1. Scope and contact
This policy explains how the Carservice.hk website and partner portal handle personal data for customers, garages and visitors. For privacy questions or to make a data request, contact [email protected] and identify the request as a privacy enquiry. Our handling of personal data is subject to Hong Kong’s Personal Data (Privacy) Ordinance and applicable requirements.
2. What we collect
Customers provide a name and chosen email address or WhatsApp number to start a request. A published request may contain vehicle details, general district, issue description, budget, photos, quotes, conversations and job status. Garages provide a business name, verified email, password and terms/privacy acknowledgement; phone number is optional. Passwords are stored as hashes. We retain verification/access-token records, account links, notification/language preferences, and records of the policy versions acknowledged. Hosting and security systems may log IP addresses, browser information, timestamps and errors. Conversations may include image attachments shared with the customer and the garage in that thread.
3. Why information is requested
A selected customer contact is required to deliver the private request link and job updates. Garage name, email, password, email verification and the required acknowledgements are needed to establish a participating garage account. Optional phone, vehicle details and photos can improve communication or quoting; omit them where they are unnecessary. Without the required information, we may be unable to create a request or participating account. Provide accurate information and avoid uploading unrelated third-party data.
4. How we use data
We use data to create and link accounts and jobs, deliver private links, publish requests to garages, facilitate questions and quotes, share contact details with a selected garage, maintain job history, manage preferences, investigate misuse, handle support and disputes, and protect the platform. We do not use acknowledgement of this policy as blanket consent for unrelated purposes. New uses that require consent will be explained separately.
5. Who sees a job
An invited, unregistered garage can browse limited summaries such as service category, general district, reference, date and status. It cannot see customer names, email/phone, full issue descriptions, photos or private job-access links. Registered garages can view published request details and photos to prepare a response. Customer contact details are withheld from garages until the customer chooses a garage. Carservice’s authorised operators can access requests and conversations for support and monitoring. Please remove identifying details from photos or descriptions that you do not want participating garages to see.
6. Public summaries and garage information
Public job summaries are shown only when the customer chooses public listing. They do not include customer contact details, descriptions or photos. A separate private invitation board gives invited garages limited summaries without requiring public listing. Customers can see a responding garage’s business name and quote information, and the chosen garage’s relevant contact details. Registering does not give garages permission to reuse customer information for unrelated marketing or to sell it.
7. Service providers and processing locations
We use hosting, database, email-delivery and cloud-storage providers to operate the platform, and WhatsApp/Meta services for customers who choose WhatsApp. Security verification and automated message checks may use additional processors. Job messages may be processed by automated moderation services to identify abuse or contact-detail leakage. These services may process information outside Hong Kong and operate under their own terms and privacy notices. We limit platform access and processor use to what is needed for the stated functions. We may also disclose information where required by law or to address fraud, safety or legal claims.
8. Notifications, cookies and local storage
Customer Settings separates email and WhatsApp notifications, app language and WhatsApp-message language. Garage matching-job alerts are optional; service coverage can be set for those alerts. Account verification, access recovery and essential security messages may be sent where necessary. Platform notification preferences do not subscribe you to unrelated promotional mailing lists. Essential session cookies keep private workspaces signed in and help prevent forged requests. Local storage remembers interface preferences such as List or Cards. These display preferences do not store your password.
9. Security and retention
We use HTTPS, hashed passwords and new verification tokens, session access checks, private job links and role-based access controls. Keep private links confidential; existing job links can grant account/job access. No system is risk-free. We retain records while needed to operate requests/accounts, handle support or disputes, protect against misuse and meet applicable legal obligations. Verification links have stated expiry periods, but expiry does not by itself delete the underlying job or account. We assess retention and deletion requests according to their purpose and applicable obligations; we do not promise immediate deletion of records needed for those reasons.
10. Access, correction and deletion requests
Contact [email protected] to request access to or correction of your personal data, discuss account closure, withdraw optional notification choices or request deletion. We may verify your identity before acting and explain any lawful reason for retaining a record. Use a reference or registered contact to help us locate the account, but do not send your password. Complaints about our data handling can also be raised with Hong Kong’s Privacy Commissioner for Personal Data.
11. Updates
We publish the current version here and identify material changes. Where required for continued garage participation, updated terms and policy acknowledgement are recorded again. This policy covers our platform; external garage communications, repair services, payment arrangements and websites may have their own policies. Version: 2026-10-11-v3. Updated: 11 October 2026.
