PRIVACY POLICY

1. Introduction

Welcome to Car O2("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Platform") that connects users ("Customers") with independent mechanics ("Mechanics") for repair, maintenance, and towing services. with independent mechanics ("Mechanics") for repair, maintenance, and towing services.

By using the Platform, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

For the purposes of the UK General Data Protection Regulation (UK GDPR), the data controller is:

Car O2 Ltd

Email: Mamon@car02.co.uk

If you have any questions about how your data is handled, you may contact us at the email address above.

3. Information We Collect

3.1 Information You Provide to Us
  • Account Information: Name, email address, phone number, physical address (for towing/service location), and password.
  • Profile Information (Mechanics only): Business name, trade licenses, insurance certificates, vehicle details (tow truck/capacity), service area, bank account or payment details.
  • Service Details: Vehicle make/model/year, issue description, photos of damage/mechanical problems, preferred service time/location.
  • Payment Information: Credit/debit card details, UPI IDs, or other payment method information (processed via third-party payment gateways).
  • Communications: Chat messages, call logs, and support tickets between Customers and Mechanics.
3.2 Information Automatically Collected
  • Device Information: IP address, device ID, operating system, browser type, mobile network information.
  • Location Data: GPS coordinates or approximate location (with your permission) to match you with nearby Mechanics or to dispatch a tow truck.
  • Usage Data: Pages/screens viewed, time spent, clicks, search queries, and feature usage.
3.3 Information from Third Parties
  • Social login providers (Google, Apple, Facebook) – if you choose to log in via those services.
  • Payment processors (Stripe, PayPal, Razorpay, etc.) – to confirm transaction status.

4. How We Use Your Information

We use your information to:

  • Create and manage your account.
  • Match Customers with nearby Mechanics for repair, maintenance, or towing.
  • Process payments and issue invoices/receipts.
  • Verify Mechanic credentials, licenses, and insurance.
  • Provide customer support and dispute resolution.
  • Send service updates, booking confirmations, and promotional offers (with opt-out).
  • Improve our Platform (analytics, bug fixes, feature development).
  • Comply with legal obligations (e.g., tax reporting, fraud prevention).
Location, photos, chat messages, and mechanic verification documents are collected only to provide and improve the services offered on the Platform.

5. Legal Basis for Processing (UK GDPR)

We process your personal data only when we have a valid legal basis to do so. These bases include:

  • Contractual Necessity: To perform our contract with you, such as connecting you with a Mechanic, processing payments, and providing customer support.
  • Legal Obligation: To comply with applicable laws and regulations, including tax reporting and fraud prevention.
  • Legitimate Interests: To improve and secure our Platform, prevent fraud, and send you relevant service updates or promotional offers (where we have a legitimate business interest that does not override your rights).
  • Consent:Where you have given us explicit consent, such as for sharing your location or sending marketing communications (you may withdraw consent at any time).

6. Sharing Your Information

We do not sell your personal data. We may share information in these circumstances:

Recipient Reason
Mechanics (to Customers) To provide the requested service (e.g., share Customer location and vehicle issue)
Customers (to Mechanics) To allow service fulfillment (e.g., share Mechanic name, rating, ETA)
Payment processors To handle transactions securely
Legal authorities If required by law or to protect safety/rights
Service providers Cloud hosting, analytics, push notifications, SMS/email delivery

7. International Data Transfers

Your personal data may be transferred to, stored, and processed in countries outside the United Kingdom, including countries that may not have the same level of data protection laws as the UK. Where we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO).
  • Transfers to countries that have been deemed adequate by the UK Government.

You may request a copy of the safeguards we use by contacting us at Mamon@car02.co.uk

8. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website and app. These technologies help us:

  • Remember your preferences and login details.
  • Understand how you interact with our Platform (analytics).
  • Deliver relevant content and advertisements.

You can manage your cookie preferences through your browser or device settings. However, disabling certain cookies may affect the functionality of the Platform.

9. Data Retention

We retain your information as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for legal, tax, or fraud prevention purposes (typically 3–7 years). Anonymized data may be kept indefinitely for analytics.

10. Your Rights (UK GDPR)

Under the UK GDPR, you have the following rights regarding your personal data:

  • Access:Request a copy of the personal data we hold about you.
  • Rectification: Correct inaccurate or incomplete information.
  • Erasure (Right to be Forgotten): Request deletion of your data, subject to legal or regulatory holds.
  • Restriction: Request that we limit the processing of your data in certain circumstances.
  • ObjectObject to our processing of your data where we rely on legitimate interests.
  • Portability: Request a copy of your data in a structured, machine-readable format.
  • Withdraw Consent: Withdraw any consent you have given at any time (withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal).
  • Lodge a Complaint: If you believe your data protection rights have been violated, you have the right to lodge a complaint with theUK Information Commissioner’s Office (ICO) at www.ico.org.uk.

To exercise any of these rights, contact us at Mamon@car02.co.uk.

11. Security

We use encryption (TLS/SSL), access controls, and regular security audits. However, no internet transmission is 100% secure. You are responsible for keeping your login credentials confidential.

12. Children’s Privacy

Our Platform is not intended for anyone under 16 (or higher age depending on local law). We do not knowingly collect data from minors.

13. Changes to This Policy

We will notify you of material changes via email or in-app notification at least 7 days before they take effect.

14. Contact Us

For privacy concerns or data requests:
Car 02
Email: Mamon@car02.co.uk