Privacy policy

1. Who processes your data

AvtoTexnik is responsible for processing your personal data. For any questions about this policy, contact us:

• Email: salam@avtotexnik.az
• Phone: +994 00 000 00 00

2. What data we collect

• Booking form: your name, phone number, car make and model, the service you choose and your preferred time.
• Customer account: when you register, your name and phone number; to sign in, an SMS verification code (not the code itself, only its encrypted fingerprint, and only briefly); the cars you add in the account (make, model, year, plate), the car you have selected, your bookings and notification choices.
• Sign-in and devices: for the list of open sessions, the device and browser type, sign-in time and IP address; this is for the security of your account and to prevent abuse.
• Payment cards: if you add a card in the account, only the card brand, the last 4 digits, the expiry, the holder's name and the payment provider's token are kept. The full card number and the CVV/CVC code are never stored on our servers or in our database.
• Direct contact: information you give us by phone, WhatsApp or email.
• During service: vehicle identification data (such as the VIN), diagnostic results and a record of the work done.
• Technical data: IP address, browser type and time of visit, logged automatically on our hosting provider's servers.

3. How we use your data

• to contact you and agree on a visit time;
• to provide diagnostics and repair services, keep your service history and honour the warranty;
• to let you sign in to your account, to protect it and to prevent abuse (the number of SMS codes and check attempts is limited);
• to show your service history, bookings, balances and warranties in the account and to tell you how a repair is going;
• to keep your payment cards in the account and let you pay a balance;
• to keep the website secure and working properly;
• to meet obligations set by law.

We don't send you advertising messages without your consent. You can manage account notifications in settings; the only SMS we send are sign-in and verification codes.

4. Legal basis

By sending the booking form, registering an account or contacting us, you consent to your data being processed for the purposes set out in this policy. Once a service is provided, data is also processed to carry out our service relationship and to meet our legal obligations.

5. Who we share it with

We don't sell your personal data or share it with third parties for advertising. Data may only reach others in these cases:

• Technical providers: the website, the database and the technical logs are stored on the servers of hosting and cloud providers.
• SMS provider: to deliver sign-in and verification codes, your phone number and the text of the code are passed to our SMS provider.
• Payment provider: when card payment is connected, the card details will be received directly from your browser by the payment provider; only the provider's token stays with us. For now the system runs in demo mode and no real payments are made.
• Channels you choose: when you use services such as WhatsApp or Google Maps, those companies' own privacy rules apply.
• Legal requirements: to competent authorities where required by law.

6. How long we keep it

• Booking requests that don't lead to a service are kept for no more than 12 months.
• Service history and warranty records are kept for the warranty period and as long as the law requires.
• An account is kept until you delete it. You confirm a deletion request in settings with an SMS code; after 14 days the account, the cards you added and your choices are deleted, and if you sign in again in that time the deletion is cancelled. An account can't be deleted while there is an open order, an unpaid balance or an active booking.
• You can remove the payment cards you added yourself at any time.
• SMS codes are kept briefly, sessions are deleted when they expire, and sign-in and security logs are kept for up to 13 months.
• After that, data is deleted or anonymised; service records the law requires us to keep are the exception.

7. Cookies

The website does not use advertising cookies; it applies only the technical means it needs to work: a security cookie that keeps your session when you sign in to the account (not readable by JavaScript, removed when you sign out), a small flag that you are signed in, and your choices such as language and theme. General visit statistics are collected with a tool that uses no cookies and can't identify you. External links on the site (such as Google Maps and WhatsApp) have their own cookie and privacy rules.

8. Keeping your data safe

Data is sent over an encrypted connection (HTTPS), and only staff who need it for their work can access it. The account has no password: you sign in with a one-time SMS code sent to your phone, the number of attempts and how often codes can be requested are limited, and codes are stored in the database only as an encrypted fingerprint. The session key is kept in a cookie that JavaScript can't read and is checked on every request; in settings you can sign out of all devices at any time. Every account action checks again that the data is yours. Card numbers and CVV codes are not stored; card details are checked only on your device. No transmission over the internet is completely secure, but we take reasonable measures to protect your data.

9. Your rights

At any time you can:

• find out what data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data;
• withdraw your consent.

In the account you can change or remove your name, phone number (with an SMS code), cars, notification choices and payment cards yourself, and ask for the account to be deleted in settings. For anything else, email salam@avtotexnik.az. Withdrawing consent does not affect the lawfulness of processing carried out before it.

10. Changes

We may update this policy from time to time. The updated version is published on this page with a new date. Rules for using the website and our services are set out in the Terms of use.