Privacy Policy

1. Scope of this Privacy Policy

This Privacy Policy applies to the Car Cure website, user accounts, vehicle management, spare parts requests, roadside assistance (SOS), vehicle care services, customer support, reviews and any related online services provided by Car Cure.

2. Data Controller

Car Cure is operated by Car Cure LLC, based at G block, Al hail, Fujairah, UAE. For any data-related inquiries, contact us at admin@carcure.ae.

3. Information We Collect

We collect information you provide directly and information generated when you use our services. The specific data we collect includes:

Account Information: When you create an account, we collect your name, email address, phone number and password. Passwords are never stored in plain text and are protected using industry-standard secure hashing methods. If you sign in using Google, we receive your name, email address and profile picture from Google.

Vehicle Information: When you add vehicles to your account, we collect vehicle brand, model, year, variant, fuel type, transmission type, chassis (VIN) number, plate number and engine number. We also collect vehicle photographs you upload, including exterior photos (front, back, left and right) and interior photos.

Profile Photograph: You may upload a profile picture to your account, which is stored securely and displayed on your profile.

Spare Part Requests: When you request spare parts, we collect your name, email, phone number, vehicle details, part description, part quality preference and any reference images of the part you upload. We also collect your delivery address and delivery location coordinates to arrange delivery.

SOS and Roadside Assistance: When you request emergency roadside assistance, we collect your name, email, phone number, vehicle details, a description of the issue and any photographs of the damage. We also collect your GPS coordinates or a manually entered location address to dispatch a recovery operator to your position.

Vehicle Care Requests: When you request vehicle care services, we collect similar information to SOS requests including your location and vehicle details.

Reviews and Ratings: When you submit a review, we collect your name, email address (optional), review comment, rating and an optional profile image.

Contact Enquiries: When you contact us through our website, we collect your name, email address, phone number, service of interest and your message. Enquiries are used to respond to your questions, provide quotations, schedule appointments, deliver customer support and improve our services.

Technical Data: We automatically collect your IP address, browser type and device information for security purposes. We also use browser-based device recognition to help protect your account from unauthorized access.

4. Location Information

When you request roadside assistance or vehicle care services, we collect your geographic location to dispatch help to your precise position. Location data is obtained from your device's GPS or from an address you provide manually.

To convert GPS coordinates into a readable address, your location data may be processed through OpenStreetMap's Nominatim geocoding service. Your IP address may also be checked through a third-party service to assist with service delivery.

Location data is collected only when you actively initiate a service request and is used solely for providing that service.

5. Media Uploads

Our platform allows you to upload various types of images including profile photographs, vehicle photographs (exterior and interior), spare part reference images and damage photographs for SOS requests.

All uploaded images are stored in secure cloud storage with access restricted to authorised Car Cure personnel and trusted service providers where necessary to provide the requested services. Images are served through time-limited secure links and are not publicly accessible. When you delete a request or vehicle associated with uploaded images, those images are removed from storage.

6. Legal Basis for Processing

We process your personal data based on: (a) your consent, (b) necessity to perform a contract (such as processing a spare parts order or dispatching roadside assistance), (c) our legitimate interest in ensuring platform security and preventing fraud and (d) compliance with legal obligations under applicable laws of the United Arab Emirates, including applicable data protection requirements.

7. How We Use Your Information

Your data is used to:

- Process and fulfil your spare parts orders, vehicle care plans and roadside assistance requests.

- Manage your account, including login, password reset and email verification.

- Verify vehicle information you submit to your account.

- Communicate with you about your requests, orders and account status.

- Send transactional emails including verification codes, password reset links, order updates and service notifications.

- Display your approved reviews on our website to help other customers.

- Ensure platform security, prevent fraud, detect abuse and investigate misuse.

- Protect the platform and enforce our Terms of Service.

- Improve our services and platform experience.

8. Data Sharing

We share your information only as necessary to provide our services:

Recovery Operators: When you request roadside assistance, the assigned recovery operator receives only the information necessary to provide the requested service, such as your name, contact number, vehicle details and service location. This information is shared solely for fulfilling your roadside assistance request.

Vehicle Care Providers: When you request vehicle care services, the assigned provider receives only the information required to perform the requested service, including your name, contact details, vehicle information and service location.

Spare Parts Suppliers: When you request spare parts, we share relevant order and delivery information with suppliers solely to source and deliver the requested parts.

Third-Party Service Providers: We use the following third-party providers to operate our platform:

- Google: Used for account sign-in (OAuth), email delivery (Gmail API), embedded maps and web fonts. When you sign in with Google, your name, email and profile picture are shared with us.

- Supabase: Provides our database and secure cloud storage for uploaded images. Data is stored on Amazon Web Services infrastructure.

- OpenStreetMap / Nominatim: Used to convert GPS coordinates into readable addresses for service requests.

- Cloudinary: Used for video content delivery on select pages.

All third-party providers are contractually required to protect your data and use it only for the purposes we specify.

Legal Disclosures: Your personal information may also be disclosed when required by law, to comply with court orders or lawful government requests, or to protect the rights, safety or property of Car Cure, its users or others.

