Privacy Policy

Version 2026-07-21 · Last updated July 21, 2026

This Privacy Policy explains how RJ Auto Detailing LLC ("Splendid Booking," "we," "us") handles personal information in connection with the Splendid Booking platform (splendidbooking.com and its subdomains, the "Service").

1. Two roles: controller and processor

We handle two kinds of personal information differently:

Account data — information about the businesses and admins who sign up (name, email, phone, login credentials, billing details when active). For this we are the controller, and this Policy governs it.
End-customer data — information that our business customers ("tenants") and their end customers submit through a tenant's booking page (e.g., a customer's name, email, phone, service address, appointment details, and any intake answers the tenant configures). For this we are a processor acting on the tenant's instructions. The tenant is the controller and its own privacy notice governs that data. Our handling of it is described in the Data Processing Addendum.

2. Information we collect

From businesses (account data)

Identity & contact: business name, owner/admin name, email, phone.
Account: subdomain, branding, service catalog, settings, hashed password, audit-log activity.
Billing (when active): handled by our payment processor; we do not store full card numbers.
Technical: IP address, request logs, and security events (e.g., failed-login throttling).

On behalf of tenants (end-customer data)

Booking details a tenant's customer enters: name, email, phone, service address (for mobile services), appointment date/time, selected services/options, and tenant-defined intake answers.
Marketing preferences (e.g., opt-out status) for the tenant's reminder emails.

3. How we use account data

To provide, secure, maintain, and improve the Service.
To create and manage your account and authenticate logins.
To send transactional and administrative messages (e.g., the daily booking digest, security and service notices).
To bill you when paid plans are active.
To detect, prevent, and respond to fraud, abuse, and security incidents.
To comply with legal obligations and enforce our Terms.

Where required, our legal bases include performance of a contract, our legitimate interests in operating and securing the Service, consent (where applicable), and compliance with law.

4. How we share information

We do not sell personal information. We share it only with service providers ("subprocessors") that help us run the Service, under contracts that limit their use, and as required by law or to protect rights and safety. Current subprocessors:

Subprocessor	Purpose	Location
DigitalOcean	Cloud hosting (application + database)	USA
Cloudflare	DNS and network/CDN	USA / global
Brevo (Sendinblue)	Transactional & reminder email delivery	EU / USA
Backblaze B2	Encrypted off-site database backups	USA
Stripe	Payment processing (only once paid billing is enabled)	USA

The current list is also maintained in the DPA.

Advertising partners. Separately from the subprocessors above, our marketing site shares limited data with TikTok for ad measurement (see “Cookies & advertising technology” below): page-view events and, on signup, a hashed email/phone. TikTok is not a subprocessor of tenant or end-customer data, and receives nothing from tenants' booking pages or portals.

5. Retention

We keep account data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. End-customer data is retained per the tenant's instructions and the DPA. Encrypted backups follow a rolling retention cycle (currently ~30 days) and age out automatically.

6. Security

We use technical and organizational measures appropriate to the data, including: encryption in transit (TLS/HTTPS); encrypted, access-controlled off-site backups; least-privilege database credentials; tenant data isolation; an administrative audit log; brute-force/login-abuse throttling (fail2ban); and uptime/error alerting. No system is perfectly secure, and we cannot guarantee absolute security.

7. Your choices & rights

Access & export: account owners can export their tenant data from the admin portal at any time.
Correction & deletion: you can edit account information in the portal or request deletion at support@splendidbooking.com. Deletion is subject to legal retention and backup cycles.
Marketing emails: a tenant's end customers can unsubscribe from reminder (marketing) emails using the link in every such email; this does not stop transactional messages for appointments they book.
Regional rights: depending on where you live (e.g., EEA/UK or certain US states), you may have rights to access, correct, delete, port, or object to processing. Contact us to exercise them. End customers should contact the tenant (the controller) first; we will assist the tenant.

8. Cookies & advertising technology

The Service itself uses a single first-party, strictly necessary session cookie to keep you logged in.

Marketing site only: our marketing pages on splendidbooking.com (the landing page, signup page, help center, and these legal pages) load the TikTok Pixel, an advertising measurement tool from TikTok. It uses cookies and similar technologies to measure how our ads perform (for example, whether a visit or signup came from an ad). When a business signs up, we also share the signup email address (and phone number, where provided) with TikTok in hashed form — TikTok's code converts them to a SHA-256 hash in your browser before transmission — to improve ad measurement and matching. TikTok processes this data as described in its own privacy policy.

The pixel does not run on tenants' booking pages, tenant admin portals, or kiosk screens — no end-customer booking data is shared with advertising platforms.

You can opt out of TikTok's personalized advertising in your TikTok account settings (“Ads”), and you can block the pixel with standard browser tracking protections or content blockers, which does not affect the Service. Where regional law requires consent for non-essential cookies (e.g., EEA/UK), we will provide a consent mechanism.

9. Children

The Service is not directed to children under 13 (or the applicable age in your jurisdiction), and we do not knowingly collect their personal information for account purposes.

10. International transfers

We operate in the United States; our subprocessors may process data in the US and elsewhere. Where required, transfers rely on appropriate safeguards.

11. Changes

We may update this Policy. Material changes will be signaled by updating the version and date above and, where appropriate, by additional notice.

12. Contact

Privacy questions or requests: support@splendidbooking.com, RJ Auto Detailing LLC, 10617 Cobblestone Dr, Spotsylvania, VA 22553.