​

​

1. Scope

This Policy explains how Apex collects, uses, discloses, retains, and protects personal information in connection with our website, booking portal, and detailing services on Oʻahu, Hawaiʻi.

 

Hawaiʻi has not enacted a comprehensive consumer privacy statute, and Apex does not meet the applicability thresholds of the California Consumer Privacy Act or the EU General Data Protection Regulation. We have nonetheless chosen to extend CCPA- and GDPR-inspired rights and practices to every customer, regardless of residence. We consider that a commitment, not a compliance obligation.

2. Information We Collect

You provide directly: | Category | Examples | |---|---| | Identity & contact | Name, phone, email, service address, billing address | | Vehicle | Year, make, model, color, size class, condition notes, modifications, VIN (only where required for warranty registration) | | Transaction | Services purchased, appointment history, membership tier, gift card records | | Communications | Messages, service requests, reviews, support correspondence | | Preferences | Product sensitivities, access instructions, marketing and AI-assessment choices |

 

Collected automatically: | Category | Examples | |---|---| | Vehicle imagery | Timestamped pre- and post-service photographs; video where used for quality control | | Website & device | IP address, browser and device type, pages viewed, referring source, UTM campaign parameters, cookie identifiers | | Service delivery | Appointment timestamps, technician notes, service duration |

 

We do not collect Social Security numbers, driver's license numbers, government identification numbers, biometric identifiers, precise geolocation beyond the service address you provide, or any special category of sensitive personal data.

 

Payment card data. Card details are collected and processed directly by our PCI-DSS-compliant payment processor. Apex does not receive, store, or have access to full payment card numbers.

3. How We Use Information

We use personal information to: schedule, deliver, and document services; process payment and maintain financial records; manage memberships and recurring billing; create and retain the pre-service vehicle condition record; administer coating warranties and required maintenance inspections; provide AI-assisted assessment where you have opted in; respond to inquiries and service claims; send transactional communications; send marketing communications where you have opted in; measure and improve our services and website; and comply with legal, tax, and insurance obligations.

 

Legal bases (GDPR-inspired framing, applied universally): performance of our contract with you; your consent (marketing, AI assessment, media use); our legitimate interests in operating and improving the business and preventing fraud; and compliance with legal obligations.

4. How We Share Information

We do not sell your personal information for monetary consideration, and we never will.

 

We share personal information only as follows:

 

Recipient category

Purpose

Payment processing

Authorizing and settling transactions, recurring billing

Scheduling & field operations (Fieldd)

Booking, dispatch, customer portal, service records

Website & hosting (Wix)

Operating the website, forms, and analytics

Accounting (QuickBooks)

Invoicing, financial records, tax compliance

Automation (Zapier)

Moving records between the systems above

Email & communications (Google Workspace, SMS provider)

Sending transactional and opted-in marketing messages

Advertising & analytics (Google Analytics, Google Ads, Meta)

Measuring website performance and delivering advertising — see Section 5

Coating manufacturer / CARFAX®

Registering warranties and logging installations, where you request it

Professional advisors & insurers

Legal, accounting, and insurance purposes, as needed

Legal authorities

Only where required by law, subpoena, or court order, or to protect rights and safety

Successor entity

In connection with a merger, acquisition, or sale of the business, subject to this Policy

 

Service providers are permitted to use the information only to perform services for us.

5. Advertising, Analytics, and the Limits of Our "No Sale" Commitment

We want to be precise here rather than reassuring.

 

We use Google Analytics and Google Ads, and we may use Meta advertising tools. As part of Google Customer Match and similar audience features, we may upload a hashed (irreversibly scrambled) version of your email address so those platforms can match you to an existing account and show you our advertising, or find similar audiences.

 

• We receive no money for this. We are buying advertising, not selling data.

• However: under CCPA/CPRA definitions this activity is treated as "sharing" personal information for cross-context behavioral advertising — and some readings treat it as a "sale." We are telling you this plainly rather than relying on a blanket "we don't sell your data" claim that would be technically arguable.

• You can opt out at any time. Email info@apexmobileshine.com with "Opt out of advertising audiences" and we will remove your information from these audiences and confirm.

• We honor Global Privacy Control (GPC) browser signals as an opt-out of targeted advertising.

 

Where these platforms act as our processor, they are bound by their own data processing terms.

6. Cookies and Tracking

Our website uses cookies and similar technologies. Full detail, including categories and how to control them, is in our Cookie & Tracking Policy.

7. Vehicle Photography and AI Assessment

Condition record. We photograph every vehicle before and after service. This is part of performing the service and protects both of us. See Vehicle Damage Pre-Inspection Policy.

 

Marketing use is separate and optional. See Photo, Video & Media Release.

 

AI assessment is opt-in. We do not submit your vehicle images to AI analysis unless you have chosen it. See AI Vehicle Assessment Policy.

8. Data Retention

Data

Retention period

Service records, invoices, financial records

7 years (tax, warranty, and dispute-resolution requirements)

Vehicle condition photographs

3 years from service, or the life of any active coating warranty, whichever is longer

AI assessment outputs

12 months, or deleted sooner on request

Marketing contact lists

Until you opt out, then retained on a suppression list only to honor your opt-out

Website analytics

26 months

Membership and billing records

Duration of membership plus 7 years

 

When retention expires, records are securely deleted or destroyed in a manner consistent with HRS Chapter 487R (destruction of personal information records).

9. Your Rights

You may, at any time and free of charge:

 

• Know what personal information we hold and how we use it

• Access a copy in a portable format

• Correct inaccurate information

• Delete your information, subject to records we must keep for tax, warranty, or legal reasons

• Opt out of marketing email and text

• Opt out of advertising audiences (Section 5)

• Opt out of AI assessment

• Withdraw media release consent

• Use an authorized agent to make a request on your behalf

• Not be discriminated against for exercising any of these rights — your price, service, and priority never change

 

How to make a request: email info@apexmobileshine.com with "Privacy Request" in the subject, call (808) 562-4098, or write to [MAILING ADDRESS].

 

Our commitment: we acknowledge within 10 business days and respond substantively within 45 days. If we need more time we will tell you why and take no more than 45 additional days. We verify requests by matching the contact information on your account; for deletion requests we may ask one additional verifying question.

10. Security

We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encrypted transmission, access controls limiting staff access to what their role requires, PCI-DSS-compliant payment processing, reputable vendors with their own security programs, and periodic access review.

 

No system is perfectly secure. In the event of a breach of unencrypted personal information, we will notify affected Hawaiʻi residents without unreasonable delay as required by HRS Chapter 487N, and will notify others consistent with applicable law.

11. Children

Our services and website are not directed to children. We do not knowingly collect personal information from anyone under 16. If we learn we have, we will delete it. Contact us if you believe a minor has provided information.

12. Do Not Track and Global Privacy Control

Browsers send Do Not Track signals inconsistently and there is no accepted standard, so we do not respond to DNT. We do honor Global Privacy Control (GPC) as an opt-out of targeted advertising.

13. Third-Party Links

Our website links to third-party sites and platforms, including our booking portal, social media, and payment provider. Their privacy practices are their own. Review their policies.

14. Changes to This Policy

The current version and effective date are always posted here.

 

Material changes — a new category of information, a new purpose, or a new sharing practice — take effect 30 days after posting, with advance email notice to customers on file. Where a material change would adversely affect how we handle information we already hold about you, we will seek your affirmative consent rather than relying on continued use.

​

📩 Questions? 

​

​
📩 If you have questions about this policy, reach out at:

H. Byerly info@apexmobileshine.com.