Privacy Policy

1.1 Who We Are

CarPal is a digital platform by Citrus Labs that facilitates auto repair shop management by connecting businesses with customers and streamlining service operations.

1.2 Scope of Policy

This Privacy Policy applies to all users of the CarPal Auto Repair Shop account and explains how we collect, use, share, and protect personal information.

1.3 Consent to Policy

By using CarPal, you consent to the collection, processing, and sharing of your personal data as outlined in this policy.

1.4 Key Terms

• "We," "Us," "Our" refer to Citrus Labs and CarPal.
• "You," "Your" refer to Auto Repair Shop account users.
• "Personal Data" refers to any identifiable information related to an individual or business.

2.1 Auto Repair Shop Information

• Account details (business name, registration number, and location).
• Staff information (employee names, roles, and access permissions).
• Business contact details (phone number, email, and mailing address).

2.2 Customer Information

• Personal identifiers (customer names and ID numbers).
• Contact information (phone numbers, email addresses).
• Communication preferences.

2.3 Vehicle Information

• Vehicle details (make, model, registration number).
• Service records and repair history.
• Vehicle photos and assessment reports.

2.4 Payment Information

• M-Pesa details for payment verification.
• Transaction records (dates, amounts, reference numbers).
• Invoice data (billing details and charges).

2.5 Automatically Collected Information

• Device information (IP address, browser type).
• Log data (time and duration of platform usage).
• Usage data (interactions within the platform).
• Cookies and similar technologies to enhance user experience.

3.1 Providing & Improving Services

• Managing auto repair shop accounts.
• Facilitating vehicle check-ins, service tracking, and invoicing.
• Enhancing platform functionality based on user activity.

3.2 Communications & Updates

• Sending appointment confirmations, service reminders, and promotions.
• Providing customer support and responding to inquiries.
• Sending policy updates and notifications.

3.3 Analytics & Reporting

• Monitoring business performance.
• Generating reports for auto repair shop management.
• Improving service offerings based on usage trends.

3.4 Legal Obligations

• Complying with data protection regulations.
• Responding to legal requests and government inquiries.

4.1 Service Providers

We may share data with trusted third-party service providers that help us operate CarPal.

4.2 Insurance Companies

Vehicle service records may be shared with insurance providers for claim processing.

4.3 Legal Requirements

We may disclose data when required by law or in response to legal proceedings.

4.4 Business Transfers

In the event of a merger or acquisition, data may be transferred as part of the business assets.

4.5 With Consent

We will request explicit consent before sharing personal information beyond these cases.

5.1 Security Measures

• Use of encryption to protect sensitive data.
• Role-based access control for staff accounts.
• Regular security audits and system updates.

5.2 Data Storage

• Secure servers with restricted access.
• Cloud-based backups for data integrity.

5.3 Data Retention

• Active account data is stored indefinitely.
• Inactive account data is retained for five years before deletion.

5.4 Breach Notification

In case of a data breach, affected users will be notified promptly in compliance with legal obligations.

6.1 Accessing Your Information

You may request a copy of the data we hold about you.

6.2 Updating Your Information

You can update your details via account settings or customer support.

6.3 Deleting Your Information

You may request data deletion, subject to legal and business requirements.

6.4 Opting Out of Communications

You can unsubscribe from marketing emails and SMS notifications.

6.5 Filing Complaints

You may lodge complaints with our Privacy Officer or the Office of the Data Protection Commissioner.

7.1 Change Process

We may update this policy periodically. Significant changes will be communicated in advance.

7.2 Notification of Changes

Users will be notified via email or platform notifications.

7.3 Prior Versions

Archived versions of past policies will be available upon request.