GDPR Compliance Notice
1. Our Commitment to Data Privacy
Elite Car Wash (“we”, “our”, “us”) is committed to protecting the
personal data of individuals in the European Economic Area (“EEA”) in accordance
with the General Data Protection Regulation (EU) 2016/679 (GDPR).
Although based in Canada, we handle EEA personal data lawfully, transparently, and
with full respect for your rights.
2. Scope
This notice applies to any EEA individual who uses or interacts with:
- Our website and booking portal
- Online appointment requests and contact forms
- Email newsletters and promotional offers
- Customer feedback surveys
3. Legal Bases for Processing
Under GDPR, we rely on the following legal bases:
-
Consent – for newsletters, non-essential cookies, and marketing
communications
- Contract – to perform services you’ve booked with us
-
Legal obligation – to comply with accounting, tax, and regulatory
requirements
-
Legitimate interests – to improve our services and website
functionality
4. Your Rights Under GDPR
As an EEA data subject, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase (“right to be forgotten”) where applicable
- Restrict or object to processing in certain circumstances
-
Data portability – receive your data in a machine-readable format
5. Data Transfers
Personal data is stored on secure servers in Canada with protections comparable to
the EEA. Standard contractual clauses are in place where required.
6. Data Retention
We retain personal data only as long as necessary for:
- Providing and improving our car wash and detailing services
- Meeting legal and financial record-keeping obligations
- Analyzing anonymized data to enhance customer experience
Typical retention periods:
- Booking and billing records: 10 years
- Marketing consents and communications logs: 2 years
- Inactive customer data: deleted after 3 years
7. Data Protection Officer
Our Data Protection Officer oversees GDPR compliance and can be reached at
info@elitecarwashup.com.
8. Supervisory Authority
If you have concerns about our data practices, you may lodge a complaint with your
local Data Protection Authority in the EEA.