Privacy

What we collect and why

This table is our notice at collection. It lists what we collect, where it comes from, why, who receives it, and how long we keep it.

Customer portal and booking photos. When you submit the booking form, your booking details are sent to our customer portal and Jobber. Attached photos are sent to the customer portal, rather than through the Jobber submission. We use them to assess the vehicle and prepare for the requested work. Please avoid including people, identification documents or unrelated personal information in photos. Our retention and deletion rules below also apply to portal records and submitted photos.

Sensitive information. We do not ask for Social Security, driver’s license, or bank account numbers, health information, or precise device location. Card payments are handled by the payment processor. We do not keep full card numbers.

Selling and sharing. We do not sell personal information and have not sold it in the past 12 months. Website activity and cookie IDs may be shared with Google for advertising measurement. We do not knowingly sell or share information about anyone under 16.

Who processes it for us

• Jobber: scheduling, customer records, quotes, invoices, and customer messages
• Cloudflare: website hosting and security
• Google: Tag Manager, Google Analytics, and Google Ads conversion measurement (including Google's Conversion Linker). Our site sends page views, button and phone taps, and booking/contact form completions to Google. We never send your name, phone, email, or address to Google through these tools.
• OpenStreetMap: The homepage and Service Area page load maps of the North County service area. The map tiles come from OpenStreetMap. Those maps do not receive your name, phone, email, or address.
• Google Maps and Places: address suggestions and place details in the booking form. The address text you enter is sent to Google to find matches. This is a booking function, separate from Google Analytics and advertising.
• NHTSA vPIC: vehicle lookups to help identify make, model and body type. Vehicle text or a VIN you enter for a lookup may be sent to this U.S. government service. We do not send your name, phone, email, service address or booking photos with that lookup.
• Google Workspace: our business email. Contact form messages go straight to our Gmail inbox.
• PostHog: website analytics and session recordings. PostHog receives page views, taps, scrolling, quiz steps, and a replay of the visit so we can see where the site is confusing. Anything typed into a form is hidden before it leaves your browser. We never send your name, phone, email, or address to PostHog, and PostHog does not use this information for advertising.
• OpenStreetMap (Nominatim) and Komoot (Photon): address suggestions on the booking form. The address you type is sent to them to find matches. Komoot is based in Germany, so these lookups may be processed in the EU.

These companies handle information on our behalf under their service terms. We do not rent customer lists or hand records to other businesses for their own marketing. We may disclose information if the law requires it, to protect our rights or someone’s safety, or to a buyer if the business is ever sold, under the same promises in this policy. Information is stored and processed in the United States, except address suggestions, which may be processed in the EU.

If we add another advertising tool, such as a Meta pixel, we will update this page before it goes live.

How long we keep it

We keep information only as long as we need it for the reasons above, then delete it or strip out anything that identifies you.

Deleting your information

You can ask us to delete your information at any time by email or by phone. You do not need an account.

We will erase your information within 30 days of confirming the request came from you, and tell our service providers, such as Jobber, to do the same. We keep only what the law requires or allows us to keep, such as invoices for tax records, a record of your request, and information needed to finish a job that is in progress or to prevent fraud. We will tell you what we kept and why.

Once your service record is deleted, we can no longer look up your service history or honor a warranty tied to it. If you want to keep a warranty active, tell us and we will keep only what is needed for it.

Your privacy rights

California law gives California residents the rights below. We extend them to every customer, wherever you live.

• Know and access: what we collected about you, where it came from, why, and who received it, plus a copy in a format you can take elsewhere
• Delete: as described above
• Correct: fix information that is wrong
• Opt out of sale or sharing: we do not sell personal information. Website analytics and ad measurement cookies still load when you visit; email or call us about your customer record
• Limit use of sensitive information: we do not collect or use sensitive information in a way that triggers this right
• Equal treatment: we will not charge you more, refuse service, or give you worse service for using these rights

How to make a request. Email contact@rotesandroses.com or call (760) 964-3784. Requests are free, up to twice in 12 months for access requests.

How we confirm it is you. We match your name with the phone number or email we have on file, and may text or call that number to confirm. For a copy of specific records, we match one more detail, such as your service address or vehicle. We use what you give us only to verify the request.

Authorized agents. Someone can make a request for you with your signed permission. We may still confirm your identity with you directly.

Timing. We confirm we received your request within 10 business days and aim to finish within 30 days. If we need more time, up to the 45 extra days the law allows, we will tell you why.

If we say no. We explain why. Reply and we will review the decision again. You can also contact the California Privacy Protection Agency at cppa.ca.gov or the California Attorney General at oag.ca.gov/privacy.

Website analytics and ads

When you open a page, Google Analytics, Google Ads measurement cookies, and PostHog (including session recordings) start. A cookie notice explains that and links to this policy. Press Accept to dismiss it. There is no Decline option.

Tracking across sites. Google may collect information about your activity on our site over time and across other websites and apps when advertising cookies are set.

You can block or delete cookies in your browser settings. The site still works, but booking progress and some preferences will not be remembered. For your customer record, email or call us.

Do Not Track and Global Privacy Control. Those browser signals do not turn off analytics or ad measurement on this site.

Cookies and browser storage

The first-party cookies above that we set ourselves (service interest, a half-finished booking, promo status) are necessary for those site features. We do not send them to Google Ads. You can delete or block cookies in your browser settings. The site still works, but it will not remember your booking progress.

Texts and email

We text and call the number you give us about your request, appointment, payment, and warranty follow-up. We send those texts ourselves or through our scheduling system, Jobber, and its messaging providers. Promotional texts go only to people who check the optional box on the booking form. That box is never required to book.

Message frequency varies. Message and data rates may apply. Reply STOP to any text to opt out, or HELP for help. You can also opt out by phone or email. We honor opt-outs within 10 business days, usually much sooner. Promotional emails include an unsubscribe link.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties, except the providers that deliver our messages.

Marketing by other businesses

We do not give personal information to other businesses for their own direct marketing. California residents may ask about this under Civil Code section 1798.83 by contacting us below.

Children

Our services and this site are for adults. We do not knowingly collect information from children under 13, and we do not sell or share information about anyone under 16. If you think a child sent us information, contact us and we will delete it.

Security

The site runs on HTTPS, only the owner can see customer records, and we do not keep card numbers. No system is perfect. If a breach affects your information, we will notify you as California and federal law require.

Changes to this policy

We review this policy at least once a year and update the date at the top when it changes. If we change how we use information you already gave us in a significant way, we will post the change here before it takes effect.

Contact

Rotes & Roses, Escondido, California. Email contact@rotesandroses.com or call (760) 964-3784. Privacy requests: email or call.