Legal

Privacy policy

Last updated: May 16, 2026

1. Introduction

All-Pro Auto Reconditioning (“APAR,” “we,” “us,” or “our”) is a Texas corporation with its principal place of business at 5900 Memorial Drive #300, Houston, TX 77007. We operate the website at allprorecon.com(the “Website”).

This Privacy Policy explains what personal information we collect from visitors to the Website, how we use it, who we share it with, how long we keep it, and the rights you have over it. It applies to information we collect through the Website and through related online forms, including our contact form, dealership inquiry form, careers application form, and any email or phone communications you initiate with us.

By using the Website, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Website. We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, provide additional notice.

2. Who this policy covers

This Website serves four primary audiences, and the way we handle information differs slightly for each. The defined terms below are used throughout this policy.

• Personal vehicle customers: Individuals who contact us about auto reconditioning, paint correction, dent repair, detailing, or related services for their personal vehicles.
• Dealership partners:Representatives of automobile dealerships, auctions, or fleet operators contacting us in a business-to-business context. Information collected from dealership representatives in their commercial or employment capacity is generally not “personal data” subject to the Texas Data Privacy and Security Act, but we treat it with the same care described in this policy.
• NASCAR fans and community visitors: Individuals who visit the Website to learn about our motorsports involvement, request information, or sign up for updates.
• Job applicants:Individuals who apply for employment with APAR through the Website’s careers page. Job-applicant information is processed for recruiting and hiring purposes only. Under TDPSA, individuals acting in an employment-application context are not “consumers,” but we still describe our applicant data handling in §§ 4(d) and 8 below.

3. Information we collect

We collect only the information we reasonably need to respond to your inquiry, provide our services, run our careers process, and operate the Website. We do not collect more than this.

3.1 Information you provide directly

When you submit a form on the Website or otherwise contact us, we collect the information you choose to provide, which may include:

• Identifiers: your name, email address, phone number, and (in some cases) mailing address.
• Vehicle information: year, make, model, color, condition, photos you upload, and a description of the service you are seeking.
• Dealership information: dealership or business name, your role at the dealership, fleet size, location, and the volume or type of reconditioning services you are inquiring about.
• Employment application information: if you apply through our careers page, we collect name, contact information, work history, qualifications, certifications, references, and any resume or supporting documents you upload.
• Communications: the content of any message you send us through the Website, by email, or by phone, including voicemails.

3.2 Information collected automatically

When you visit the Website, we automatically collect a limited amount of technical information through cookies and similar technologies:

• Device and connection data: your IP address, browser type, operating system, referring URL, and the pages you view on the Website.
• Approximate location: for the careers page, we use your IP address to estimate your approximate location (city/region level) so we can match applicants to appropriate roles. We do not collect precise geolocation (GPS-level data).
• Analytics data: aggregate information about how visitors use the Website, collected through Google Analytics. We have configured Google Analytics with Google Signals disabled and IP anonymization enabled.

3.3 Vehicle damage photos

The vehicle quote form lets you attach up to four photos of your vehicle so we can assess damage and prepare an accurate quote. Photos are processed in your browser before upload: we resize them and remove any embedded location metadata (GPS coordinates that mobile phones add by default) before they leave your device. The processed photos are stored on Cloudflare R2 with a 90-day automatic deletion policy and are accessed by our team through short-lived signed links sent to our internal quote inbox. Please do not include images of registration cards, insurance cards, or other personal documents. To request earlier deletion of submitted photos, contact info@allprorecon.com.

3.4 Information we do not collect

We do not knowingly collect: Social Security numbers, financial account numbers, government identification numbers, precise geolocation, biometric data, health data, racial or ethnic origin, religious beliefs, sexual orientation, immigration status, or any other category of “sensitive personal data” under the Texas Data Privacy and Security Act or the California Consumer Privacy Act. If you choose to send us any of this information voluntarily, we will not use it for any purpose other than to respond to you, and we will delete it on request.

4. How we use your information

We use the information we collect only for the following purposes:

(a) Responding to inquiries and providing services. We use your contact information and vehicle or dealership details to respond to your inquiry, prepare a quote, schedule service, and provide reconditioning services you request.

