Privacy policy

Last updated: 16 October 2026

Who we are

The data controller is Ghost Detail Autos, Watford WD18, a sole trader registered in England and Wales. The Ghost Detail apps are built and published on the App Store and Google Play by Hectic Software on behalf of Ghost Detail Autos. Contact for privacy matters: ghostdetaillondon@gmail.com.

What we collect

• Booking and quote requests (website and apps): your name, email address, phone number, car registration, make and model, chosen service, preferred date and time, studio or mobile location (including the area or postcode for mobile work) and any notes you add.
• Customer accounts (where available): your email address, or the identifier and, if you choose to share it, the name and email that Sign in with Apple provides. Your account shows your bookings, saved cars, coating record and Ghost Pass status.
• Help assistant questions: the text you type into the help chat.
• Payments: Ghost Pass memberships are paid on Stripe’s secure checkout pages. We never see or store your card details.
• Emails you send us about a booking.

The apps do not ask for access to your location, contacts, camera, photos, microphone or health data, and contain no advertising, analytics or tracking software.

How we use it

• To quote, confirm, manage and carry out your booking.
• To show your bookings, cars and membership when you sign in.
• To answer your questions, by email or through the help assistant.
• To keep financial records that HMRC requires.

Our lawful bases under UK GDPR are contract (delivering the service you asked for), legal obligation (tax records) and legitimate interest (keeping your service history while you are a customer).

Storage on your device

When you sign in, the apps keep a session token so you stay signed in. On Apple devices it is stored in the Keychain; on Android it is encrypted with a key held in the Android Keystore and excluded from backups. Signing out removes it. Staff sign-in for the Ghost Detail team works the same way.

The help assistant (AI)

The help assistant uses artificial intelligence to answer questions from our published information. Your question is sent to Cloudflare Workers AI to produce a reply, with OpenRouter used as a fallback if Workers AI is unavailable. Replies to general questions may be cached for up to 24 hours so the same question gets the same answer; answers about your own bookings are never cached. Please do not type payment details or other sensitive information into the chat. AI answers can be wrong: we confirm prices and bookings in writing. You can report an answer from the app or by emailing us.

Who we share it with

• Cloudflare: hosts the website and the secure database that stores bookings and accounts, and runs the help assistant.
• Stripe: processes Ghost Pass payments.
• Our email delivery provider: sends booking confirmations and sign-in codes.
• Apple: if you choose Sign in with Apple.
• OpenRouter: only as a fallback for the help assistant, as above.

Some of these providers may process data outside the UK under recognised UK GDPR transfer safeguards. We never sell personal data or share it for advertising.

How long we keep it

• Booking and payment records: 6 years, as HMRC requires.
• Enquiries that do not lead to a booking: deleted after 12 months.
• Your account, saved cars and membership link: until you delete your account.
• Sign-in codes: expire after 10 minutes.
• Cached general help answers: up to 24 hours.

Deleting your account and data

You can delete your account at any time in the app (Account, then Delete my account), or by emailing us. Deletion removes your account, sessions, saved cars and membership link straight away. Booking records are kept for 6 years for HMRC, no longer linked to an account. Full details: Delete your account.

Your rights

• Access: ask for a copy of your data, or download it yourself from your account in the app.
• Rectification: ask us to correct anything wrong.
• Erasure: ask us to delete data we are not legally required to keep.
• Objection: opt out of any non-essential messages.

If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office: ico.org.uk, 0303 123 1113.

Children

Our services, website and apps are for adults aged 18 and over: bookings, accounts and Ghost Pass payments require you to be 18 or older. They are not designed for or directed at children, and the help assistant is not intended for or marketed to children. We do not knowingly collect personal data from anyone under 18, consistent with the UK Age Appropriate Design Code (Children’s Code) and, for users in the United States, the Children’s Online Privacy Protection Act (COPPA). If we learn that we hold data from someone under 18, we will delete it (except any record we are legally required to keep) and close any linked account. If you believe a child has given us data, email ghostdetaillondon@gmail.com.

Changes

We will update this page if anything changes and show the new date at the top. Our terms and mobile service terms are on the Legal page.