top of page
White and gold shield logo with crown and star, Fivestar brand

Privacy Policy — Fivestar Valeting & Detailing

Last updated: September 29, 2025

​

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, make an enquiry, or book our services. We comply with UK GDPR and the Data Protection Act 2018.

​

1) Who we are

​

​

We act as the data controller for personal data we process.

​

2) What data we collect

​

We may collect and process:

​

  • Identity and contact: name, email, phone, service location or billing address

  • Booking and service: chosen services, vehicle make/model/year, dates and times, notes, before/after photos where appropriate for quality control or insurance

  • Communications: messages via website forms, email, phone, WhatsApp, or social media

  • Payment and billing: amount, invoice details, last 4 digits and expiry month/year if provided by the payment processor. We do not store full card numbers

  • Technical and usage: IP address, device type, browser, pages visited, time on page, referring URLs, general location derived from IP. See Cookie Policy for details

  • Consent records: your cookie choices and marketing preferences

​

3) Where we get your data

​

  • Directly from you when you submit a form, call, message, or book

  • Automatically from your device when you use our website (cookies, analytics)

  • From public sources only where strictly necessary to confirm business details or contact information

​

4) Purposes and lawful bases

​

  • Provide quotes and respond to enquiries: steps to enter a contract

  • Arrange and fulfil bookings on site or at our studio: contract

  • Take deposits and payments, issue invoices, and manage accounts: contract and legal obligation

  • Customer service, reminders, and essential updates about your booking: contract or legitimate interests

  • Record keeping, insurance, and dispute resolution, including vehicle condition photos where proportionate: legitimate interests

  • Website security, debugging, and improvement (analytics): legitimate interests, with consent for non‑essential cookies

  • Comply with legal requests and tax requirements: legal obligation

  • Marketing communications by email or messaging where you opt in: consent. You can withdraw consent at any time

​

5) Sharing your data

​

We do not sell your data. We share only what is necessary with:

​

  • Hosting and web platform providers

  • Payment processors for deposits and balances [insert provider, e.g., Stripe], who process payments on our behalf

  • Email and communications providers

  • Analytics providers (if enabled), e.g., Google Analytics

  • Professional advisers, e.g., accountants, for invoicing and tax

  • Law enforcement or regulators where required by law

​

All processors are bound by contracts and must keep your data secure and use it only for agreed purposes.

​

6) International transfers

​

Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK Addendum to the EU Standard Contractual Clauses, adequacy regulations, or other lawful mechanisms.

​

7) Data retention

​

We keep data only as long as needed for the purposes above:

​

  • Enquiries with no booking: 12–24 months

  • Bookings, invoices, and related records: up to 7 years (tax and accounting)

  • Quality control photos: up to 24 months unless required longer for insurance or disputes

  • Marketing contact details: until you unsubscribe or we remove inactive contacts

​

When no longer needed, data is deleted or anonymised.

​

8) Your rights

​

Subject to legal limits, you can:

​

  • Access your personal data

  • Correct incomplete or inaccurate data

  • Erase your data in certain cases

  • Restrict or object to processing

  • Data portability for information you provided

  • Withdraw consent where processing is based on consent

​

To exercise rights, email info@fivestarvaleting.net. We will respond within one month. You also have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk.

​

9) Payments

​

We currently do not take online payments. Accepted methods are Card, BACs (bank transfer), or Cash in person. We do not store full card details. Bank transfers are processed by your bank and ours.

​

10) Cookies and similar technologies

​

We use cookies and similar technologies for functionality, security, and analytics. See our separate Cookie Policy for detailed information and how to manage your preferences.

​

11) Security

​

We use reasonable administrative, technical, and physical measures to protect your data, including access controls, encryption in transit, and least‑privilege access. No method is completely secure.

​

12) Children

​

Our services are not intended for individuals under 16, and we do not knowingly collect children’s data.

​

13) Links to other sites

​

Our website may link to other sites. We are not responsible for their content or privacy practices.

​

14) Changes to this policy

​

We may update this policy from time to time. The latest version will always appear on this page with the updated date above.

​

15) Contact

​

16) Automated decision‑making and profiling

​

We do not use your personal data for automated decision‑making that produces legal or similarly significant effects, and we do not profile customers for marketing segmentation beyond basic consent records.

​

17) Data breach notifications

​

If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will assess the impact and notify the ICO and affected individuals as required by UK GDPR.

​

For questions or requests about this policy or your data:

​

​

If we cannot resolve your concern, you can contact the ICO: www.ico.org.uk.

bottom of page