Privacy notice
This notice explains the information used for Black Haven enquiries, vehicle-care bookings and payment reconciliation.
We collect the contact details and postcode you provide, vehicle registration and lookup details, selected services, requested date and arrival window, quote information, checkout-preparation records, and booking and payment-status records.
Signed-in bookings may be linked to your account and an account vehicle. Guest bookings use the contact and vehicle snapshot supplied for that booking and do not create an account automatically.
We use this information to verify the vehicle, calculate the quote and expected duration, check availability, prepare Stripe Checkout, reconcile payment, manage the provisional appointment and maintain operational history.
OneAuto supports vehicle lookup. Stripe handles Checkout and card payment processing. Supabase provides database and authentication services, and Vercel hosts and protects the application. These services receive only the information needed for their role.
Stripe handles card details directly. Black Haven does not receive or store your full card number.
We use the existing Vercel Web Analytics and Speed Insights services to understand public-page use and performance. We also count clicks from the Vehicle Care package comparison to the exact-price journey and newly acknowledged contact, Exterior Care and Property Care enquiries. These counts are best effort: blocked or unavailable analytics can leave gaps. An enquiry count does not mean a booking or sale.
Our custom events contain only a broad service category and a fixed page-component label. We do not add your contact details, vehicle registration, postcode, messages, quote references, account identifiers or tokens to those events. Acknowledgements are deduplicated temporarily in memory; this measurement adds no persistent customer tracking identifier.
We exclude private or unrecognised routes and pages containing query strings or sensitive referrers from website measurement. Only approved public paths are sent, without query strings or fragments. Analytics failure does not affect your enquiry or booking.
Eligible abandoned checkout-preparation records are normally removed only after they are at least 90 days old and an operator has verified that the associated checkout is expired or unpaid. Attached checkout records require explicit external verification before removal.
Paid and booked records are retained for booking, payment and operational history. They are not removed through the abandoned-checkout process. A requested appointment remains provisional until Black Haven reviews and confirms it.
Access is limited according to operational need. Public booking actions are checked and validated on the server, privileged database operations remain server-only, and payment reconciliation uses signed Stripe webhook events.
You can ask about access to, correction of or deletion of your information. Some records may need to be retained for legitimate booking, payment or operational requirements. Contact Black Haven through the contact form.