Privacy policy

The controller of data related to the use of buddiesdetail.com is Buddies Detailing Studio sp. z o.o., ul. Stefana Batorego 97, 65-735 Zielona Góra, Poland, KRS 0001192355, NIP 9731114958.

For privacy matters, write to customers@buddiesdetail.com or call +48 780 722 221.

The website loads the Google tag (Google Analytics) with all four Consent Mode signals set to “denied”: analytics_storage, ad_storage, ad_user_data and ad_personalization. The same applies after you choose “Reject”.

In this state Google Analytics does not store cookies or other identifiers in your browser, but it does send Google so-called cookieless pings (Consent Mode’s advanced mode). They contain the fact that a page was viewed, its address, the time, basic technical details of the browser and device, and the consent state. Google receives the device’s IP address in the process. Google may use these signals to model statistics.

Our own analytics does not run until you consent. The Google map is not loaded.

After you choose “Accept”:

• Google Analytics 4 stores the _ga and _ga_* cookies and measures how the website is used (analytics_storage: granted);
• Google advertising technology may measure how well our ads work (ad_storage and ad_user_data: granted); if you came from a Google ad, the Google tag also stores the click identifier in the _gcl_aw cookie;
• ad_personalization stays “denied” — we do not use personalised Google ads or remarketing;
• our own first-party analytics starts (section 4);
• if you came to us from a Google ad, we store the click identifier (section 5);
• the Google map is loaded.

Once you consent, our server records:

• when a session starts and ends, and the active time;
• the pages visited and the sections seen;
• scroll depth and clicks on items such as the phone number, email, Telegram or navigation;
• the referring page, and the source, medium and campaign (from UTM tags, or “google / cpc” for a Google ad click);
• the general device type, browser, operating system, language and country.

The session identifier for this analytics exists only in the memory of the open tab and disappears when it is closed or reloaded. We do not store the full IP address. Page addresses are stored without query parameters. When your browser sends a Do Not Track or Global Privacy Control signal, our own analytics events are not sent.

When you click a Google ad, Google adds a click identifier to the page address: gclid, gbraid or wbraid. If you have consented, we store it in this tab’s session storage (sessionStorage), together with the traffic source and the identifier of your consent receipt. It disappears when the tab is closed or when you withdraw consent.

If you book a visit in that tab, the identifier is attached to the booking. On our server it is stored encrypted in a separate advertising attribution record — apart from the booking itself — linked to the consent record in force when the identifier was captured. The server accepts the identifier only if it finds that consent and it has not been withdrawn.

Our server may tell Google Ads that an ad click led to a booking. We send only:

• the click identifier (gclid, gbraid or wbraid);
• an internal booking reference that contains no personal data;
• the time of the event;
• the value and currency;
• the consent state: consent to sharing data for advertising — yes; consent to ad personalisation — no.

We do not send Google your name, phone number, email address, address, car details or the content of the booking. Nothing is sent if consent was not active when the identifier was captured, or was later withdrawn in that browser.

You consent with the “Accept” button. The “Reject” button is just as easy to reach, and the website works normally without consent. You can change your decision at any time through “Privacy settings” in the footer of every page.

After you withdraw consent: the Consent Mode signals return to “denied”, our own analytics stops, the ad click identifier is removed from the tab’s storage and will not be attached to a new booking, and our server will not send Google information about a booking linked to the withdrawn consent. Google cookies stored earlier stay in your browser until you delete them in its settings. Withdrawal does not affect the lawfulness of processing carried out before it.

We do not recognise you on other devices or in other browsers, so a decision applies to the browser in which you made it.

For every decision — consent, refusal and withdrawal — we store a receipt on our server: a random receipt identifier, the date and time, the banner version and language, the exact banner text of that version, the choice made, the state of the four Consent Mode signals and, for a withdrawal, a reference to the earlier receipt. It contains no IP address, browser details or personal data.

