Privacy Policy

Alpha Wheels is a professional car protection studio based in Lahore, Pakistan, offering Paint Protection Film (PPF), ceramic coating, and car detailing services. In this policy, "we", "us", and "our" refer to Alpha Wheels. "You" refers to any individual who uses our website, makes a booking, or engages with our services.

We collect personal information when you book a service, contact us, or use our website. The types of information we may collect include:

• Full name
• Phone number (including WhatsApp)
• Email address
• Physical address (for doorstep services)
• Vehicle details — make, model, year, and registration number
• Service history and booking records
• Payment records (we do not store card details)
• Photos of your vehicle taken before, during, and after service

We may also collect technical data automatically when you visit our website, including:

• IP address and browser type
• Pages visited and time spent on the site
• Referring website or search query
• Device type (mobile, desktop, tablet)

We collect information through the following means:

• Online booking forms on our website
• WhatsApp and phone conversations
• In-person at our studio during check-in
• Cookies and analytics tools on our website (see Cookies section)
• Social media messages and enquiries

We use the information we collect for legitimate business purposes only. Specifically:

• To confirm and manage your bookings and appointments
• To carry out the services you have requested
• To send appointment reminders and follow-up messages via WhatsApp or SMS
• To maintain service records and vehicle history for warranty purposes
• To process payments and issue receipts
• To respond to enquiries and provide customer support
• To improve our services based on feedback and service history
• To share before/after vehicle photos on our social media or website (see Photography section)
• To comply with legal obligations where required

We process your personal data on the following lawful bases:

• Contract performance — processing is necessary to provide the service you have booked.
• Legitimate interests — to manage our business, maintain service records, and communicate with customers.
• Consent — for marketing messages and photography. You may withdraw consent at any time.
• Legal obligation — where we are required to retain records by law.

We store your personal data securely using password-protected systems. We retain your data only for as long as necessary to provide our services and meet legal requirements.

• Booking and service records are retained for up to 5 years for warranty and legal purposes.
• Vehicle photos are stored securely and may be kept indefinitely for portfolio use unless you request removal.
• Payment records are kept in line with financial record-keeping requirements.
• We do not store credit or debit card information on our systems.
• When data is no longer needed, it is securely deleted or anonymised.

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following limited circumstances:

• With payment processors to complete your transaction securely.
• With product manufacturers (e.g. 3M, XPEL, IGL) where required to register a warranty on your behalf.
• With our website or booking platform providers who process data on our behalf under strict confidentiality agreements.
• With law enforcement or regulatory authorities where we are legally required to do so.
• We will never share your data for advertising or marketing purposes by third parties.

We photograph vehicles before, during, and after service for quality control, portfolio, and marketing purposes.

• Photos may be shared on our Instagram, Facebook, website, or other marketing channels.
• Registration plates are obscured before any public sharing.
• No personally identifying information (name, address) is shared alongside photos.
• If you do not wish for your vehicle to be photographed, please inform us before your appointment begins — we will respect your request.
• You may also request removal of previously published photos by contacting us.

We use WhatsApp as a primary communication channel for bookings, reminders, and customer support.

• By contacting us via WhatsApp, you consent to us responding through the same channel.
• We may send appointment reminders and post-service follow-ups via WhatsApp or SMS.
• We do not send unsolicited marketing messages. If you receive a message in error, please let us know.
• You can opt out of WhatsApp communications at any time by replying "STOP" or contacting us directly.
• WhatsApp messages are subject to Meta's own privacy policy, which is separate from ours.

Our website uses cookies — small text files stored on your device — to improve your browsing experience and help us understand how the site is used.

• Essential cookies — required for the website to function correctly (e.g. booking form, session management).
• Analytics cookies — help us understand visitor behaviour using tools like Google Analytics. Data is anonymised and aggregated.
• Marketing cookies — used to understand the effectiveness of our ads (e.g. Facebook Pixel, Google Ads). These are only active if you consent.
• You can control or disable cookies through your browser settings at any time.
• Disabling certain cookies may affect the functionality of our website.

Our website may contain links to third-party platforms such as Instagram, Facebook, Google Maps, or WhatsApp. Clicking these links takes you away from our website. We are not responsible for the privacy practices or content of those platforms. We encourage you to review the privacy policies of any third-party sites you visit.

You have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in the Contact section.

We will respond to all legitimate requests within a reasonable timeframe. We may need to verify your identity before processing a request.

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from children under the age of 18. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We take reasonable technical and organisational steps to protect your personal data against unauthorised access, loss, or misuse.

• Access to customer data is restricted to authorised staff only.
• Our website uses HTTPS encryption to protect data in transit.
• We do not store sensitive payment information on our systems.
• In the unlikely event of a data breach that affects your rights, we will notify you as required.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on this page, with the "Last updated" date revised accordingly. We encourage you to review this policy periodically.