Privacy Policy
This Privacy Policy explains how Shine-N-Drive Ltd collects, uses, stores, shares and protects personal data when you use our websites, membership services, vendor network, customer support services, or marketing channels.Last updated: March 2026
1. Important Information And Who We Are
Shine-N-Drive Ltd is committed to protecting your personal data and respecting your privacy. For the purposes of UK data protection law, Shine-N-Drive Ltd is the controller of your personal data. This means we decide why and how your personal data is processed.
- Legal entity
- Shine-N-Drive Ltd
- Company number
- 17166540
- Registered / trading address
- 17 Manchester Road, Island of Garden, London, E14 3BD
- Privacy contact email
- support@shine-n-drive.co.uk
- Main website
- www.shine-n-drive.co.uk
- Vendor website
- vendors.shine-n-drive.co.uk
You have the right to make a complaint at any time to the Information Commissioner's Office, the UK supervisory authority for data protection issues. We would appreciate the chance to deal with your concerns first, so please contact us before contacting the ICO where possible.
We keep this Privacy Policy under regular review. This version was last updated in March 2026. We may update it when our services, suppliers, websites, vendor network, payment methods, legal obligations or business structure change. Where changes are material, we may notify you by email, website notice, dashboard notice or another appropriate method.
It is important that the personal data we hold about you is accurate and current. Please tell us if your personal data changes during your relationship with us, including your email address, phone number, vehicle registration, vehicle details or membership information.
2. Websites And Services Covered
This policy applies to Shine-N-Drive websites and web-based services, including www.shine-n-drive.co.uk, vendors.shine-n-drive.co.uk, customer forms, vendor forms, membership pages, customer support channels, web dashboards, payment links and any related web pages operated by or for Shine-N-Drive Ltd.
At the date of this policy, Shine-N-Drive does not operate a mobile app. If we introduce an app in the future, we may update this policy to include app-specific processing, device permissions, app store terms and mobile analytics.
3. The Data We Collect About You
We may collect, use, store and transfer the following categories of personal data:
- Identity Data: full name, username or similar identifier where applicable, vehicle registration number and membership identifier.
- Contact Data: email address, phone number, billing contact details and communication details.
- Vehicle Data: vehicle registration, vehicle type, vehicle size category and vehicle-related membership details.
- Membership Data: membership plan, membership status, payment status, renewal information, washes or services used, remaining entitlement, service history and cancellation status.
- Transaction Data: membership payments, refunds, credits, invoice records, PayPal or Stripe payment references, subscription events and records of services supplied. We do not intend to store full card numbers on our own systems.
- Vendor Service Data: vendor used, vendor location, date and time of service, service type, upgrade selections, service notes, verification outcome and service log entries.
- Technical and Device Data: IP address, browser type, operating system, device type, time zone, website interaction data, cookie identifiers, analytics identifiers and pixel identifiers.
- Usage Data: information about how you use our websites, forms, dashboards, payment flows, emails, offers and services.
- Marketing and Communications Data: marketing preferences, communication preferences, waiting list status, referral information, survey responses, social media engagement and support correspondence.
- Location-related Data: approximate location from your browser or device, postcode or area information you provide, selected vendor location and service area preferences. We do not currently require continuous GPS tracking.
For vendors and partners, we may collect business name, owner or manager name, email address, phone number, business address, insurance documents, company details, bank or payout details, service information and pricing information.
We may create aggregated data, such as statistics showing how many members use a specific location, which services are most popular, or how many people join a waiting list in a particular area. Aggregated data does not directly identify you. If we combine aggregated data with personal data so that it can identify you, we treat it as personal data.
We do not intend to collect special category data, such as information about race or ethnicity, religious or philosophical beliefs, health, sexual orientation, political opinions, trade union membership, genetic data or biometric data. We also do not intend to collect criminal conviction or offence data. Please do not provide this information unless we specifically ask for it and explain why it is needed.
4. How Your Personal Data Is Collected
We collect personal data in the following ways:
- Information you give us: when you join the waiting list, complete a form, create an account, register a vehicle, buy or manage a membership, request support, respond to a survey, enter a promotion, send us an email, WhatsApp message, SMS or social media message, or introduce a vendor or partner.
- Information generated through the service: when your membership is checked, a vendor logs a completed service, an upgrade is selected, a refund or complaint is handled, or your membership usage is updated.
- Information from payment providers: such as Stripe or PayPal payment status, invoice status, subscription events, failed payment notices and refund events.
- Information from vendors and partners: such as confirmation that a member attended, a service was completed, an issue occurred, a complaint was raised or an upgrade was requested.
- Information collected automatically: through cookies, analytics, pixels, server logs and similar technologies when you visit our websites or interact with online services.
5. Cookies, Pixels And Analytics
We may use cookies and similar technologies to distinguish you from other users, remember preferences, keep you signed in, understand website performance, improve our service, measure marketing activity and deliver relevant advertising.
