Privacy Notice

This notice explains how Craig Joseph Stenson, who operates BayBoss, handles personal data. Craig Joseph Stenson is the data controller for the account data of shops and their employees. For the customer and vehicle records a shop enters, the shop decides what to collect and we process that data on the shop's behalf to provide the Service.

Data we collect and why

• Account data (name, email, password, shop name, address, phone) — to create and run your account. Legal basis: contract.
• Shop records (customers' names, phone numbers, emails, vehicles, repair orders, photos and videos) — to provide the Service. Legal basis: contract.
• Text messages (phone numbers, message content, opt-out status) — to send and receive customer texts and honor STOP requests. Legal basis: contract and legal obligation.
• Estimate approvals (customer's typed name, decisions, time) — to record customer approval. Legal basis: contract and legitimate interests.
• Support messages — to help you. Legal basis: legitimate interests.
• Technical data (IP address, browser and device info, usage logs) — for security, fraud prevention and improving the Service. Legal basis: legitimate interests.

Who we share data with

• Service providers that host and run the Service, such as cloud hosting and storage, and Twilio for text messaging.
• Paddle, our Merchant of Record, for selling subscriptions, managing subscriptions, payments, tax compliance and invoicing.
• Professional advisers such as lawyers and accountants.
• Authorities where required by law.

We do not sell personal data.

Retention

We keep data while your shop's account is active. After an account closes, we delete or anonymise its data within 90 days, unless we must keep some of it longer by law (for example billing records).

Security

We use appropriate technical and organisational measures to protect data, including encrypted connections, access controls that keep each shop's data private to that shop, and private storage for photos and videos.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. Customers of a shop should contact that shop first. To exercise your rights, email support@baybossshop.live; we respond within 30 days.

Cookies

We use only essential cookies and browser storage needed to keep you signed in and the Service working. We do not use advertising cookies.

Contact

Craig Joseph Stenson — support@baybossshop.live