9. Embedded Google Maps

Some pages on our platform contain embedded Google Maps. When you visit a page with an embedded Google Map, Google may receive technical information such as your IP address, browser type and device information in accordance with Google's Privacy Policy.

10. Staff Access

Authorised Car Cure staff members can access user data including profile information, vehicle details, service requests and reviews for the purpose of managing orders, verifying vehicles and providing customer support. Staff access is limited to personnel who require it to perform their duties.

11. Public Reviews and User Content

When you submit a review, it is moderated by our team before publication. Only approved reviews become publicly visible. Public reviews display only the approved information, which includes your name, rating and review comment. Your email address is not displayed publicly. Car Cure reserves the right to reject or remove reviews that violate applicable laws, community standards or the Terms of Service. You may request removal of your review by contacting us.

12. International Data Transfers

Your data may be processed or stored outside the UAE through our third-party service providers, including cloud infrastructure located in other regions. We ensure that such transfers are protected through appropriate safeguards, including contractual protections and security measures.

By using the platform, you acknowledge that your information may be processed in countries with data protection laws different from those of your country of residence.

13. Data Retention

We retain your personal data only as long as necessary to provide our services and meet legal requirements. Specific retention periods include:

- Account data: Retained for as long as your account remains active.

- Session data: Session cookies expire when you close your browser, or after 14 days if you select the "remember me" option.

- Service requests: Retained for the duration needed to fulfil the request and for a reasonable period afterwards for support purposes.

- Login attempt records: Retained for security monitoring purposes.

- Uploaded images: Retained while associated with your account or request and removed when you delete the associated item.

14. Data Security

We implement appropriate security measures to protect your personal data, including:

- HTTPS encryption for all data transmitted between your browser and our servers.

- Secure cloud storage with restricted access for uploaded files.

- Time-limited secure links for accessing uploaded images.

- Rate limiting and monitoring to detect and prevent abuse.

- Access controls ensuring only authorised personnel can access user data.

While we implement reasonable security measures, no method of electronic storage or internet transmission can be guaranteed to be completely secure. We cannot ensure the absolute security of your data but are committed to protecting it to the fullest extent possible.

You are responsible for maintaining the confidentiality of your account credentials. Do not share your password with anyone. If you believe your account has been compromised, contact us immediately at admin@carcure.ae.

15. Your Rights

Depending on applicable law, you may have the following rights regarding your personal data:

- Request access to the personal data we hold about you.

- Request correction of inaccurate or incomplete personal data.

- Request deletion of your personal data, subject to legal and contractual obligations.

- Request a copy of your personal information in a structured, commonly used format.

- Withdraw consent where processing is based on your consent.

- Object to certain processing where legally applicable.

To exercise any of these rights, contact us at admin@carcure.ae. We will respond to your request within a reasonable timeframe.

16. Account Deletion

You may request deletion of your account and associated personal data by contacting us at admin@carcure.ae. Upon receiving your request, we will delete your account information, vehicle data, service requests and uploaded images within a reasonable timeframe.

Please note that certain information may be retained where required by applicable law or for legitimate business purposes, such as fraud prevention, legal compliance and audit records, even after an account deletion request.

17. Cookies and Browser Storage

We use essential cookies required for the platform to function properly. These include:

- Session cookie: Used to keep you logged in and maintain your session while browsing the site. This cookie expires when you close your browser.

- CSRF cookie: Used to protect against cross-site request forgery attacks. This cookie is required for secure form submissions.

We also use browser-based storage to remember your notification settings and improve your browsing experience. This data is stored locally on your device and is not shared with third parties.

We currently do not use advertising cookies or third-party analytics cookies. You can control cookies through your browser settings. Disabling essential cookies may prevent certain features of the platform from working correctly.

18. Email Communications

We send transactional emails solely to provide requested services and respond to your actions. These include account verification emails, one-time password (OTP) codes, password reset links, order status updates, roadside assistance notifications and responses to your enquiries.

19. Third-Party Privacy Policies

Our platform integrates with third-party services that operate under their own privacy policies. We encourage you to review the privacy policies of these providers:

- Google Privacy Policy

- Supabase Privacy Policy

- Cloudinary Privacy Policy

We are not responsible for the privacy practices of third-party providers, but we take steps to ensure they handle your data in accordance with applicable requirements.

20. Data Accuracy

You are responsible for ensuring that the personal and vehicle information you provide to us is accurate, complete and up to date. If your information changes, please update it through your account settings or contact us at admin@carcure.ae to make the necessary corrections. Inaccurate or outdated information may affect our ability to provide the requested services. Providing false, incomplete or outdated information may delay or prevent us from providing certain services.

21. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

22. Policy Updates

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Continued use of our services indicates your acceptance of the updated policy.

23. Contact

If you have questions, concerns or complaints regarding this policy or your data, contact us at admin@carcure.ae or visit our Contact page. To help us process your request efficiently, please include your account email address and any relevant request or order details when contacting us regarding your personal data.