Legal
Privacy policy.
Effective 29 September 2026
Step By Step Auto (“Step By Step”, “we”, “us”) is a mobile interior car detailing service based in Toronto, Ontario. This policy explains what personal information we collect when you visit stepbystepauto.pages.dev or book a detail, why we collect it, who we share it with and the choices you have. We handle personal information in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
1. What we collect
When you book a detail, we ask for:
- your first and last name, email address and phone number;
- the address where you want the detail done;
- your vehicle: type (car or SUV / truck), make, model, year and colour;
- the date and time you choose, and any notes you add (for example pet hair or stains);
- if online payment is enabled, the payment status. Card details are entered on Stripe’s secure page and never reach us.
When you browse the website, some information is collected automatically: pages viewed, the steps of the booking you reach, your browser and device type, and your IP address. This happens through the tools described in section 4.
We do not ask for, and do not want, sensitive information such as health or financial details. Please don’t include it in the notes.
2. Why we use it
- to schedule, confirm, carry out, reschedule or cancel your detail;
- to contact you about your booking (confirmations, changes, questions on the day);
- to take payment, when it applies, and keep the records the law requires;
- to understand how the website is used and improve it;
- to measure our advertising on Meta (Facebook and Instagram) and show our ads to people likely to be interested.
We only use your information for these purposes. We do not sell it.
3. Who we share it with
We use a small number of service providers that process information on our behalf, only to provide their service to us:
- Cloudflare — hosts the website and stores booking records.
- Stripe — processes card payments, when online payment is enabled.
- Resend — sends booking confirmation emails, when email is enabled.
- Meta Platforms — advertising measurement (see section 4).
- Google Fonts — delivers the typefaces the website uses; your browser connects to Google to load them.
Some of these providers store or process information outside Canada, including in the United States, where it may be accessible to authorities under local law. We may also disclose information where the law requires it.
4. Cookies and advertising
We use the Meta Pixel, a small piece of code from Meta. It sets cookies (such as _fbp) and tells Meta about visits and about steps of the booking, such as viewing prices, starting a booking and confirming it. When a booking is confirmed, our server also sends Meta a notice of it through the Meta Conversions API. With it we send your email, phone number and name in hashed (encrypted, one-way) form, together with your IP address and browser details, so Meta can match the booking to its users without receiving them in plain text.
Meta uses this to measure our ads and may use it under its own data policy.
Your choices: you can block or delete cookies in your browser settings, use your browser’s tracking protection, and control how Meta uses this information in your Meta ad preferences. You can also opt out of interest-based advertising through the Digital Advertising Alliance of Canada. Blocking cookies does not stop you from booking.
The booking form also keeps your progress in your browser’s session storage, so you don’t lose it if you go back a step. It is cleared when the booking is confirmed or you close the tab.
5. How long we keep it
We keep booking information for as long as we need it to provide the service and to meet our legal, tax and accounting obligations, and then delete it or make it anonymous.
6. How we protect it
The website runs over an encrypted connection (HTTPS). Booking records are stored with our hosting provider and access to them is password-protected and limited to the business. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.
7. Your rights
You can ask us to see the personal information we hold about you, to correct it, or to delete it where we are not required to keep it. You can also withdraw your consent to our use of it, subject to legal or contractual limits; this may mean we cannot complete a booking. Write to us at the address below and we will reply within 30 days.
If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.
8. Children
Our services are for adults. We do not knowingly collect information from anyone under 16.
9. Changes
We may update this policy when our services or the tools we use change. The date at the top shows the latest version.
10. Contact
Step By Step Auto — Toronto, Ontario, Canada
stepbystep.auto@gmail.com