Privacy Policy

1. Who we are & our roles

DetailIQ ("we", "us") is a sole trader business based in the United Kingdom that provides booking and customer-management software to UK vehicle-detailing businesses. You can reach us about any privacy matter at info@detailiq.co.uk.

For data about our account holders (the detailing businesses), we are the data controller. For data about a business's own customers entered through the booking system, the detailing business is the controller and DetailIQ acts as a data processor on their behalf.

2. Personal data we collect

• Account data: business name, owner name, email address, hashed password (managed by Supabase Auth).
• Booking & customer data: customer name, email, phone, postcode, vehicle registration and details, appointment times and notes.
• Payment data: processed directly by Stripe. We receive a payment status and reference only — we never store card numbers.
• Identity verification (optional): if you choose to earn the "Verified" badge, a photo of your government photo ID — processed once for the check and then permanently deleted, never stored (see section 13).
• Technical data: IP address and basic request logs used to keep the service secure, and local-storage tokens used to keep you signed in.
• Consent records: the date and time you accepted these terms.

3. Lawful bases for processing

• Contract (Art. 6(1)(b)): to create your account, process bookings and take payments.
• Legitimate interests (Art. 6(1)(f)): to secure the platform, prevent fraud and improve the service.
• Legal obligation (Art. 6(1)(c)): to keep records required by law (e.g. tax).
• Consent (Art. 6(1)(a)): for optional features such as identity verification and marketing, which you can withdraw at any time.

4. How we use your data

To operate accounts, process bookings and deposits, send transactional emails and SMS (confirmations, reminders, account notices), provide the smart-routing scheduling feature, and keep the service secure. We do not sell your personal data.

5. Sub-processors & sharing

We share data only with trusted providers needed to run the service:

• Supabase — database, authentication and file storage.
• Stripe — payment processing (PCI-DSS compliant).
• Resend — transactional email delivery.
• Twilio — SMS notifications (booking confirmations and reminders).
• Anthropic — powers the AI assistant (processes the text you submit to it) and the optional identity-verification check (processes an uploaded ID image once, then we delete it; see section 13).
• Postcodes.io — postcode geocoding for the routing feature (postcodes only, no names).

We may also disclose data where required by law.

6. International transfers

Where a provider processes data outside the UK, transfers are protected by an adequacy decision or the UK International Data Transfer Agreement / Standard Contractual Clauses.

7. Retention

We keep personal data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting and dispute-resolution requirements, after which it is deleted or anonymised.

Identity documents are never retained. Any ID you upload for verification is deleted immediately after the automated check completes (see section 13) — we keep only the verification outcome and date, not the document.

8. Security

Data is encrypted in transit (HTTPS) and at rest, with database row-level security ensuring each business can access only its own data. Access is restricted and passwords are never stored in plain text.

9. Your rights

Under UK GDPR you have the right to: access your data; have it corrected or erased; restrict or object to processing; data portability; and to withdraw consent at any time. To exercise these rights, email info@detailiq.co.uk. If your data was entered by a detailing business, we will refer your request to them as controller.

10. Complaints

You can complain to the UK regulator, the Information Commissioner's Office (ICO), at ico.org.uk or 0303 123 1113. We'd appreciate the chance to resolve concerns first.

11. Cookies & local storage

We use only essential browser local storage to keep you signed in and remember your session preference. We do not use third-party advertising or tracking cookies.

12. Children

DetailIQ is intended for businesses and is not directed at children under 16. We do not knowingly collect their data.

13. Identity verification & the "Verified" badge

Detailing businesses may optionally verify their identity to display a "Verified business" badge on their booking page and in the Find a Detailer directory. It is entirely voluntary — the platform works fully without it.

• What we ask for: a photo of a government-issued photo ID (passport or UK driving licence) that you upload yourself.
• What we do with it: the image is sent once to our verification provider (Anthropic) for an automated check — confirming it appears to be a genuine, legible, in-date ID and that the name matches your account. We do not use facial-recognition or any biometric identification.
• We do not store your ID. The document is held only transiently in private, access-controlled storage for the few seconds the check takes, then is permanently deleted immediately afterwards. We keep only the outcome (verified / not verified), the date, and a short status note — never the document, the ID number, or the photo.
• Lawful basis: your consent (Art. 6(1)(a)), given by choosing to upload the document, together with our legitimate interest (Art. 6(1)(f)) in maintaining a trustworthy directory for customers.
• Your control: you can decline verification, withdraw consent, or ask us to remove your verified status at any time by emailing info@detailiq.co.uk.
• Transfers: the automated check runs on Anthropic; any transfer outside the UK is covered by the safeguards in section 6.

14. Changes & contact

We may update this policy and will post the new date above. Questions or requests: info@detailiq.co.uk.