Your choice and the receipt identifier are also stored locally in your browser (localStorage), so that we do not ask on every visit and can link a later booking to the consent in force. The website language setting may be stored locally only to remember your choice.

We run Google Analytics, Google Ads measurement (including reporting a booking), our own analytics and Google Maps on the basis of your consent — Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law.

We keep consent records to be able to demonstrate that consent was given or withdrawn (Art. 7(1) GDPR). Activities necessary for the security and operation of the website are based on our legitimate interest — Art. 6(1)(f) GDPR.

• detailed session and event data from our own analytics — no longer than 180 days; aggregated statistics that cannot single out a session may be kept longer;
• the ad click identifier in the attribution record — deleted 90 days after capture, or earlier if consent is withdrawn; the source and campaign stay with the booking;
• the tab’s session storage — until the tab is closed or consent is withdrawn;
• consent records — for as long as we may be required to demonstrate that consent was given or withdrawn;
• Google cookies — according to Google’s settings (by default _ga up to 2 years, _gcl_aw up to 90 days), unless you delete them sooner.

Google Ireland Limited receives the data described in sections 2, 3 and 5 as the provider of Google Analytics, Google Ads and Google Maps. Google may also process data outside the European Economic Area under the terms Google describes.

How Google uses information from sites that use its services: https://business.safety.google/privacy/. Google’s privacy policy: https://policies.google.com/privacy.

IT infrastructure and hosting providers may also process data, only on our instructions. Authorised administrators, directors and the studio owner have access to the statistics. We do not sell data.

To the extent provided by the GDPR, you may request access to your data, rectification, erasure or restriction of processing, and object to processing based on legitimate interest. Because our own analytics creates no persistent identifier, we may be unable to find a particular session without additional information.

You have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (uodo.gov.pl).

This policy is updated when the way the website works or the legal requirements change. A change to the consent banner text is a new consent version, and we will then ask you again.

The video poster is hosted on our server. The YouTube player does not load until you click “Play video”. This choice applies only to the video and does not enable analytics or advertising measurement consent.

After you click, we load the player from youtube-nocookie.com in privacy-enhanced mode. YouTube (Google) receives technical connection data, including your IP address. You can stop the connection by choosing “Close player”. We do not store your playback choice for your next visit. Google’s privacy policy explains how YouTube processes data.

Meta Pixel runs only with consent under the current banner (from 10 October 2026). Earlier Google-only consent does not activate Pixel. Before consent, after refusal, or with Do Not Track / Global Privacy Control, we do not load the Meta script or send these events. Withdrawal stops future events; it does not recall data already sent.

Public Detailing pages and opening a booking link for either campaign package report PageView; offer pages also report ViewContent. We do not track subsequent form steps or sign-in. A phone, email or WhatsApp click is a secondary ContactClick, not a confirmed conversation or lead. Schedule is sent only after our server confirms a booking of the 397 zł or ceramic 1999 zł package. A booking is not a purchase or payment; we do not send Purchase. An event identifier prevents counting the same booking twice.

Meta receives connection technical data (including IP address and browser), page address and referrer, _fbp / _fbc cookie and ad-click identifiers, event name, offer code and a random internal booking identifier. We do not send form fields: name, phone, email, registration plates or car details. Automatic events and Advanced Matching are disabled. We do not measure client cabinet or Showroom activity and do not create remarketing lists.

Measurement is based on consent. Pixel uses _fbp and, after an ad click, _fbc cookies (usually up to 90 days); you can delete them in browser settings. Our deduplication record in sessionStorage disappears when the tab closes. This integration runs in the browser; we do not send events from our server to Meta through Conversions API.

The recipient is Meta Platforms Ireland Limited. Meta may associate events with a Facebook or Instagram account and use them under its own policies, including for advertising systems; Google Consent Mode does not control this processing. Data may be processed outside the EEA. Meta policies and transfer information: https://www.facebook.com/privacy/policy/. Off-site activity settings: https://www.facebook.com/off_facebook_activity/.