Privacy Policy

Crown America Car Wash

Privacy Policy

Effective Date: September 10, 2025 

Last Updated: September 29, 2025 


1.  Preface

Crown America Car Wash (“we,” “our,” or “us”) values your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website https://www.crownamericacarwash.com and when you interact with our services. 


Several States in the United States have passed privacy laws which may provide some or all of the following rights:  


  • Right to confirm whether we are processing your personal data and the right to access such data; 
  • Right to correct inaccuracies in personal data; 
  • Right to delete personal data (subject to certain limitations); 
  • Right of data portability (ability to obtain and reuse personal data across different services or platforms); 
  • Right to opt out of targeted advertising; 
  • Right to opt out from the sale of personal data; 
  • Right to opt out from our processing sensitive personal data; 
  • Right to opt out from profiling and automated decision-making that produce legal or similarly significant effect; 
  • Right to designate an agent to submit request on my behalf; 
  • Right to appeal a decision regarding my rights request;


While many of these rights are self-explanatory, some are not as obvious. For instance, some US privacy laws define “sale” broadly to include disclosing personal data to our advertising providers for targeted advertising, through our use of cookies and other online tracking technologies. To learn more about “cookies,” please visit our Privacy Policy section titled “Other Privacy Disclaimers.” If you would like to opt out of targeted advertising or the sale of personal data as it is legally defined in some of these laws, please review the “How to Exercise Your Rights” section within the Privacy Policy.   


For California residents, the California Consumer Privacy Act (”CCPA”)  requires us to provide our California consumers with a privacy policy that contains a comprehensive description of our online and offline practices regarding our collection, use, sale, sharing, and retention of their personal information, along with a description of the rights they have regarding their personal information. This Privacy Policy provides the information the CCPA requires, together with other useful information regarding our collection and use of personal information. Any terms defined in the CCPA have the same meaning when used in this policy. 


2.   Who We Are

Our website address is: https://www.crownamericacarwash.com. 

We are a California-based car wash providing vehicle cleaning and detailing services. 


3.  What Personal Data We Collect

We collect and use information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“personal information”). Personal information does not include: 

  • Publicly available information, including from government records, through widely distributed media, or that the consumer made publicly available without restricting it to a specific audience. 
  • Lawfully obtained, truthful information that is a matter of public concern. 
  • Deidentified or aggregated consumer information. 
  • Information excluded from the CCPA’s scope, like personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA), California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act.


A. Personal Information Categories Chart 

The chart below identifies which categories of personal information we collected from our consumers within the last 12 months, and the expected retention period. 

Category Examples Collected Retention Period
A.1. Identifiers. A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers. YES For as long as your account remains active.
A.2. Other Identifiers. Social Security number, driver’s license number, passport number, or other similar identifiers. NO N/A
B.1. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) (”California Customer Records”). A name, signature, Social Security number, physical characteristics or description, photograph, address, telephone number, vehicle details, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, [membership in professional organizations, professional licenses and certifications,] bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. YES Comments, Forms, and Uploaded Images: Indefinitely. User Account Information: For as long as your account remains active. Transaction Records: For as long as required by law, tax, or regulatory obligations.
B.2. Other Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) (”California Customer Records”). Passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, membership in professional organizations, professional licenses and certifications, bank account number, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. NO N/A
C. Protected classification characteristics under California or federal law (”Protected Classes”). Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, reproductive health decisionmaking, military and veteran status, or genetic information (including familial genetic information). NO N/A
D. Commercial information. Records of personal property, products, or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. NO N/A
E. Biometric information. Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. NO N/A
F. Internet or other similar network activity. Activity on our websites, mobile apps, or other digital systems, such as internet browsing history, search history, system usage, electronic communications with us, postings on our social media sites, IP address, browser type, operating system, referring URLs, and pages viewed. YES Indefinitely
G. Geolocation data. Physical location or movements, such as the time and physical location related to use of our internet website, application, or device, and GPS location data from mobile devices of consumers who visit our websites or use our mobile apps. YES Indefinitely
H. Sensory data. Audio, electronic, visual, thermal, olfactory, or similar information. NO N/A
I. Professional or employment-related information. Current or past job history or performance evaluations. NO N/A
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)) (”FERPA Information”). Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. NO N/A
K.1. Inferences drawn from other personal information. Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. YES For as long as your account remains active.
K.2. Other Inferences drawn from other personal information. Profile reflecting a person’s characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. YES For as long as your account remains active.
L. Sensitive personal information. Further identified in the chart below. YES See Sensitive Personal Information Chart.