(b) Operating the Website. We use technical and analytics data to operate, secure, troubleshoot, and improve the Website, and to detect and prevent fraud or abuse.

(c) Communications. We may use your email address or phone number to send you transactional messages related to a service or inquiry, and (only if you affirmatively sign up) occasional updates about APAR. You can unsubscribe from non-transactional messages at any time.

(d) Recruiting and hiring. We use careers-page application data solely to evaluate you for employment with APAR, communicate with you about the application, and (if you are hired) onboard you. We retain non-hire application materials for one year unless a longer period is required by law.

(e) Legal compliance and protection. We may use or disclose your information as required by law, to respond to lawful subpoenas or government requests, to enforce our Terms of Service, or to protect the rights, property, or safety of APAR, our customers, or others.

We do not use your information for: targeted advertising, profiling that produces legal or similarly significant effects, automated decision-making, the sale of personal data, or any purpose not listed above.

5. Who we share your information with

We share personal information only with the limited categories of service providers and recipients listed below, and only for the purposes described. We do not sell personal data, and we do not share personal data with third parties for cross-context behavioral advertising.

5.1 Service providers

• Website hosting and form processing: Google (Google Workspace, Google Apps Script, and Gmail), which receives form submissions and routes them to info@allprorecon.com.
• Photo storage: Cloudflare R2 (object storage), which stores vehicle damage photos submitted through the quote form. Photos are stored in a private bucket; access is gated by signed links that expire after 7 days, and the bucket is configured to permanently delete objects after 90 days.
• Website analytics: Google Analytics, configured to collect aggregate usage data with Google Signals disabled.
• Email and calendaring: Google Workspace, used to send and receive email and schedule appointments.
• Other service providers: we may engage additional providers (for example, payment processors or e-signature platforms). We require each provider, by contract, to use personal data only for the purpose we engage them for and to protect it.

5.2 Other disclosures

• Legal and safety: we may disclose information in response to a valid legal request, to comply with applicable law, or to protect the rights, property, or safety of APAR, our customers, or others.
• Business transfers: if APAR is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to the protections in this policy.

6. No sale or sharing for advertising

APAR does not sell personal information for money or other valuable consideration, and we do not share personal information with third parties for cross-context behavioral advertising. This is true under both the California Consumer Privacy Act (as amended by the CPRA) and the Texas Data Privacy and Security Act.

Because we do not sell or share:

• We do not engage in “targeted advertising” as defined under TDPSA.
• We do not display TDPSA notices reserved for controllers who sell sensitive personal data or biometric data, because we do not sell either.
• We still provide a Do Not Sell or Share My Personal Information page for the benefit of California and Texas residents, described in § 8.

7. Cookies and similar technologies

A cookie is a small text file stored on your device by your browser. We use a limited set of cookies, organized into the following categories:

• Strictly necessary: cookies required for the Website to function, including for security and basic page navigation. These cannot be disabled.
• Analytics: Google Analytics cookies that help us understand aggregate Website usage. These can be disabled through our cookie banner or by setting your browser to refuse cookies.

We honor Global Privacy Control (GPC) signals. If your browser or extension sends a GPC signal, we will treat it as a request to opt out of any “sale” or “sharing” of your personal information and to opt out of targeted advertising. You can also manage cookie preferences through the banner displayed when you first visit the Website.

Most browsers allow you to refuse or delete cookies. Doing so may affect Website functionality.

8. Your privacy rights

Depending on where you live, you may have specific rights regarding your personal information.

8.1 Texas residents (Texas Data Privacy and Security Act)

If you are a Texas resident, you have the following rights under the Texas Data Privacy and Security Act (Texas Business & Commerce Code Chapter 541):

• To confirm whether we are processing your personal data and to access that data.
• To correct inaccuracies in your personal data.
• To delete personal data we have collected about you.
• To obtain a copy of your personal data in a portable, readily usable format, to the extent technically feasible.
• To opt out of (i) the sale of your personal data, (ii) targeted advertising, and (iii) profiling in furtherance of decisions that produce legal or similarly significant effects. As stated in § 6, we do not engage in any of these activities.
• To appeal our decision on any of the requests above. If we deny your request, we will explain why and tell you how to appeal. If we deny your appeal, we will provide information on how to submit a complaint to the Texas Attorney General.

