Privacy notice
Version 2026-09-26-maintenance
- Controller and contact
- Data and purposes
- Recipients
- AI advice and vehicle illustrations
- Retention
- Your rights
- Security, cookies and changes
1. Controller and contact
Maretti Services (Maretti Car Care), Dutch Chamber of Commerce number 84334738, is responsible for the processing described here. Correspondence: Piet Heinstraat 116, 860, 2501 CW Den Haag, Netherlands. For questions and privacy requests: info@marettidetailing.com or +31 6 87595889. Last updated: 26 September 2026.
2. Data and purposes
We use your name, email, telephone, language preference, account identity, treatment and billing address, business and VAT details, vehicle characteristics and registration to answer enquiries, prepare quotes, perform appointments and manage your account. The legal basis is taking steps at your request before a contract and performing that contract. Automatic vehicle lookup sends the registration to RDW, the Dutch vehicle authority. Automatic address lookup sends only the postcode and house number through our server to the public PDOK address service, without your name, email or account details. Manual entry remains available.
Bookings, treatment history, selections, approval records, work photos, payment status and correspondence support performance, aftercare and complaints. Invoices and necessary accounting records are retained under legal obligations. Essential security information, abuse prevention and audit records support our legitimate interest in a safe and reliable service, with data and access limited to what is necessary. Optional marketing and publication of identifiable customer photographs require separate consent where applicable. We do not sell personal data.
3. Recipients
Head office and your assigned regional provider receive the information required for their work; employees see assigned records. We use Sites infrastructure and Cloudflare for hosting and storage, Supabase for email authentication, Stripe for payments, Resend for service messages and, when enabled, Google for routes and reviews. Stripe processes payment details; My Maretti does not store full card details. External specialists receive only the information needed to assess or perform your requested service.
Providers may process data outside the European Economic Area. Such transfers require a valid transfer mechanism, such as an applicable adequacy decision or appropriate contractual safeguards. Contact us for information about recipients and safeguards applicable to your data. External providers may act as independent controllers for their own statutory obligations.
4. AI advice and vehicle illustrations
When you use the assistant, your messages and relevant selected case information are processed by OpenAI. Access is limited to your customer records or the signed-in employee’s permissions. Do not share passwords, payment card details or unnecessary sensitive information. Answers may be inaccurate; human help is always available. AI does not independently decide your legal rights or change appointments without the required confirmation.
Maretti may generate an illustration for a saved vehicle from characteristics such as make, model, year and colour. It may differ from your car. Assistant conversations are not kept as a separate permanent chat archive in My Maretti; submitted proposals and actions become part of the case record. The external AI provider may retain technical and security records under its own terms.
5. Retention
Our retention policy is to remove or anonymise enquiries that do not result in a contract within twelve months after the last substantive follow-up; keep operational vehicle and appointment information for up to two years after the customer relationship ends unless you request longer retention or a specific warranty, complaint or dispute requires it; and keep work photos for no longer than two years after treatment, except relevant evidence for an ongoing case. Invoices and legally required financial records are normally kept for seven years. Data retained solely for that obligation is not used for marketing.
Maretti reviews deletion and exceptions; this is not a promise that every file is automatically erased on the same day. Current contracts, legal obligations and specific disputes can restrict erasure. Backups and security logs follow necessary recovery and security periods of the infrastructure used. Ask us about the period applicable to your record.
6. Your rights
You may request access, correction, erasure, restriction and, where applicable, portability. You may object to processing based on legitimate interests and always to direct marketing. Consent can be withdrawn for the future without affecting previous lawful processing. Send requests to info@marettidetailing.com. We verify identity appropriately; do not send an unsolicited copy of your identity document.
We normally respond within one month. If a lawful extension is needed, we notify you in time and explain why. You may complain to the Dutch Data Protection Authority or your competent supervisory authority without first complaining to us.
7. Security, cookies and changes
We restrict access by role and assigned record, use encrypted connections and protect accounts and payments through the listed providers. No system is entirely risk-free; report suspected misuse promptly. Our cookie notice explains essential browser storage. Anonymous daily page and booking-button totals do not contain an individual visitor profile. Material changes receive a new published version and affected customers are informed where required.
Route calculations and Google content are also subject to the Google Maps terms and the Google privacy policy.