---
title: "Privacy | Rotes & Roses Detailing Services"
canonical: "https://rotesandroses.com/privacy/"
last-updated: "2026-11-08"
---

# Privacy

What we collect, where it lives, and what we do not do with it.

Privacy policy

Effective and last updated: November 8, 2026

## Your information stays with the shop.

Rotes & Roses uses the information you share so we can schedule work, keep a record of what was done on your vehicle, honor warranties, and see which parts of the site and our ads work. This policy covers the website, our customer portal at portal.rotesandroses.com, booking and contact forms, texts, calls, and email. Booking, deposit, and cancel rules live on the [Terms](https://rotesandroses.com/terms/) page.

The short version

- We do not sell your personal information.
- Customer and booking records are handled in our customer portal and Jobber, our scheduling system. Google Analytics, Google Ads measurement, and PostHog (including session recordings) start when you visit the site.
- Ask us to delete your information and we will do it within 30 days of confirming it is you, except records the law requires us to keep.
- Privacy requests for your customer record go by email or phone.

Jump to

- What we collect and why
- How long we keep it
- Deleting your information
- Your privacy rights
- Website analytics and ads
- Cookies
- Texts and email
- Contact

### What we collect and why

This table is our notice at collection. It lists what we collect, where it comes from, why, who receives it, and how long we keep it.

| Category | Examples | Source | Why we use it | Who receives it |
| --- | --- | --- | --- | --- |
| Contact details | Name, phone, email, service address and access instructions you provide, such as a gate code | You | Schedule and confirm work, reach you, invoice | Our customer portal, Jobber, Cloudflare, Google Workspace |
| Vehicle and service records | Year, make, model, size, services requested or bought, preferred date and time, prices, warranty and job notes | You and us | Do the job, look up history, honor warranties, taxes | Our customer portal, Jobber |
| Photos and video | Photos you attach to the booking form or customer portal, photos you text or email us, and our before and after photos and video of the vehicle | You and us | Quote the job, record condition, review problem reports, show our work (plates hidden) | Our customer portal, Jobber, Google Workspace; portfolio images may also appear on our social media accounts |
| Messages | Texts, emails, call notes, and contact form messages | You | Reply, keep a record of what was agreed | Jobber, Google Workspace |
| Website activity | Pages viewed, button and phone taps, scrolling, form completions, browser and device type, approximate city from IP address, cookie IDs | Your browser | See how the site is used, measure ads, prevent abuse | Google, PostHog, Cloudflare |
| Session recordings | A replay of how a visit moved through the site: page layout, mouse movement, taps, and scrolling. Anything typed into a form is hidden in your browser before it is sent. | Your browser | Find pages and steps that are hard to use, and fix them | PostHog |
| Browser preferences | Half-finished booking, services you viewed, promo popup status | Your browser | Pick up where you left off, avoid repeat popups | Nobody. It stays on your device. |
| Marketing choice | Whether you opted in to promotional texts, and when | You | Send promotions only to people who asked, honor opt-outs | Our customer portal, Jobber |

**Customer portal and booking photos.** When you submit the booking form, your booking details are sent to our customer portal and Jobber. Attached photos are sent to the customer portal, rather than through the Jobber submission. We use them to assess the vehicle and prepare for the requested work. Please avoid including people, identification documents or unrelated personal information in photos. Our retention and deletion rules below also apply to portal records and submitted photos.

**Sensitive information.** We do not ask for Social Security, driver’s license, or bank account numbers, health information, or precise device location. Card payments are handled by the payment processor. We do not keep full card numbers.

**Selling and sharing.** We do not sell personal information and have not sold it in the past 12 months. Website activity and cookie IDs may be shared with Google for advertising measurement. We do not knowingly sell or share information about anyone under 16.

