Privacy policy

The Valet App is built and run by Advica AI Solutions Ltd (“we”, “us”), registered in England and Wales, company number 17076839, registered office Towngate House, 116-118 Towngate, Leyland, PR25 2LQ , ICO registration number ZC220139. This policy explains what personal data we handle, why, and your rights. To contact us about privacy, use office@advicaaisolutions.co.uk.

Who is responsible for your data

• If you run a valeting business that uses The Valet App (or work for one), we are the controller of your account, billing and support data.
• If you book a valet through a business's booking page, that valeting business is the controller of your booking details. We process them on the business's behalf as a processor, under a data processing agreement. For questions about a booking, contact the business first. We'll help them respond.
• If you create a customer account to see and manage your bookings, we are the controller of the account itself (your login details), and each business remains the controller of the bookings you have with them.

What we collect

• Account details: name, email address, phone number and password. Passwords are only ever stored as secure, one-way hashes.
• Business details (valeters): business name, address, logo, VAT status, bank details you choose to show on invoices, services and prices, working hours and areas covered.
• Booking details: name, phone, email, the address where the vehicle will be, vehicle registration, make and model, notes, before and after photos, and payment records.
• Payments: card payments are handled entirely by Stripe. We never see or store full card numbers. We keep a record of what was paid, when and how.
• Technical data: IP address and browser information, used for security, preventing abuse and rate limiting; and a cookie that keeps you signed in.

Why we use it

• To provide the service to valeting businesses under our contract with them, and to customers with an account (contract).
• To process bookings on behalf of the valeting business you book with (as their processor).
• To send service emails such as booking confirmations, reminders, receipts and invoices, which are part of providing the service.
• To keep The Valet App secure and prevent fraud and abuse (legitimate interests).
• To meet legal obligations, including tax and accounting records (legal obligation).
• Marketing reminders from a valeter (for example, “your car is due another valet”) are only sent if you've opted in. You can opt out at any time.

Who we share it with

We only share data with the companies that help us run The Valet App, under contracts that require them to protect it:

• Render Services, Inc.: hosting of the application and database (servers in the EU, Frankfurt).
• Stripe Payments Europe Ltd: card payments, deposits, payment links and subscriptions.
• Resend, Inc.: sending emails.
• Cloudflare, Inc. (R2): private storage of vehicle photos and business logos.
• postcodes.io (Ideal Postcodes Ltd): only when a business charges mileage. Only the postcode is sent, never a name or address.
• Anthropic PBC: only if a business uses the optional AI booking assistant, to read a message the business pastes in.

We never sell personal data. Some of these providers are based outside the UK. Where data leaves the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement (or Addendum) to keep it protected to UK standards.

How long we keep it

• Account data is kept while the account is open and deleted within 12 months of it being closed.
• Booking and payment records are kept on the valeting business's instructions. UK businesses normally need to keep financial records for 6 years.
• Security logs are kept for up to 90 days.

Your rights

You can ask to access, correct or delete your data, to restrict or object to how it's used, and to receive a copy of it. Valeting businesses can export their data and erase a customer's records from within The Valet App. To make a request, use office@advicaaisolutions.co.uk. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

How we keep it safe

Everything is encrypted in transit (HTTPS). Each business's data is kept separate at the database level, so one business can never see another's customers. Photos are stored privately and only shown to the business they belong to. Passwords are hashed, and important actions are logged.

Changes to this policy

If we make significant changes we'll update the date at the top and, where appropriate, let account holders know by email.