulators as required by applicable law.

Depending on your state of residence, you may have the right to: (a) request confirmation of whether we process your personal information and access a copy of it; (b) request correction of inaccurate personal information; (c) request deletion of your personal information, subject to legal or legitimate business exceptions; (d) obtain a portable copy of your personal information; and (e) not be discriminated against for exercising these rights.

Colorado residents may exercise rights available to them under the Colorado Privacy Act (CPA), including the right to opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling — although Onyx does not currently engage in any of these practices. Residents of other states may have similar rights under their applicable state privacy laws.

To exercise any of these rights, contact us using the information in Section 13 below. We will verify your request and respond within the timeframe required by applicable law. You may designate an authorized agent to submit a request on your behalf, and you have the right not to receive discriminatory treatment for exercising your privacy rights.

The Site and the Services are not directed to individuals under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take reasonable steps to delete such information promptly.

The Site may contain links to third-party websites or services, including our social media profiles and payment processors, which are governed by their own privacy policies. We are not responsible for the privacy practices of third parties, and we encourage you to review their policies before providing them with personal information.

We and our service providers store and process personal information on servers located in the United States. If you access the Site from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, which may have data protection laws that differ from those of your jurisdiction.

We may revise this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be indicated by a revised effective date and, where required by law, by additional notice to affected individuals.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, you may contact us at info@onyxdetailing.com or (786) 350-5322. We will make reasonable efforts to respond promptly to all legitimate inquiries.