Privacy Policy

Who we are

Levati Car Wash ("we", "us", or "our") is responsible for deciding how and why your personal information is collected and used through our booking service. We are the responsible party for this information in accordance with South Africa's Protection of Personal Information Act, 2013 ("POPIA").

We use Boxhaven, a booking and queue management platform provided by Boxhaven Capital (Pty) Ltd. Boxhaven processes your information on our behalf, strictly under our instructions, as our operator under POPIA. Boxhaven does not use your information for its own purposes.

What we collect

We may collect the following information:

• Your name, phone number, and optionally your email address.
• Vehicle details you provide, including make, model, colour, vehicle type, and registration number.
• Booking and check-in history, payment status, and any notes you choose to add.
• Reviews, ratings, and survey responses that you voluntarily submit.

Why we use it

We use your information to:

• Create and manage your bookings and queue position.
• Process payments and apply credits, vouchers, or discounts.
• Send booking confirmations, reminders, and service updates.
• Provide customer support and respond to enquiries.
• Improve our services using aggregated, non-identifying statistics.
• Comply with legal and regulatory obligations where required.

Who we share it with

We share your information with:

• Boxhaven, our platform operator, who hosts the booking system and processes your information on our behalf, under a written agreement that requires Boxhaven to keep it confidential and secure, and to use it only as we instruct.
• Trusted service providers who help us and Boxhaven deliver the service, such as payment processors, messaging providers, database and hosting providers. These providers may only process information as necessary to perform services on our behalf.

We do not sell your personal information.

Some service providers may process information outside South Africa. Where this occurs, we (and Boxhaven on our behalf) take reasonable steps to ensure appropriate safeguards are in place and that your information receives protection consistent with POPIA's requirements for cross-border transfers.

How long we keep it

We keep booking and account information for as long as your account remains active and as necessary to provide our services. If you request account deletion:

• Financial and transaction records may be retained for up to 5 years or for any period required by applicable law, tax, accounting, or fraud-prevention obligations.
• Other personal information, including vehicle and registration details, will generally be deleted within 90 days of account closure unless a longer retention period is required by law.

You may request deletion of your account and personal information at any time, subject to these legal retention requirements.

How we protect it

We use industry-standard security measures, including encrypted connections, access controls, and secure hosting infrastructure to protect your personal information from unauthorised access, disclosure, alteration, or loss. We never store your card details.

Your rights

Subject to applicable law, you have the right to:

• Request access to your personal information.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information.
• Object to or restrict certain processing activities.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us:

Complaints

If you are not satisfied with how we have handled your personal information or your request, you may lodge a complaint with the South African Information Regulator.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be published within the application and will take effect from the date shown at the top of this policy.