Privacy

The short version

We collect what we need to turn up at the right place, at the right time, with the right gear — and to take payment. We do not sell your information, and we do not send marketing you did not ask for.

What we collect

• Contact details — name, email, mobile number.
• Service address — where the vehicle is, and whether water and power are available on site.
• Vehicle details — make, model, size, and registration if you give it to us.
• Booking history — what was done, when, what it cost, and any notes about access or condition.
• Photos — before/after images of the vehicle, kept as a quality record.
• Account details — if you create one, your email and a securely hashed password, or your Google account identifier if you sign in with Google.

We do not store card numbers. Payments are handled by Stripe, and only a card brand and last four digits come back to us so you can recognise the card on file.

Why we hold it

To schedule and carry out the work, to take payment, to send you a confirmation, a reminder and a receipt, and to keep an accurate record of what was done to your vehicle. Tax and accounting law requires us to keep transaction records for seven years.

Who else sees it

The only third parties involved are the ones that make the service work:

• Stripe — payments and subscription billing.
• Resend — sending confirmation, reminder and receipt emails.
• Twilio — sending reminder and on-my-way text messages.
• Cloudflare — hosting, the database, spam protection on our forms, and privacy-preserving visitor statistics.
• Google — only if you choose to sign in with a Google account.

We do not sell, rent or trade your information to anyone.

Cookies

We use two strictly necessary cookies: one keeps you signed in, and one remembers an in-progress booking so you do not lose it on refresh. Neither is used for advertising.

We measure how many people visit the site using Cloudflare Web Analytics, which sets no cookies, does not fingerprint your device, and cannot follow you to other sites.

Security

The site is served over HTTPS. Passwords are stored as salted PBKDF2 hashes, never in readable form. Session tokens are stored hashed, so a copy of the database cannot be replayed as a login. Job photos are held in private storage and served only to you or to us.

Your rights

Under the Privacy Act 2020 you can ask what we hold about you, ask us to correct it, and ask us to delete it. Email bookings@lxd.co.nz and we will action it, other than records we are legally required to keep.

Marketing

Booking-related messages — confirmations, reminders, receipts, weather calls — are part of the service and are sent to everyone who books. Anything promotional is opt-in only, and every message has an unsubscribe.

Contact

League of Extraordinary Detailing · Auckland, New Zealand · +64 21 172 8297 · bookings@lxd.co.nz

If you are not satisfied with how we handle a privacy issue, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.