This Privacy Policy describes how Auto Cosmetics, LLC, an Arizona limited liability company ("Auto Cosmetics," "Company," "we," "us," "our"), collects, uses, discloses, and protects personal information obtained through our websites, mobile applications, online booking systems, and related services (collectively, the "Services").

BY USING OUR SERVICES, VISITING OUR WEBSITE, OR PROVIDING US WITH YOUR PERSONAL INFORMATION, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED HEREIN.

If you do not agree with this Privacy Policy, you must immediately cease using our Services.

---

1. INFORMATION WE COLLECT

We collect various types of information from and about you, including information that may directly or indirectly identify you ("Personal Information").

1.1 Information You Provide Directly

Contact Information:

• Name, email address, phone number, mailing address
• Billing and shipping addresses
• Account login credentials (username and password)

Vehicle Information:

• Make, model, year, color, and VIN (Vehicle Identification Number)
• License plate number
• Service history and preferences
• Photographs of your vehicle

Payment Information:

• Credit card information, bank account details, billing address
• Transaction history and payment records

Communications:

• Messages, emails, chat transcripts, survey responses
• Reviews, testimonials, and feedback
• Customer service inquiries and support tickets

Appointment and Service Information:

• Appointment dates, times, and service requests
• Estimates, quotes, and invoices
• Special instructions or preferences

1.2 Information Collected Automatically

When you access or use our Services, we automatically collect certain information about your device and usage:

Device and Usage Information:

• IP address, browser type and version, operating system
• Device identifiers (e.g., advertising ID, device ID)
• Pages visited, time spent on pages, links clicked
• Referring/exit pages and URLs
• Date and time stamps of visits
• Search queries and browsing behavior

Location Information:

• General location derived from IP address
• Precise geolocation (if you grant permission)

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (if you connect your account)
• Payment processors and financial institutions
• Marketing and advertising partners
• Data analytics providers
• Publicly available sources
• Business partners and affiliates

2. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

2.1 To Provide and Improve Our Services

• Process and fulfill service requests, appointments, and bookings
• Provide estimates, quotes, and invoices
• Process payments and manage billing
• Communicate with you about your appointments and services
• Provide customer support and respond to inquiries
• Improve and optimize our Services, website, and user experience
• Develop new products, services, and features
• Conduct research, testing, and analysis

2.2 For Marketing and Communications

• Send promotional emails, newsletters, and special offers
• Provide personalized marketing and advertising
• Conduct surveys and request feedback
• Send appointment reminders and service updates
• Notify you of changes to our Services or policies

2.3 For Business Operations and Legal Compliance

• Maintain records for accounting, auditing, and tax purposes
• Detect, prevent, and address fraud, security breaches, or illegal activity
• Enforce our Terms of Service and other agreements
• Comply with legal obligations, court orders, and government requests
• Protect our rights, property, and safety, and that of our users and the public
• Resolve disputes and enforce our legal rights
• Facilitate business transitions (e.g., merger, acquisition, sale of assets)

3. HOW WE SHARE YOUR INFORMATION

We do not sell your Personal Information to third parties. However, we may share your information in the following circumstances:

3.1 Service Providers and Business Partners

We share information with third-party service providers and business partners who perform services on our behalf, including:

• Website Hosting: Squarespace (website hosting and management)
• Appointment Scheduling: Acuity Scheduling (online booking system)
• Customer Relationship Management: Salesforce (CRM and customer data management)
• Payment Processing: Third-party payment processors (credit card processing)
• Email and Communications: Email service providers and SMS platforms
• Analytics: Google Analytics and other analytics providers
• Marketing and Advertising: Marketing platforms and advertising networks
• Cloud Storage: Cloud storage providers for data backup

These service providers are contractually obligated to protect your information and use it only for the purposes for which it was disclosed.

3.2 Legal and Safety Reasons

We may disclose your information to comply with legal obligations or protect our rights, including:

• In response to subpoenas, court orders, legal process, or government requests
• To comply with applicable laws, regulations, or legal requirements
• To protect against fraud, security threats, or illegal activity
• To protect the rights, property, and safety of Auto Cosmetics, our users, and the public
• To enforce our Terms of Service and other agreements
• In connection with legal proceedings or investigations

3.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy, or other business transaction, your information may be transferred as part of that transaction. You will be notified of any such change via email or prominent notice on our website.

3.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so, such as when you authorize us to share your vehicle photos on social media.

3.5 Aggregated or De-Identified Information

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for research, marketing, analytics, or other purposes.

4. COOKIES AND TRACKING TECHNOLOGIES

4.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. We use cookies and similar tracking technologies (e.g., web beacons, pixels, local storage) to enhance your experience and collect information about how you use our Services.

4.2 Types of Cookies We Use

Essential Cookies: Necessary for the website to function properly (e.g., security, authentication, load balancing).

Functional Cookies: Remember your preferences and settings (e.g., language, region, login status).

Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics) to improve performance and user experience.

Advertising Cookies: Used to deliver relevant advertisements and track ad campaign effectiveness.

4.3 Your Cookie Choices

Most browsers allow you to control cookies through settings. You can set your browser to refuse cookies or alert you when cookies are being sent. However, disabling cookies may limit your ability to use certain features of our Services.

