Privacy Policy

Version 2026-05-29 · Last updated May 29, 2026

This Privacy Policy explains how RJ Auto and Car Detailing LLC ("Splendid Booking," "we," "us") handles personal information in connection with the Splendid Booking platform (splendidbooking.com and its subdomains, the "Service").

1. Two roles: controller and processor

We handle two kinds of personal information differently:

• Account data — information about the businesses and admins who sign up (name, email, phone, login credentials, billing details when active). For this we are the controller, and this Policy governs it.
• End-customer data — information that our business customers ("tenants") and their end customers submit through a tenant's booking page (e.g., a customer's name, email, phone, service address, appointment details, and any intake answers the tenant configures). For this we are a processor acting on the tenant's instructions. The tenant is the controller and its own privacy notice governs that data. Our handling of it is described in the Data Processing Addendum.

2. Information we collect

From businesses (account data)

• Identity & contact: business name, owner/admin name, email, phone.
• Account: subdomain, branding, service catalog, settings, hashed password, audit-log activity.
• Billing (when active): handled by our payment processor; we do not store full card numbers.
• Technical: IP address, request logs, and security events (e.g., failed-login throttling).

On behalf of tenants (end-customer data)

• Booking details a tenant's customer enters: name, email, phone, service address (for mobile services), appointment date/time, selected services/options, and tenant-defined intake answers.
• Marketing preferences (e.g., opt-out status) for the tenant's reminder emails.

3. How we use account data

• To provide, secure, maintain, and improve the Service.
• To create and manage your account and authenticate logins.
• To send transactional and administrative messages (e.g., the daily booking digest, security and service notices).
• To bill you when paid plans are active.
• To detect, prevent, and respond to fraud, abuse, and security incidents.
• To comply with legal obligations and enforce our Terms.

Where required, our legal bases include performance of a contract, our legitimate interests in operating and securing the Service, consent (where applicable), and compliance with law.

4. How we share information

We do not sell personal information. We share it only with service providers ("subprocessors") that help us run the Service, under contracts that limit their use, and as required by law or to protect rights and safety. Current subprocessors:

Subprocessor	Purpose	Location
DigitalOcean	Cloud hosting (application + database)	USA
Cloudflare	DNS and network/CDN	USA / global
Brevo (Sendinblue)	Transactional & reminder email delivery	EU / USA
Backblaze B2	Encrypted off-site database backups	USA
Stripe	Payment processing (only once paid billing is enabled)	USA

The current list is also maintained in the DPA.

5. Retention

We keep account data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. End-customer data is retained per the tenant's instructions and the DPA. Encrypted backups follow a rolling retention cycle (currently ~30 days) and age out automatically.

6. Security

We use technical and organizational measures appropriate to the data, including: encryption in transit (TLS/HTTPS); encrypted, access-controlled off-site backups; least-privilege database credentials; tenant data isolation; an administrative audit log; brute-force/login-abuse throttling (fail2ban); and uptime/error alerting. No system is perfectly secure, and we cannot guarantee absolute security.

7. Your choices & rights

• Access & export: account owners can export their tenant data from the admin portal at any time.
• Correction & deletion: you can edit account information in the portal or request deletion at support@splendidbooking.com. Deletion is subject to legal retention and backup cycles.
• Marketing emails: a tenant's end customers can unsubscribe from reminder (marketing) emails using the link in every such email; this does not stop transactional messages for appointments they book.
• Regional rights: depending on where you live (e.g., EEA/UK or certain US states), you may have rights to access, correct, delete, port, or object to processing. Contact us to exercise them. End customers should contact the tenant (the controller) first; we will assist the tenant.

8. Cookies

The Service uses a single first-party, strictly necessary session cookie to keep you logged in. We do not currently use advertising or third-party tracking cookies, so no consent banner is required in the US today. If we add analytics or other non-essential cookies, or as required for EEA/UK visitors, we will provide a consent mechanism.

9. Children

The Service is not directed to children under 13 (or the applicable age in your jurisdiction), and we do not knowingly collect their personal information for account purposes.

10. International transfers

We operate in the United States; our subprocessors may process data in the US and elsewhere. Where required, transfers rely on appropriate safeguards.

11. Changes

We may update this Policy. Material changes will be signaled by updating the version and date above and, where appropriate, by additional notice.

12. Contact

Privacy questions or requests: support@splendidbooking.com, RJ Auto and Car Detailing LLC, 10617 Cobblestone Dr, Spotsylvania, VA 22553.