8.2 California residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended:

• To know what personal information we have collected, used, disclosed, sold, or shared, including the categories of information, sources, purposes, and third parties.
• To access a copy of the personal information we have collected about you.
• To request correction of inaccurate personal information.
• To request deletion of personal information we have collected.
• To opt out of the sale or sharing of your personal information. As stated in § 6, we do not sell or share.
• To limit the use and disclosure of sensitive personal information. As stated in § 3.3, we do not knowingly collect sensitive personal information.
• To not be discriminated or retaliated against for exercising your privacy rights.

8.3 Other states

Residents of other states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, and Utah) may have similar rights. If you are a resident of one of these states, contact us using the methods in § 8.4 and we will honor your request to the extent required by your state’s law.

8.4 How to exercise your rights

You may submit a privacy rights request by any of the following methods:

• Online form: allprorecon.com/privacy-request
• Email: info@allprorecon.com (subject line: “Privacy Request”)
• Phone: (713) 973-8600
• Mail: All-Pro Auto Reconditioning, Attn: Privacy, 5900 Memorial Dr. #300, Houston, TX 77007

We will need to verify your identity before responding. Verification typically requires you to confirm two or more pieces of information you have previously provided to us (for example, your name, email address, and phone number). If you use an authorized agent, the agent must provide written authorization signed by you, and we may also ask you to confirm directly that the agent is authorized.

We will respond to most requests within 45 days. If we need more time, we will let you know in writing and may take up to an additional 45 days (90 days total). Requests are free for up to two per year per consumer; we may charge a reasonable fee for additional or excessive requests. If we deny your request, we will explain why and tell you how to appeal.

9. How long we keep your information

We keep personal information only as long as we need it for the purposes described in this policy, and then we delete it or de-identify it.

After the applicable period ends, we delete the information from active systems and from email and form-submission archives. Backup copies are overwritten on a rolling schedule. If we are required by law to keep information longer (for example, in connection with litigation, tax records, or a regulatory request), we will keep it only for as long as required and then delete it.

10. How we protect your information

We maintain reasonable administrative, technical, and physical safeguards designed to protect the personal information we collect, appropriate to the volume and nature of that information. These include encryption of data in transit, access controls limiting personal data to staff who need it, vendor-management practices for our service providers, and routine review of our security posture.

No system is perfectly secure, and we cannot guarantee the security of information transmitted over the internet. If we become aware of a security incident affecting your personal information, we will notify you and applicable regulators as required by law.

11. Children’s privacy

The Website is intended for a general adult audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it. If you believe a child under 13 has provided us with personal information, please contact us at info@allprorecon.com.

If we ever knowingly collect personal information from a minor under 18 (for example, a job applicant), we will obtain any consents required by applicable law and limit our use of that information to the purpose for which it was provided.

12. Third-party links and services

The Website may contain links to third-party websites or services (for example, social media platforms or NASCAR-related sites). This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party site you visit.

13. Do Not Track signals

Some browsers transmit a “Do Not Track” (DNT) signal. There is no industry consensus on how DNT signals should be handled, and we do not currently respond to DNT signals. We do, however, honor Global Privacy Control (GPC) signals as described in § 7.

14. Visitors outside the United States

APAR operates in the United States, and the Website is intended for users in the United States. If you access the Website from outside the United States, your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. If we make material changes, we will provide additional notice, for example by posting a notice on the Website’s homepage or sending you an email if we have your email address on file. Your continued use of the Website after the effective date constitutes your acceptance of the updated policy.

16. Contact us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

All-Pro Auto Reconditioning
5900 Memorial Drive, Suite 300
Houston, TX 77007
info@allprorecon.com
(713) 973-8600

To submit a privacy rights request, visit allprorecon.com/privacy-request.