Privacy Notice

A. Categories of Information Collected

Depending on how Customer interacts with Apex, Apex may collect:

1. identifiers and contact information, such as name, telephone number, email address, billing contact details, and service address;
2. booking and commercial information, such as selected services, prices, appointment times, deposits, invoices, transaction status, discounts, and service history;
3. vehicle and property information, such as year, make, model, color, condition, license-plate information when visible, access instructions, parking information, and service-location details;
4. payment-related information, such as payment tokens, processor identifiers, card brand, last four digits, billing status, refunds, disputes, and fraud signals supplied by a processor;
5. communications and content, such as messages, emails, support requests, reviews, uploaded photographs, service instructions, and change-order approvals;
6. service documentation, such as pre-service and post-service photographs or video, inspection notes, condition records, work performed, and damage-claim materials;
7. device, network, and usage information, such as IP address, browser type, device type, operating system, session identifiers, referring page, pages or features used, date and time, approximate location inferred from IP address, and security logs;
8. consent and transaction evidence, such as Agreement version, Privacy Policy version, checkbox state, acceptance text, timestamp, booking identifier, payment identifier, and related audit records;
9. limited operational determinations such as service-area eligibility and transaction fraud indicators. Apex does not use this notice to authorize unrelated profiling.

Apex does not request sensitive information that is unnecessary for booking or providing services. Customer should not submit Social Security numbers, government identification numbers, financial-account passwords, medical records, or other unrelated sensitive information through ordinary booking forms or messages.

B. Sources of Information

Apex may collect information directly from Customer, from a person authorized to book on Customer's behalf, automatically from the device or browser used with the Booking Platform, from payment and scheduling providers, from communications providers, from fraud-prevention tools, and from publicly available or lawfully received sources when reasonably necessary for a booking, service, safety, dispute, or legal obligation.

C. Specific Business Purposes

Apex may use personal information for the following specific purposes:

1. display services, service areas, prices, and availability;
2. create, confirm, modify, reschedule, cancel, and complete bookings;
3. process payments, deposits, refunds, discounts, invoices, and charge disputes;
4. communicate about appointments, access, arrival, vehicle condition, service scope, change orders, completion, payment, and follow-up;
5. identify the vehicle, service location, and authorized customer;
6. perform, document, support, improve, and quality-check services;
7. maintain customer, transaction, tax, accounting, warranty, consent, and dispute records;
8. protect customers, vehicles, property, Apex personnel, accounts, and systems;
9. authenticate users, prevent fraud and abuse, investigate incidents, and enforce this Agreement;
10. troubleshoot, maintain, secure, analyze, and improve the Booking Platform and business operations;
11. comply with law, legal process, insurance requirements, and lawful governmental requests;
12. establish, exercise, or defend legal claims;
13. send marketing only as permitted by law and consistent with any consent required for the communication or content involved.

D. Purpose Limitation and Data Minimization

Apex will collect, use, retain, and disclose personal information only for a clear, specific, and legitimate purpose described at or before collection, for another purpose reasonably compatible with the original purpose, or as otherwise permitted or required by law.

Apex will limit collection to information reasonably necessary and proportionate for the stated purpose. Before any materially different and unrelated optional use, Apex will stop that proposed use, explain the new purpose, and obtain separate affirmative permission. Merely updating this Policy or continuing to use the website is not permission for that unrelated use. Legally required disclosures, security response, and preservation of legal claims remain permitted as described here.

If Apex determines that information is no longer reasonably necessary for the purpose for which it was collected, a compatible business or legal purpose, dispute preservation, security, or a retention duty, Apex will delete, de-identify, or securely dispose of it in accordance with Apex's retention practices and applicable law.

E. Disclosure of Information

Apex may disclose personal information only as reasonably necessary to:

1. service providers and contractors that support hosting, databases, scheduling, payments, communications, analytics, security, fraud prevention, mapping, bookkeeping, customer support, or service delivery;
2. banks, card networks, and payment processors to complete or investigate transactions;
3. insurers, adjusters, professional advisers, accountants, auditors, and legal counsel;
4. law enforcement, courts, regulators, or other parties when Apex reasonably believes disclosure is required or permitted by law, necessary to protect rights or safety, or necessary to investigate fraud or unlawful conduct;
5. a purchaser, successor, lender, or adviser in connection with a proposed or completed merger, financing, sale, reorganization, or transfer of all or part of Apex's business, subject to appropriate confidentiality and legal requirements;
6. another person at Customer's direction or with Customer's consent.