### Who processes it for us

- Jobber : scheduling, customer records, quotes, invoices, and customer messages
- Cloudflare : website hosting and security
- Google : Tag Manager, Google Analytics, and Google Ads conversion measurement (including Google's Conversion Linker). Our site sends page views, button and phone taps, and booking/contact form completions to Google. We never send your name, phone, email, or address to Google through these tools.
- OpenStreetMap : The homepage and Service Area page load maps of the North County service area. The map tiles come from OpenStreetMap. Those maps do not receive your name, phone, email, or address.
- Google Maps and Places : address suggestions and place details in the booking form. The address text you enter is sent to Google to find matches. This is a booking function, separate from Google Analytics and advertising.
- NHTSA vPIC : vehicle lookups to help identify make, model and body type. Vehicle text or a VIN you enter for a lookup may be sent to this U.S. government service. We do not send your name, phone, email, service address or booking photos with that lookup.
- Google Workspace : our business email. Contact form messages go straight to our Gmail inbox.
- PostHog : website analytics and session recordings. PostHog receives page views, taps, scrolling, quiz steps, and a replay of the visit so we can see where the site is confusing. Anything typed into a form is hidden before it leaves your browser. We never send your name, phone, email, or address to PostHog, and PostHog does not use this information for advertising.
- OpenStreetMap (Nominatim) and Komoot (Photon) : address suggestions on the booking form. The address you type is sent to them to find matches. Komoot is based in Germany, so these lookups may be processed in the EU.

These companies handle information on our behalf under their service terms. We do not rent customer lists or hand records to other businesses for their own marketing. We may disclose information if the law requires it, to protect our rights or someone’s safety, or to a buyer if the business is ever sold, under the same promises in this policy. Information is stored and processed in the United States, except address suggestions, which may be processed in the EU.

If we add another advertising tool, such as a Meta pixel, we will update this page before it goes live.

### How long we keep it

We keep information only as long as we need it for the reasons above, then delete it or strip out anything that identifies you.

| Record | How long we keep it |
| --- | --- |
| Customer and job records in our customer portal or Jobber, including our before and after photos | 3 years after your last service or after your last warranty ends, whichever is later |
| Invoices and payment records | 7 years, for tax and accounting law |
| Photos you submit through the booking form or customer portal, or send by text or email | Saved to your job record if you book. Otherwise deleted within 24 months. |
| Booking requests that never became a job | 24 months |
| Contact form messages and emails | 24 months, unless they become part of a customer record |
| Portfolio images of your vehicle | Until you ask us to stop using them |
| Marketing opt-in and opt-out records | 5 years after your last promotional message, so we can prove consent and honor opt-outs |
| Privacy request records | 24 months, as California law requires |
| Website analytics (Google Analytics) | 14 months |
| Website analytics (PostHog) | 12 months |
| Session recordings (PostHog) | 30 days |

### Deleting your information

You can ask us to delete your information at any time by email or by phone. You do not need an account.

We will erase your information **within 30 days** of confirming the request came from you, and tell our service providers, such as Jobber, to do the same. We keep only what the law requires or allows us to keep, such as invoices for tax records, a record of your request, and information needed to finish a job that is in progress or to prevent fraud. We will tell you what we kept and why.

Once your service record is deleted, we can no longer look up your service history or honor a warranty tied to it. If you want to keep a warranty active, tell us and we will keep only what is needed for it.

### Your privacy rights

California law gives California residents the rights below. We extend them to every customer, wherever you live.

- Know and access : what we collected about you, where it came from, why, and who received it, plus a copy in a format you can take elsewhere
- Delete : as described above
- Correct : fix information that is wrong
- Opt out of sale or sharing : we do not sell personal information. Website analytics and ad measurement cookies still load when you visit; email or call us about your customer record
- Limit use of sensitive information : we do not collect or use sensitive information in a way that triggers this right
- Equal treatment : we will not charge you more, refuse service, or give you worse service for using these rights

**How to make a request.** Email [contact@rotesandroses.com](mailto:contact@rotesandroses.com) or call [(760) 964-3784](tel:+17609643784) . Requests are free, up to twice in 12 months for access requests.

**How we confirm it is you.** We match your name with the phone number or email we have on file, and may text or call that number to confirm. For a copy of specific records, we match one more detail, such as your service address or vehicle. We use what you give us only to verify the request.

**Authorized agents.** Someone can make a request for you with your signed permission. We may still confirm your identity with you directly.

**Timing.** We confirm we received your request within 10 business days and aim to finish within 30 days. If we need more time, up to the 45 extra days the law allows, we will tell you why.