Some cookies are necessary for the website to work. Others, such as analytics and marketing cookies, may require your consent depending on how they are used. Where required, we will provide a cookie notice or consent tool allowing you to accept, reject or manage optional cookies.
We currently use or may use the following tools: Google Analytics, Google Ads tracking, Meta Pixel / Facebook Pixel, TikTok Pixel and Softr analytics. We do not currently use Hotjar or Microsoft Clarity. You can also control cookies through your browser settings.
6. How We Use Your Personal Data
We will only use your personal data where the law allows us to do so. The main lawful bases we rely on are consent, performance of a contract, legitimate interests and compliance with a legal obligation.
| Purpose / activity | Data used | Lawful basis |
|---|---|---|
| Register you on the waiting list and send pre-launch updates | Identity, Contact, Marketing and Communications Data | Consent where you opt in; legitimate interests to manage launch demand and enquiries |
| Create and manage your membership account | Identity, Contact, Vehicle, Membership, Technical and Usage Data | Performance of a contract; legitimate interests to operate an efficient membership service |
| Process payments, subscriptions, refunds and failed payment notices | Identity, Contact, Transaction, Membership and payment provider reference data | Performance of a contract; legal obligation for accounting records; legitimate interests to recover sums owed and prevent payment misuse |
| Verify membership with vendors and provide services | Identity, Vehicle, Membership, Vendor Service and Usage Data | Performance of a contract; legitimate interests to prevent misuse and operate the vendor network |
| Record service usage and manage remaining entitlement | Membership, Vehicle, Vendor Service, Transaction and Usage Data | Performance of a contract; legitimate interests to maintain accurate records |
| Manage vendors and partner onboarding | Vendor identity, business contact, company, insurance, service, pricing and payout data | Performance of a contract; legitimate interests to assess vendors and operate the network; legal obligation where applicable |
| Provide customer support and handle complaints | Identity, Contact, Membership, Vehicle, Vendor Service, Transaction and Communications Data | Performance of a contract; legitimate interests to resolve issues and improve service; legal obligation where applicable |
| Send marketing communications | Identity, Contact, Marketing and Communications, Usage, Technical and cookie/pixel data | Consent where required; legitimate interests for certain communications where permitted |
| Measure advertising and website performance | Technical, Usage, Marketing and Communications, cookie and pixel data | Consent where required for optional cookies/pixels; legitimate interests to improve services and campaigns |
| Administer, secure and protect our websites and business | Identity, Contact, Technical, Usage and Communications Data | Legitimate interests for IT security, fraud prevention, administration and business continuity |
| Comply with legal, tax, accounting, regulatory and reporting obligations | Identity, Contact, Transaction, Membership, Vendor and Communications Data | Legal obligation; legitimate interests to establish, exercise or defend legal rights |
Where we rely on legitimate interests, we consider whether our interests are balanced against your rights and freedoms. You may object to processing based on legitimate interests in certain circumstances.
7. Marketing Communications
We may send marketing, launch updates, offers and service information by email, SMS, WhatsApp, phone, social media retargeting or similar channels. We will ask for consent where required by law. You can unsubscribe from marketing at any time by using the unsubscribe option in a message, replying with an opt-out instruction where available, adjusting your preferences, or contacting support@shine-n-drive.co.uk.
We may still send service messages that are not marketing, such as payment notices, account updates, membership changes, service confirmations, security notices, legal updates or responses to your enquiries.
8. Disclosures Of Your Personal Data
We may share personal data with the following categories of recipients where necessary:
- Payment providers: Stripe and PayPal, to process subscriptions, one-off payments, refunds, invoices, payment status updates and related payment support.
- Website and platform providers: Softr and other website, dashboard, hosting, form and user management providers used to operate our services.
- Workflow and data tools: Google Sheets, Zapier, Make and similar tools used to organise membership records, vendor records, service logs, onboarding and operational workflows.
- Communication providers: Gmail / Google Workspace and relevant email, SMS, WhatsApp, phone or customer support systems used to communicate with you.
- Analytics and advertising providers: Google Analytics, Google Ads, Meta / Facebook, TikTok and Softr analytics, where used and where cookie and marketing rules are followed.
- Design and content tools: Canva and similar tools where personal data is included in business materials or communications.
- Vendors and service partners: local car wash and vehicle service providers, where needed to verify your membership, deliver services, log usage, manage upgrades, resolve issues or prevent misuse.
- Professional advisers: accountants, lawyers, bankers, insurers and consultants where needed for business, legal, accounting or insurance purposes.
- Public authorities and regulators: HM Revenue and Customs, the ICO, law enforcement, courts or other authorities where required by law or to protect our legal rights.
- Business transfer parties: third parties involved in any sale, investment, transfer, restructuring, merger, acquisition or financing of our business or assets.
We do not sell personal data to third parties. We will not share your personal data with third parties for their own direct marketing unless you have given consent or the law otherwise permits it.