Apex restricts service-provider access to the work assigned, uses confidentiality and security requirements as applicable, and does not authorize unrelated reuse simply because a provider has access. A payment processor may have independent legal, fraud-prevention, or transaction duties described in its own privacy notice. That does not authorize Apex to share data for an undisclosed unrelated purpose. Apex will include required reasonable-security provisions in agreements disclosing covered Illinois personal information.

F. Payment Information

Payment-card details are submitted through the payment processor's secure payment interface. Apex's ordinary booking database stores transaction references and limited metadata, not complete card numbers or card security codes. Do not send card numbers or security codes by text, email, uploaded photograph, or service notes.

G. Cookies, Local Storage, and Analytics

The Booking Platform uses necessary session, security, preference, booking, and payment technologies. Browser or device controls may block or delete certain technologies, which may affect checkout or account functionality. Under this version's launch configuration, Apex does not enable advertising pixels, cross-site behavioral advertising, session replay, or nonessential analytics. Adding these practices requires a revised notice and applicable choices before activation.

Apex does not sell personal information or share it for cross-context behavioral advertising under this version's launch configuration. Disclosures for processing payments or providing booked services remain described above. Apex does not collect biometric identifiers for identifying customers or use customer records to train general-purpose AI models under this Policy. These statements are commitments for this configuration, not a claim about an independent payment provider's separate business practices.

Where applicable law requires consent or an opt-out for nonessential analytics or advertising technologies, Apex will provide the required choice. Apex will not treat an optional vehicle-marketing or likeness-consent checkbox as consent to materially different online tracking unless the checkbox or accompanying notice clearly states that separate purpose.

H. Data Retention

Apex retains personal information for no longer than reasonably necessary for the purposes described in this Policy, including providing services, maintaining transaction and consent records, complying with tax and accounting duties, administering warranties, preventing fraud, resolving disputes, enforcing agreements, and satisfying legal or insurance requirements.

Retention periods may vary by record type. In determining a period, Apex may consider the length of the customer relationship, the sensitivity of the information, the risk of harm, operational need, applicable limitation periods, legal holds, and backup cycles. When retention is no longer justified, Apex will take reasonable steps to delete, de-identify, or securely dispose of the information.

I. Data Security and Incident Response

Apex will use reasonable administrative, technical, and physical safeguards appropriate to the nature of the information and the size and operations of the business. Safeguards may include access controls, limited permissions, secure transmission, vendor controls, software updates, logging, backups, and procedures for responding to suspected incidents.

No internet transmission, storage system, payment system, or security measure is guaranteed to be completely secure. Customer should use reasonable care when submitting information and should promptly notify Apex of suspected account or communication misuse.

If Apex determines that a security incident triggers a legally required notice, Apex will provide notice to affected persons and governmental authorities as required by applicable law.

J. Privacy Choices and Requests

Customer may contact Apex to request access to, correction of, or deletion of personal information, to ask a privacy question, or to withdraw an optional consent. Apex will respond as required by applicable law and may honor additional reasonable requests voluntarily.

Before fulfilling a request, Apex may take reasonable steps to verify identity and authority. Apex may deny or limit a request where permitted by law, including when information must be retained for a transaction, tax or accounting duty, security, fraud prevention, legal claim, another person's rights, or another lawful reason.

Withdrawing optional marketing consent does not affect prior lawful processing, required service communications, non-public service documentation, or records Apex must retain. Because backups and archives are deleted on cycles, information may remain temporarily in restricted backups after deletion from active systems.

Privacy requests may be submitted to:

Email: apexcaremw@gmail.com
Telephone: (224) 573-8806

K. Children's Privacy

The Booking Platform is intended for adults and is not directed to children under thirteen (13). Apex does not knowingly seek to collect personal information online directly from a child under thirteen without legally required authorization. A parent or guardian who believes a child submitted personal information may contact Apex to request review and appropriate deletion.

L. Third-Party Privacy Practices

Payment processors, mapping services, device platforms, social networks, and other third parties may collect information under their own privacy notices when Customer interacts directly with them. Apex's Privacy Notice does not control an independent third party's data practices.

M. Changes to This Privacy Notice

Apex may update this Privacy Notice prospectively to reflect changes in law, vendors, technology, or business practices. Existing privacy commitments continue for information already collected except for lawful security, compliance, and compatible-purpose changes. Materially different and unrelated optional uses require the separate notice and affirmative permission described in subsection D; changing this notice alone does not supply that permission.