Effecfive date: 18 Jan 2025
Introduction
Your privacy is of utmost importance to us. This Privacy Policy outlines how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and UAE local data protection laws. By using our platform, you agree to the terms of this Privacy Policy.
Data We Collect
We collect and process the following types of data:Customer Data: Limited to technical details required for parts identification (e.g., car VIN, make, model, engine type). We do not collect or share customer personal information, license plate numbers, or car images.
Workshop Data: Includes job information, quotations, invoices, and financial data, which remain the sole property of the workshop.
Vehicle Data: We build a database of car information, including VIN and license plate numbers, to streamline vehicle identification for future use within the platform.
How We Use Data
We use the collected data for the following purposes:Workshop Operations: Facilitate efficient job management, parts identification, and service record generation.
Parts Supplier Integration: Share basic technical information (VIN, make, model, engine type) with parts suppliers as required for parts identification. No end-customer data is shared.
Reporting and Analytics: Generate reports for individual workshops and suppliers, and compile anonymized platform usage statistics for performance insights.
Service Record Database:Workshops can opt to contribute to a publicly accessible service record database via QR codes, but only with explicit end-customer approval.
Data Sharing
We do not sell, rent, or share customer data except in the following case:Parts Identification:Basic technical information is shared with suppliers to identify parts. This excludes customer personal information, license plate numbers, or car images.
Workshops cannot access data belonging to other workshops, even if they work on the same vehicle. Job information remains exclusive to the originating workshop.Data Protection and Security
We implement strict measures to protect your data:All data is stored on secure servers.
Access to data is restricted to authorized personnel only.
Regular audits ensure compliance with GDPR and UAE data protection laws.
AI and Model Training
We do not use your data to train AI models or large language models (LLMs). All data is processed strictly for the purposes outlined in this policy.Publicly Accessible Service Records
Workshops may opt to contribute service records to a public database via QR codes. This feature is optional and requires explicit end-customer approval. By default, no service records are generated or shared without consent.Your Rights
Under GDPR and UAE laws, you have the right to:Access, correct, or delete your data.
Withdraw consent for data processing at any time.
Request information on how your data is being used.
To exercise these rights, please contact us at privacy@carvant.net.