Privacy Policy

1. Data controller

BR Tinting and Wrap is the data controller for personal data it processes for its own business.

Phone: 083 433 2095. We do not publish a business or privacy email address. Privacy enquiries and rights requests can be made through the formal contact methods available on this website or by phone. We have not named a Data Protection Officer.

2. Personal data we process

Depending on your interaction with us, we may process your name, phone number and other contact information you choose to provide; vehicle details; the requested service, colour, finish or option; estimate and booking information; photographs you provide; communications; and information reasonably necessary to quote for, arrange and perform the agreed service. The current website estimate asks for a name and phone number but does not request email, payment details or special-category personal data.

3. Purposes and lawful bases

• Quotes and enquiries: to prepare and respond to a request, based on steps taken at your request before entering into a contract.
• Bookings and services: to confirm, manage and perform a contract with you.
• Legal, transaction and accounting records: to comply with applicable legal obligations and establish, exercise or defend legal claims where necessary.
• Customer service and business administration: where necessary for our legitimate interests in operating the business, managing customer relationships, responding to concerns and maintaining appropriate records, balanced against your rights and interests.

The current site does not collect a marketing opt-in or operate an email marketing list. We do not treat an estimate request as marketing consent.

4. Website estimate and local storage

The quick estimate stores your draft choices, name and phone number in browser local storage on your device under br-tinting-quote. A Colour Studio choice may also be stored under br-tinting-ppf-selection. This lets the browser restore progress. Draft values are not sent merely because they are stored; when you submit the form, the request is sent directly to BR Tinting and Wrap over HTTPS and stored in the database used by the Admin. A successful submission removes br-tinting-quote; a new Colour Studio selection replaces the previous br-tinting-ppf-selection. Otherwise these values have no automatic expiry and remain until replaced or cleared through your browser.

5. Estimate data and service providers

A submitted estimate may include your name, phone number, vehicle type, requested service and options, Colour Studio colour and finish, calculated guide price, and preferred date and time. The preferred time is a request only and is not a confirmed booking. We process the request to take steps at your request before a possible contract and to respond to the enquiry.

Vercel provides website hosting and related technical processing. Neon PostgreSQL provides the SQL persistence used by the lead and Admin systems. These providers process data on our behalf under their applicable contractual and security terms. We may also disclose data to professional advisers or authorities where necessary and lawful. We do not sell personal data, and no advertising analytics is currently active in this flow.

6. International transfers

Some service providers may process data outside Ireland or the European Economic Area. Where a restricted international transfer applies, the controller must rely on an appropriate transfer mechanism, such as an adequacy decision or approved contractual safeguards, and assess the transfer as required. Provider locations and safeguards can change; contact us for current information about a relevant transfer. This statement does not guarantee that every provider keeps all processing inside the EEA.

7. Retention

• Quote information received by us: normally 28 days where the quote does not progress, unless a longer period is reasonably needed for customer service, a continuing enquiry, legal claims or another valid legal purpose.
• Quote photographs: normally until the quote's validity ends, then deleted when no longer needed unless another valid purpose and lawful basis applies.
• Customer and contact information: may be retained for up to 48 months where necessary for customer service, relationship management, legitimate business administration or contractual matters. This is not an automatic retention period for every item.
• Transaction, accounting and legal records: retained for the period required by applicable law or for as long as reasonably necessary for relevant legal claims.

These periods remain subject to the storage-limitation principle. Data is deleted or anonymised when no longer needed.

8. Your data protection rights

Depending on the circumstances and lawful basis, you may have rights of access, rectification, erasure, restriction, objection and data portability. Where processing is based on consent, you may withdraw consent at any time without affecting earlier lawful processing. These rights are not absolute and lawful exceptions may apply. Contact us using the details in section 1 to exercise a right; we may request only information reasonably needed to identify you and the relevant data.

You may lodge a complaint with the Data Protection Commission, Ireland's supervisory authority.

9. Security and policy changes

We use reasonable technical and organisational measures appropriate to the information and risk. No internet transmission is completely risk-free. Material changes to this policy will be shown here with an updated date.