To opt out of Google Analytics, visit: https://tools.google.com/dlpage/gaoptout

5. DATA RETENTION

We retain your Personal Information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods vary based on:

• The type of information and how it is used
• Legal, regulatory, tax, or accounting requirements
• Fraud prevention and security purposes
• Our legitimate business interests

When we no longer need your information, we will securely delete or anonymize it in accordance with applicable laws.

6. DATA SECURITY

We implement reasonable administrative, technical, and physical security measures designed to protect your Personal Information from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit and at rest (where appropriate)
• Secure server infrastructure and firewalls
• Access controls and authentication requirements
• Regular security assessments and monitoring
• Employee training on data security and privacy
• Contractual obligations with third-party service providers

HOWEVER, NO METHOD OF TRANSMISSION OVER THE INTERNET OR ELECTRONIC STORAGE IS 100% SECURE. WHILE WE STRIVE TO PROTECT YOUR INFORMATION, WE CANNOT GUARANTEE ABSOLUTE SECURITY. YOU ACKNOWLEDGE AND ACCEPT THE INHERENT SECURITY RISKS OF TRANSMITTING DATA OVER THE INTERNET.

If we become aware of a data breach that compromises your Personal Information, we will notify you and applicable authorities as required by law.

7. YOUR PRIVACY RIGHTS

Depending on your jurisdiction, you may have certain rights regarding your Personal Information:

7.1 General Rights

• Access: Request access to the Personal Information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your Personal Information (subject to legal exceptions)
• Opt-Out of Marketing: Unsubscribe from promotional emails via the "unsubscribe" link or by contacting us
• Data Portability: Request a copy of your information in a structured, machine-readable format
• Restriction: Request restriction of processing of your Personal Information
• Objection: Object to processing of your Personal Information for certain purposes

7.2 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request information about the categories and specific pieces of Personal Information we have collected, the sources, purposes, and third parties with whom we share it
• Right to Delete: Request deletion of your Personal Information (subject to exceptions)
• Right to Correct: Request correction of inaccurate Personal Information
• Right to Opt-Out: Opt out of the sale or sharing of your Personal Information (Note: We do not sell Personal Information)
• Right to Limit Use of Sensitive Personal Information: Limit the use of sensitive Personal Information
• Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights

To Exercise Your Rights: Email us at support@autocosmetics.org with the subject line "California Privacy Rights Request." We may require verification of your identity before processing your request.

7.3 European Economic Area (EEA) Rights (GDPR)

If you are located in the EEA, you have rights under the General Data Protection Regulation (GDPR), including:

• Access, correction, deletion, and data portability rights
• Right to object to processing and restrict processing
• Right to withdraw consent (where processing is based on consent)
• Right to lodge a complaint with a supervisory authority

We process your information based on the following legal grounds: consent, contractual necessity, legal obligation, legitimate interests, or protection of vital interests.

7.4 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us at:

• Email: support@autocosmetics.org
• Subject Line: "Privacy Rights Request"
• Include: Your name, email address, description of your request, and verification information

We will respond to your request within the timeframe required by applicable law (typically 30-45 days). We may require verification of your identity before fulfilling your request.

8. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws different from those in your jurisdiction.

By using our Services, you consent to the transfer of your information to the United States and other countries. We take appropriate measures to ensure your information receives adequate protection in accordance with applicable data protection laws.

9. CHILDREN'S PRIVACY

Our Services are not directed to individuals under the age of 18, and we do not knowingly collect Personal Information from children under 18.

If we become aware that we have inadvertently collected information from a child under 18, we will take prompt steps to delete such information. If you believe we have collected information from a child under 18, please contact us immediately at support@autocosmetics.org.

10. THIRD-PARTY WEBSITES AND SERVICES

Our Services may contain links to third-party websites, applications, or services that are not owned or controlled by Auto Cosmetics. We are not responsible for the privacy practices of these third parties.

We encourage you to review the privacy policies of any third-party services before providing them with your information. This Privacy Policy applies only to information collected by Auto Cosmetics.

11. DO NOT TRACK SIGNALS

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to be tracked. Currently, our Services do not respond to DNT signals. However, you can control cookies and tracking as described in Section 4.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Effective Date" at the top of this Privacy Policy
• Post the updated Privacy Policy on our website
• Notify you via email or prominent notice on our website (for material changes)

Your continued use of our Services after the Effective Date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

13. CONTACT INFORMATION

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

For Privacy Inquiries & General Questions:

Email: support@autocosmetics.org

For Legal/Formal Privacy Notices & Regulatory Inquiries:

InCorp Services, Inc.
Attn: Privacy Officer for Auto Cosmetics, LLC
8825 N. 23rd Ave, Suite 100
Phoenix, AZ 85021

Important: Formal legal notices, regulatory inquiries, and subpoenas must be sent to the statutory agent address above.

14. DISPUTE RESOLUTION

Any disputes arising from this Privacy Policy or our privacy practices shall be resolved in accordance with the dispute resolution provisions set forth in our Terms of Service, including mandatory arbitration and class action waiver provisions.

---

Acknowledgment: By using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.

This Privacy Policy was last updated on November 19, 2025.