9. Vendor Data Sharing
When you use a Shine-N-Drive vendor, we only intend to share the information reasonably needed for the vendor to verify your membership and deliver the relevant service. This may include your name, vehicle registration, membership or service status, service entitlement, vehicle size category, selected service and service log details.
Vendors should not use your personal data for unrelated marketing or purposes outside the Shine-N-Drive service unless they have their own lawful basis and provide their own privacy information.
10. International Transfers
Some of our technology, analytics, payment, marketing or support providers may process personal data outside the United Kingdom or European Economic Area. Where this happens, we will take steps designed to ensure your personal data receives an appropriate level of protection. This may include using providers covered by adequacy regulations, recognised transfer mechanisms, standard contractual clauses or other safeguards permitted by data protection law.
11. Data Security
We use appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration or disclosure. These measures may include secure hosting, restricted access, password protection, role-based permissions, supplier due diligence, encryption in transit where supported and procedures for handling customer and vendor information.
Payment card information is processed by Stripe, PayPal or another appointed payment provider. Shine-N-Drive does not intend to store full card numbers on its own systems.
Where you choose a password or receive login credentials, you are responsible for keeping them confidential. Please do not share your password. If you suspect unauthorised access to your account, contact us immediately.
We have procedures to deal with suspected personal data breaches and will notify affected individuals and regulators where we are legally required to do so.
12. Data Retention
We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including to provide the service, manage our relationship with you, comply with legal, accounting and tax requirements, resolve disputes, prevent fraud and establish or defend legal claims.
| Data type | Typical retention approach |
|---|---|
| Waiting list / enquiry data | Kept for up to 24 months unless you become a customer, unsubscribe earlier, or a longer period is needed for dispute, legal or business records. |
| Marketing data | Kept until you withdraw consent, unsubscribe, object to marketing or we decide the data is no longer needed. |
| Membership account data | Kept for the life of your membership and for a reasonable period afterwards for customer support, dispute handling, fraud prevention and audit purposes. |
| Transaction, invoice and payment records | Kept for up to six years after the relationship ends where needed for tax, accounting and legal record keeping. |
| Vendor onboarding and payout data | Kept for the vendor relationship and for up to six years afterwards where needed for tax, accounting, insurance, contract and legal record keeping. |
| Vendor service logs | Kept for the period needed to evidence service delivery, calculate usage, process payouts, handle complaints and prevent misuse. |
| Customer support records | Kept while the issue is active and for a reasonable period afterwards in case of follow-up, complaint, dispute or legal claim. |
| Cookie and analytics data | Kept in line with the applicable cookie duration, analytics configuration and consent settings. |
In some circumstances you can ask us to delete your personal data. We may not always be able to comply where we need to keep the data for legal, accounting, contractual, fraud prevention or dispute resolution reasons. We may anonymise personal data so that it can no longer identify you, and then use it for analytics, research or statistical purposes.
13. Your Legal Rights
Under UK data protection law, you may have the following rights in relation to your personal data:
- Access: to request a copy of the personal data we hold about you.
- Correction: to ask us to correct incomplete or inaccurate personal data.
- Erasure: to ask us to delete personal data in certain circumstances.
- Restriction: to ask us to suspend processing in certain circumstances.
- Portability: to receive certain personal data in a structured, commonly used, machine-readable format.
- Objection: to object to processing based on legitimate interests or to direct marketing.
- Withdraw consent: to withdraw consent where we rely on consent as the lawful basis.
You can exercise these rights by contacting support@shine-n-drive.co.uk. We may need to verify your identity before responding. You will not usually have to pay a fee, but we may charge a reasonable fee or refuse to comply if a request is clearly unfounded, repetitive or excessive.
You have an absolute right to object to direct marketing at any time. If you object, we will stop using your personal data for direct marketing purposes.
14. Children
Our services are intended for people aged 18 and over. We do not knowingly collect personal data relating to children. If we become aware that we have collected personal data from a child without appropriate authority, we will take steps to delete it where required.
15. Third-Party Links
Our websites, dashboards, emails and social pages may contain links to third-party websites, services, payment pages, vendor websites, social platforms or partner offers. Those third parties have their own privacy policies. We are not responsible for their privacy practices, and you should read their privacy information before providing data to them.
16. Glossary
- Consent
- You have given a clear, informed and specific indication that you agree to us processing your personal data for a particular purpose. You can withdraw consent at any time.
- Performance of a contract
- Processing personal data where necessary to provide the membership, services or account features you have requested, or to take steps before entering into a contract with you.
- Legitimate interests
- Our business interests in operating, securing, developing and improving Shine-N-Drive, provided those interests are not overridden by your rights and freedoms.
- Legal obligation
- Processing personal data where necessary to comply with a law or regulatory duty that applies to us.
- Processor
- A supplier that processes personal data on our behalf, such as a hosting, payment, email, analytics, automation or CRM provider.
- Controller
- The organisation that decides why and how personal data is processed.