**If we say no.** We explain why. Reply and we will review the decision again. You can also contact the California Privacy Protection Agency at [cppa.ca.gov](https://cppa.ca.gov/) or the California Attorney General at [oag.ca.gov/privacy](https://oag.ca.gov/privacy) .

### Website analytics and ads

When you open a page, Google Analytics, Google Ads measurement cookies, and PostHog (including session recordings) start. A cookie notice explains that and links to this policy. Press Accept to dismiss it. There is no Decline option.

**Tracking across sites.** Google may collect information about your activity on our site over time and across other websites and apps when advertising cookies are set.

You can block or delete cookies in your browser settings. The site still works, but booking progress and some preferences will not be remembered. For your customer record, email or call us.

**Do Not Track and Global Privacy Control.** Those browser signals do not turn off analytics or ad measurement on this site.

### Cookies and browser storage

| Name | Set by | What it does | How long it lasts |
| --- | --- | --- | --- |
| rr-interest, rr-vehicle-family | Us | Remembers the service or city you viewed so booking starts in the right place | 60 days |
| rr-booking-draft | Us (browser storage) | Saves a half-finished booking on your device | Until you submit it or clear your browser |
| rr-city-context | Us (sessionStorage, this tab only; not a cookie or localStorage) | Saves only a city slug, such as escondido, when you open a city page or one of its subpages in English or Spanish. It keeps service and Book Now links on that city by adding ?city=<slug> to links on our site. Those page addresses are seen like any page you visit: by Cloudflare and by analytics. On the booking page it fills in Service address for 9 cities, and that reaches us only if you submit the form. | This tab only, with no expiry date. Cleared when you visit the home page or the Service area page, close the tab, or clear site data |
| rr-cookie-choice | Us | Remembers that you dismissed the cookie notice | 13 months |
| _ga, _ga_* | Google Analytics | Counts visits and how the site is used. Set when you visit. | Up to 2 years |
| _gcl_au, _gcl_* | Google Ads | Links a visit to an ad click and measures whether an ad led to a booking or call. Set when you visit. | 90 days |
| ph_*_posthog | PostHog (cookie and browser storage) | Groups page views and recordings from the same visit. Set when you visit. | 1 year |
| __cf_bm | Cloudflare | Tells people apart from bots | 30 minutes |

The first-party cookies above that we set ourselves (service interest, a half-finished booking, promo status) are necessary for those site features. We do not send them to Google Ads. You can delete or block cookies in your browser settings. The site still works, but it will not remember your booking progress.

### Texts and email

We text and call the number you give us about your request, appointment, payment, and warranty follow-up. We send those texts ourselves or through our scheduling system, Jobber, and its messaging providers. Promotional texts go only to people who check the optional box on the booking form. That box is never required to book.

Message frequency varies. Message and data rates may apply. Reply STOP to any text to opt out, or HELP for help. You can also opt out by phone or email. We honor opt-outs within 10 business days, usually much sooner. Promotional emails include an unsubscribe link.

**No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.** Text messaging opt-in data and consent will not be shared with any third parties, except the providers that deliver our messages.

### Marketing by other businesses

We do not give personal information to other businesses for their own direct marketing. California residents may ask about this under Civil Code section 1798.83 by contacting us below.

### Children

Our services and this site are for adults. We do not knowingly collect information from children under 13, and we do not sell or share information about anyone under 16. If you think a child sent us information, contact us and we will delete it.

### Security

The site runs on HTTPS, only the owner can see customer records, and we do not keep card numbers. No system is perfect. If a breach affects your information, we will notify you as California and federal law require.

### Other formats

Need this policy in another format? Call or email us and we will read it to you or send it in large print. See our [Accessibility](https://rotesandroses.com/accessibility/) page for more.

### Changes to this policy

We review this policy at least once a year and update the date at the top when it changes. If we change how we use information you already gave us in a significant way, we will post the change here before it takes effect.

### Contact

Rotes & Roses, Escondido, California. Email [contact@rotesandroses.com](mailto:contact@rotesandroses.com) or call [(760) 964-3784](tel:+17609643784) . Privacy requests: email or call.

## Ready when you are.

Book online or reach out if you have a privacy question before you schedule.

[Book Now](https://rotesandroses.com/booking/)

[Contact us](https://rotesandroses.com/contact/)