Privacy policy

Who handles your information

VinylMD operates this website and handles the information you provide for its automotive services at 18-17 130th St, College Point, New York. Contact (347) 285-2906, or use our privacy request form.

What we collect and why

Quote, contact and service requests can include your name, email, phone number, vehicle details, photographs, notes and appointment preferences. We use these to answer you, prepare an estimate, arrange authorized work and support the service. Account records include a password hash and sign-in/security information. We store transaction references and payment status; payment providers handle payment credentials.

When you use Wrap Lab, configuration preferences and saved builds can be stored on your device. A quote handoff keeps your selected vehicle, film and preview in the same browser tab for up to 24 hours. Submitting it attaches that reference to your service ticket.

Technical information and optional services

Our server processes connection information for delivery, security and abuse prevention. Optional Google Analytics and browser-performance measurements stay off until you opt in. Google Maps loads only after your choice or a specific request to load the map. The Instagram photo carousel serves cached images from this website; opening an original post takes you to Instagram. See Cookies & privacy choices for controls.

Legal bases where European data-protection law applies

We process information needed to respond to a requested quote or perform an agreed service on the basis of steps toward, or performance of, a contract. We rely on legitimate interests for proportionate security, fraud prevention and handling ordinary business enquiries, subject to your rights. Optional analytics rely on your consent. Where applicable, legal obligations require certain accounting or other records. Withdrawing consent does not affect prior lawful processing.

Providers and recipients

Hosting and database services support the website. EmailJS handles website contact messages and Resend can handle service notifications. PayPal and Square handle the payment option you select. DocuSign processes reservation agreements and electronic-signature records. Google Calendar receives appointment details to coordinate bookings; the website also keeps a local booking record. Google receives information when you enable optional analytics and when the contact section’s Google map loads automatically. Staff and service providers receive information needed for their work. We may disclose records when required by law or to establish, exercise or defend legal claims.

International processing

The shop and website operate in the United States. Providers may process information in the United States or other countries. If European transfer rules apply to your information, you may request details of the relevant recipient and applicable transfer arrangements using the contact route above.

Your uploads and deletion

Vehicle photos and submitted Wrap Lab previews help us prepare estimates and manage your service ticket. They are not permission to publish your images. Ticket images are stored in our private database. You can request deletion of your uploads; identify the relevant ticket and images without resending them. After verifying the request and checking whether a service, dispute or legal requirement requires preservation, an authorized owner can delete the image and caption from the active ticket database. A deletion audit entry retains the image identifier and action, not the deleted image or caption.

Ticket images are not currently deleted automatically after a fixed period. Contact-form attachments sent through EmailJS, delivered email, external providers and backups are separate copies and need separate review. Deleting a ticket image does not recall an already downloaded copy or erase a backup immediately. We will explain any information we must retain and the reason when handling your request.

Retention

We retain information for the service, payment, tax, dispute-resolution and security purposes for which it was collected. Retention varies by record type and legal obligations. You can request a review of information that is no longer needed.

Your choices and requests

Ask us to access or correct information, delete information no longer needed, restrict processing, object to processing or provide a portable copy where the applicable law gives you those rights. We verify requests proportionately and explain any applicable exception. Where GDPR applies, requests normally receive a response within one month; legally permitted extensions require notice and reasons. You can also complain to your local data-protection authority.

Submit a privacy request. Do not send passwords, full payment-card details or identification documents through this form. We do not enroll you in promotional emails or texts when you request service. Advertising tags and automatic marketing enrollment are not enabled by this website. We honor Global Privacy Control by leaving optional analytics off.

Children and changes

This website is intended for people arranging automotive services, not for children. Please contact us if a child has provided information that should be removed. We will update this notice when practices change and show the revised date here.