Privacy Policy

How Mac's Auto Repair and Towing collects, uses, and protects your information when you use our website and services.

Last updated: May 29, 2026

1. Introduction

Mac's Auto Repair LLC ("Mac's," "we," "us," or "our"), doing business as Mac's Auto Repair and Towing, respects your privacy. This Privacy Policy explains what personal information we collect through our website at https://macs-autorepair.com (the "Site"), how we use and share it, and the choices available to you.

This policy applies to visitors and customers who interact with our Site, submit forms, call or text us, or receive communications related to appointments and services. It does not apply to third-party websites or services you reach through links on our Site (such as financing partners), which have their own policies.

By using the Site or submitting information to us, you acknowledge this Privacy Policy. If you do not agree, please do not use the Site or submit personal information.

2. Information We Collect

We collect information in three main ways: (a) information you provide directly, (b) information collected automatically when you use the Site, and (c) information from service providers and public sources where permitted.

  • Contact form: name, email address, phone number (optional), subject, and message content.
  • Appointment request form: name, email, phone number, vehicle year/make/model/trim, VIN (optional), service requested, preferred date and time, priority level, wait-or-drop-off preference, coupon code (optional), notes, and photos you upload of your vehicle or issue.
  • Returning-customer lookup: when you enter email and phone on the appointment form, we may match prior appointment records to pre-fill vehicle information (first name and prior vehicles only).
  • Phone calls and in-person visits: information you share when scheduling, authorizing repairs, or paying for services.
  • Communications: records of emails and text messages we send or receive related to appointments, reminders, confirmations, and customer service.
  • Financing inquiries: if you choose to apply for financing through EasyPay or another partner, you leave our Site and provide information directly to that provider under its privacy policy.

3. Information Collected Automatically

When you browse the Site, we and our analytics partners may automatically collect certain technical and usage information, including:

  • IP address, browser type, device type, operating system, and language settings.
  • Pages viewed, links clicked, time on page, referring URL, and general interaction events.
  • Session identifiers stored in sessionStorage to group page views within a visit.
  • Appointment form drafts stored locally in your browser (localStorage) until you clear them or submit the form.
  • Google Analytics 4 (GA4) cookies and similar technologies that measure traffic and conversions (e.g., form submissions, phone clicks).
  • Microsoft Clarity session analytics (only if you accept analytics cookies) that may record clicks, scrolling, and page interactions to help us improve the Site. Sensitive fields such as form inputs should be masked in Clarity settings.
  • Google Maps embed cookies and telemetry when you interact with embedded maps on our Site.

4. Cookies & Similar Technologies

Cookies are small text files stored on your device. We use cookies and similar technologies for essential Site functionality, analytics, and to improve user experience.

Essential / functional: session identifiers for first-party analytics, form draft persistence in localStorage, and (for staff only) authentication cookies for our admin portal.

Analytics: Google Analytics 4 helps us understand how visitors use the Site. Google may set cookies such as _ga and _ga_* and process data according to Google's policies. You can learn about Google Analytics opt-out at https://tools.google.com/dlpage/gaoptout. If you accept analytics cookies, we also use Microsoft Clarity for heatmaps and session replays; Microsoft's privacy statement applies: https://privacy.microsoft.com/privacystatement.

You can control cookies through your browser settings. Blocking cookies may affect Site features such as saved appointment drafts. We do not currently respond to "Do Not Track" browser signals because there is no uniform industry standard.

5. How We Use Your Information

We use personal information for legitimate business purposes, including:

  • Processing and responding to appointment requests, contact inquiries, and service questions.
  • Sending appointment confirmations, reminders, status updates, and related customer service messages by email and SMS.
  • Decoding VINs through the U.S. NHTSA public VIN API to verify vehicle details you provide (only the VIN is transmitted to NHTSA).
  • Storing uploaded vehicle photos in secure cloud storage so our team can review your request.
  • Operating, maintaining, securing, and improving the Site and our internal systems.
  • Analyzing Site usage and marketing performance through GA4, Microsoft Clarity (with consent), and first-party analytics.
  • Detecting fraud, abuse, spam, and unauthorized access (including rate limiting by IP address).
  • Maintaining business records, audit logs, and compliance with applicable law.
  • Communicating about specials or service information where permitted and where you have not opted out.

