Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you contact us by phone, web form, text message, or in person, we may collect:

• Your name, phone number, and email address
• Vehicle information (year, make, model, VIN)
• Service requests and appointment details
• Billing and payment information (processed securely through third-party payment processors)

1.2 Information Collected Automatically

When you interact with our automated communication system, we may collect:

• SMS and text message conversations between you and our automated or live representatives
• Call recordings when calls are handled by or routed through our AI-powered phone system
• Date, time, and duration of communications
• Device type and general location (city/state) when you visit our website

1.3 Automated Communications

C&D Automotive uses an AI-powered CRM platform provided by Afterburner Systems LLC to respond to inquiries, schedule appointments, send service reminders, and request reviews. This system may:

• Send automated SMS messages to your phone number in response to your inquiry
• Place automated voice calls to follow up on missed calls or service requests
• Log and store transcripts and summaries of those communications

2. How We Use Your Information

We use the information we collect to:

• Schedule and confirm service appointments
• Respond to your inquiries and service requests
• Send appointment reminders, follow-up messages, and review requests
• Process payments for services rendered
• Improve our customer service and business operations
• Comply with legal and regulatory obligations

3. Call & SMS Recording Disclosure

In compliance with Colorado law (C.R.S. § 18-9-303), we disclose that:

• Phone calls handled through our AI voice system may be recorded
• SMS conversations may be logged and stored for quality and service purposes
• By continuing a conversation after this disclosure, you consent to recording and logging

Colorado is a one-party consent state for call recording. We disclose our recording practices as a matter of transparency.

4. How We Share Your Information

We may share your information only in the following limited circumstances:

• Service providers: We share data with Afterburner Systems LLC, which operates our CRM and communication infrastructure. They process data on our behalf and are contractually prohibited from using it for other purposes.
• Payment processors: Payment information is handled by PCI-compliant third-party processors. We do not store full card numbers.
• Legal compliance: We may disclose information if required by law, court order, or to protect the rights and safety of our business or customers.
• Business transfer: In the event of a merger or sale of our business, customer data may be transferred as part of that transaction.

5. Data Retention

We retain customer contact and service records for a minimum of three (3) years to support warranty claims, service history, and legal compliance. Communication logs and call recordings are retained for up to twelve (12) months unless a longer period is required by law.

You may request deletion of your personal data by contacting us in writing. Requests will be processed within 30 days to the extent permitted by law.

6. Your Rights — Colorado Privacy Act (CPA)

Under the Colorado Privacy Act (C.R.S. § 6-1-1301 et seq.), Colorado residents have the right to:

• Know what personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Opt out of certain data processing activities
• Obtain a copy of your data in a portable format

To exercise these rights, contact us at [email protected] or (719) 374-4050. We will respond within 45 days as required by the CPA.

7. Data Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, or loss. Our CRM provider, Afterburner Systems LLC, maintains industry-standard security practices for all data processed through their platform.

No method of electronic transmission or storage is 100% secure. While we take data protection seriously, we cannot guarantee absolute security.

8. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will post the updated policy on our website and update the effective date. Continued use of our services after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

Questions about this Privacy Policy or how your data is handled?