Privacy Policy

DuPage Auto & Truck Repair is the data controller responsible for the processing of your personal data on this website. For any privacy-related inquiries, data controller requests, or to exercise your rights under the GDPR or CCPA/CPRA, please contact us through our contact page or submit a data request form.

This policy is designed to comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and other applicable data protection laws. Where laws conflict, the most protective provisions apply.

When you use our website, we may collect the following types of information:

• Contact Information: Name, email address, phone number, and vehicle details you provide through our contact forms, booking requests, or fleet signup.
• Usage Data: Pages visited, time spent on pages, referral URLs, browser type, and IP address.
• Cookies & Local Storage: See our cookie policy below for details.

We use the collected information to:

• Respond to your inquiries, schedule service appointments, and provide requested information.
• Improve our website performance and user experience.
• Send promotional offers and updates, if you have opted in.
• Comply with legal obligations and prevent fraudulent activity.

We do not sell, trade, or rent your personal information to third parties.

We use cookies to enhance your browsing experience and analyze website traffic. Cookies are small text files stored on your device.

• Essential Cookies: Required for the website to function properly. These cannot be disabled.
• Preference Cookies: Remember your settings and preferences for a better experience.
• Analytics Cookies: Help us understand how visitors interact with the website so we can improve it.

You can manage or disable cookies through your browser settings. See the cookie consent banner at the bottom of the page to manage your preferences.

We process your personal data on the following legal bases:

• Consent: For newsletter subscriptions and marketing communications, we rely on your explicit opt-in consent, which you may withdraw at any time.
• Contract: For service bookings, fleet signups, and quote requests, processing is necessary to fulfill our contract with you.
• Legitimate Interest: For website analytics and service improvement, we use legitimate interest as the legal basis.
• Legal Obligation: Where required by law (e.g., tax records, regulatory compliance), we process data to meet legal obligations.

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. Your data is stored on secure servers with restricted access and encryption.

We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected:

• Contact Messages & Quote Requests: Retained for up to 2 years after resolution, then permanently deleted.
• Newsletter Signups: Retained while you remain subscribed. Upon unsubscribe, your email is marked as unsubscribed and deleted after 30 days.
• Fleet Account Data: Retained while your fleet account is active. Upon account closure, data is deleted within 30 days.
• Data Requests: Retained for 3 years for audit purposes, then permanently deleted.

DuPage Auto & Truck Repair does not sell, rent, or share your personal data with third parties for marketing or commercial purposes. We do not engage in targeted advertising based on your personal information.

Under the CCPA/CPRA, you have the right to opt out of the sale or sharing of your personal data. Since we do not sell or share your data, no opt-out action is required. If you wish to verify or request deletion, use our data request form.

Your personal data may be processed by servers and service providers located outside your state or country of residence. By submitting your information, you acknowledge that your data may be transferred to and stored in regions outside your jurisdiction, subject to applicable data protection laws.

If you are a resident of the European Economic Area (EEA), the GDPR provides certain rights regarding the transfer of your data outside the EEA. Contact us via our data request form for more information.

Our newsletter signup requires explicit opt-in consent. We do not subscribe you to marketing emails without your active permission:

• Consent: You must check the consent box on the signup form before submitting. Pre-checked boxes are not used.
• Data Stored: We store your email address, a timestamp of your opt-in, and the consent text you agreed to. No additional profiling or behavioral tracking data is collected.
• Frequency: You can expect approximately 1–4 emails per month containing seasonal specials, maintenance reminders, and exclusive offers.
• Withdrawal of Consent: You may withdraw your consent at any time. Use our unsubscribe page or the unsubscribe link in any email. Your email is marked as unsubscribed immediately and you will receive no further marketing emails.
• No Sale: We do not sell, trade, or share your email address with third parties for marketing purposes.

Our website is not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16 without verifiable parental consent, as required by the GDPR and applicable laws.

If you are a parent or guardian and believe we have collected data from your child without consent, please contact us via our data request form to request deletion.

You have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Correction: Request that we correct any inaccurate or incomplete information.
• Deletion: Request that we delete your personal data, subject to legal retention requirements.
• Opt-Out: Unsubscribe from marketing communications at any time via our unsubscribe page or the link in any email.

To exercise any of these rights, please contact us through our contact page or use our data request form.

We may use third-party service providers (such as analytics and hosting providers) to help us operate our website. These providers are committed to keeping your information confidential and are only permitted to use your data for the purposes we have disclosed in this policy.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.