Privacy Notice — ValetOS

1. Who we are

SW Mobile Valeting LTD, trading as ValetOS, is the data controller for personal data processed through our website and subscription software. Where our business customers (valeting companies) use ValetOS to manage their own clients, that business is the controller of its client data and we act as processor on its behalf.

2. Personal data we collect

Account data — name, business name, email address, phone number, login credentials.
Customer and booking records entered by our business customers — names, addresses, contact details, vehicle details, job notes and job photographs.
Support messages — the content of emails and messages you send us.
Usage and technical data — pages visited, actions taken, device identifiers, browser type, IP address, and audit-log entries.

3. Why we use it, and our legal basis

Creating and running your account, and providing the Service — performance of our contract with you.
Customer support — performance of our contract, and our legitimate interest in helping users.
Security, fraud prevention and audit logging — legitimate interests in protecting the platform and its users.
Product improvement and analytics — legitimate interests in improving the Service.
Marketing emails — your consent, which you may withdraw at any time.
Accounting, tax and legal compliance — compliance with a legal obligation.

4. Who we share data with

Service providers / subprocessors — hosting, database, email delivery, address and vehicle lookup, and analytics providers, acting on our instructions.
Paddle.com — our Merchant of Record, for the sale of subscriptions, subscription management, payments, invoicing and tax compliance.
Professional advisers — legal, accounting and insurance advisers where necessary.
Authorities — where we are required to disclose by law.

We do not sell personal data.

5. International transfers

Some of our providers process data outside the UK/EEA. Where that happens we rely on UK adequacy regulations or appropriate safeguards such as the International Data Transfer Agreement or Standard Contractual Clauses.

6. Retention

We keep account and booking data for as long as your account is active, and for up to 12 months afterwards to allow reactivation and to resolve disputes. Financial records are kept for 6 years to meet UK tax obligations. After these periods data is deleted or anonymised.

7. Your rights

Under UK GDPR you have the right to access your data, to have inaccurate data corrected, to erasure, to restriction of processing, to data portability, to object to processing based on legitimate interests, and to withdraw consent at any time. We will respond within one month. You may also complain to the Information Commissioner's Office (ico.org.uk).

8. Security

We use appropriate technical and organisational measures including encryption in transit, row-level database access controls scoped to each business, role-based permissions, and audit logging of sensitive actions.

9. Cookies

We use essential cookies to keep you signed in and to secure the Service; these cannot be switched off. Where analytics or marketing cookies are used, they are only set with your consent and you can change your preferences at any time through your browser settings or any cookie banner shown to you.

10. Contact

For any privacy question or to exercise your rights, contact SW Mobile Valeting LTD using the contact details on our website.