7. How We Share Information

We do not sell your personal information. We do not share it for cross-context behavioral advertising. We share information only as described below:

  • Service providers who process data on our behalf under contract, including website hosting (Vercel), database and file storage (Supabase/PostgreSQL), transactional email (Resend), SMS delivery (Twilio), and analytics (Google, Microsoft Clarity). These providers may access information only to perform services for us.
  • Google services: Analytics, Maps embeds, and (server-side) Google Places API to display public Google review information. Google's privacy policy applies to their processing: https://policies.google.com/privacy.
  • Microsoft Clarity (with your consent): session replay and heatmap analytics. Microsoft's privacy statement: https://privacy.microsoft.com/privacystatement.
  • U.S. NHTSA VIN Decoder API when you submit a VIN on an appointment request.
  • Financing partners such as EasyPay when you voluntarily navigate to their application site.
  • Professional advisors (lawyers, accountants) when necessary and under confidentiality obligations.
  • Law enforcement, regulators, or others when required by law, subpoena, court order, or to protect rights, safety, and security.
  • Successors in the event of a merger, acquisition, or sale of assets, subject to this policy or notice to you.

8. Email & Text Messages (TCPA / CAN-SPAM)

When you submit an appointment request and provide your phone number, you consent to receive appointment-related text messages (confirmations, reminders, scheduling updates) from us at that number. Message frequency varies. Message and data rates may apply.

Reply STOP to cancel text messages from us. Reply HELP for help. We may also send transactional and service-related emails to the address you provide.

Marketing emails, if any, will include an unsubscribe link. Transactional messages about your appointment or service may still be sent even if you opt out of marketing.

9. Data Retention

We retain personal information only as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law.

  • Appointment and contact records: typically retained for up to seven (7) years for customer service, warranty, tax, and legal record-keeping, unless deletion is requested and not prohibited by law.
  • Uploaded appointment photos: retained while relevant to your service request and associated records, then deleted or archived according to our internal schedule.
  • Analytics and page-visit logs: retained in aggregated or identifiable form for operational reporting, generally up to twenty-four (24) months unless a shorter period is configured.
  • Server and security logs (IP address, user agent): retained for fraud prevention and security, typically up to twelve (12) months.
  • Admin and audit logs: retained for security and accountability while accounts are active and for a reasonable period thereafter.

10. Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information, including HTTPS encryption in transit, access controls on admin systems, role-based permissions, and rate limiting on public APIs.

No method of transmission or storage is 100% secure. You use the Site at your own risk. Please use strong passwords for any accounts we provide and notify us promptly if you suspect unauthorized access.

11. Your Privacy Rights & Choices

Depending on where you live, you may have rights regarding your personal information. We honor applicable requests subject to identity verification and legal exceptions.

  • Access & portability: request a copy of personal information we hold about you.
  • Correction: request correction of inaccurate information.
  • Deletion: request deletion of information we collected online, subject to exceptions (e.g., open service records, legal holds).
  • Opt-out of marketing emails: use the unsubscribe link or contact us.
  • Opt-out of marketing texts: reply STOP or contact us.
  • Limit use of sensitive information: we do not use sensitive personal information for purposes requiring opt-out under applicable state laws.
  • Non-discrimination: we will not discriminate against you for exercising privacy rights.

12. California Residents (CCPA / CPRA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act, as amended by the CPRA, including the right to know categories and specific pieces of personal information collected, the right to delete, the right to correct, and the right to opt out of sale or sharing (we do not sell or share personal information for cross-context behavioral advertising as defined by California law).

To submit a request, email us at the address in Section 16. We will verify your request using information associated with your prior interactions (e.g., email or phone on file). You may designate an authorized agent with written permission. We respond within the timeframes required by law.

Shine the Light: California Civil Code § 1798.83 permits California customers to request certain information about disclosure of personal information to third parties for direct marketing. We do not disclose personal information to third parties for their direct marketing purposes.

13. Other U.S. State Privacy Rights

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with comprehensive privacy laws may have similar rights to access, delete, correct, and opt out of certain processing. Contact us using the information below to exercise applicable rights.

Florida consumers: we comply with applicable Florida data breach notification and business record requirements. We do not currently meet thresholds that would make us subject to the Florida Digital Bill of Rights as a "controller," but we apply the practices described in this policy regardless.

14. Children's Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it promptly.

16. International Visitors

Our business is located in the United States and our Site is intended for U.S. users, primarily in Florida. If you access the Site from outside the U.S., you understand that information may be processed and stored in the U.S. where laws may differ from your jurisdiction.

17. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be posted on this page. Continued use of the Site after changes constitutes acceptance of the updated policy.

18. Contact Us

For privacy questions, rights requests, or concerns about this policy, contact:

Mac's Auto Repair LLC d/b/a Mac's Auto Repair and Towing 1620 George Jenkins Blvd, Lakeland, FL 33815 Phone: (863) 399-5744 Email: info@macs-autorepair.com Website: https://macs-autorepair.com/privacy

We will respond to verified requests within a reasonable time and as required by applicable law.

See also: Terms of Use · Contact Us