B. Sensitive Personal Information Categories Chart 


Sensitive Personal Information (“SPI”) is a subtype of personal information consisting of the specific information categories listed in the chart below. Importantly, the CCPA only treats this information as sensitive personal information when we collect or use it to infer characteristics about a consumer. 


The chart below identifies which SPI categories, if any, we have collected from consumers to infer characteristics about them in the last 12 months. 

Sensitive Personal Information Category Collected to Infer Characteristics? Retention Period
L.1. Government identifiers, such as your Social Security number (SSN), driver’s license, state identification card, or passport number. NO N/A
L.2. Complete account access credentials, such as usernames, account logins, account numbers, or card numbers combined with required access/security code or password. YES For as long as your account remains active.
L.3. Precise geolocation, such as physical store visits or physical locations when visiting websites or using mobile apps. YES For as long as your account remains active.
L.4. Racial or ethnic origin. NO N/A
L.5. Citizenship or immigration status. NO N/A
L.6. Religious or philosophical beliefs. NO N/A
L.7. Union membership. NO N/A
L.8. Mail, email, or text messages not directed to the Company. NO N/A
L.9. Genetic data. NO N/A
L.10. Neural Data, such as information generated by measuring a consumer’s central or peripheral nervous system’s activity that is not inferred from nonneural information. NO N/A
L.11. Unique identifying biometric information. NO N/A
L.12. Health information. NO N/A
L.13. Sex life or sexual orientation information. NO N/A

4.  Sources of Personal Information

We obtain the categories of personal information listed above from the following categories of sources: 

  • Directly from you, such as from the forms or other information you provide to the us. 
  • Indirectly from you, such as from your interactions with our website, mobile application, social media platforms, store visits, reward program participation, customer service programs, or other interactive offerings we may introduce. 
  • From our service providers, such as data analytics providers, data brokers, advertising networks, and other service providers reasonably requiring Personal Information to conduct business. 
  • Other customers, such as from referral programs. 
  • Video and other similar surveillance systems. 
  • Inferences generated by us or our service providers’ computer systems.


5. How We Use Personal Information

a. Personal Information Collection, Use, and Disclosure Purposes 

  • Develop, offer, and provide you with our products and services, including our Membership Program and other services and offerings developed, marketed, or offered by us. 
  • Meet our obligations and enforce our rights arising from any contracts with you, including for billing or collections, or to comply with legal requirements. 
  • Fulfill the purposes for which you provided your personal information or that were described to you at collection, and as the CCPA otherwise permits. 
  • Improve our products or services, marketing, or customer relationships and experiences. 
  • Notify you about changes to our products or services. 
  • Administer our systems and conduct internal operations, including for troubleshooting, data analysis, testing, research, statistical, and survey purposes. 
  • Enable your participation in our websites’ or mobile apps’ interactive, social media, or other similar features. 
  • Protect our Company, employees, or operations. 
  • Measure or understand the effectiveness of the advertising we serve to you and others, and to deliver relevant advertising to you. 
  • Make suggestions and recommendations to you and other consumers about our goods or services that may interest you or them, including developing profiles. 
  • Manage your consumer relationship with us, including for: 
  • online account creation, maintenance, and security; 
  • reaching you, when needed, about your account; and 
  • providing you with directions or service details. 
  • Perform data analytics and benchmarking. 
  • Administer and maintain the Company’s systems and operations, including for safety purposes. 
  • Engage in corporate transactions requiring review of consumer records, such as for evaluating potential Company mergers and acquisitions. 
  • Comply with all applicable laws and regulations. 
  • Exercise or defend the legal rights of the Company and its employees, and affiliates, contractors, and agents. 
  • Respond to law enforcement requests and as required by applicable law or court order. 


b. Sensitive Personal Information Use and Disclosure Purposes 

We may use or disclose sensitive personal information for the following statutorily approved reasons (Permitted SPI Purposes): 

  • Performing actions that are necessary for our consumer relationship and that an average consumer in a relationship with us would reasonably expect. 
  • Preventing, detecting, and investigating security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted personal information. 
  • Defending against and prosecuting those responsible for malicious, deceptive, fraudulent, or illegal actions directed at the Company. 
  • Ensuring physical safety. 
  • Short-term, transient use, such as non-personalized advertising shown as part of your current interactions with us, where we do not: 
  • disclose the sensitive personal information to another third party; or 
  • use it to build a profile about you or otherwise alter your experience outside your current interaction with the Company. 
  • Services performed for the Company, including maintaining or servicing accounts, processing or fulfilling transactions, verifying consumer information, processing payments, or providing financing, analytic services, storage, or similar services for the Company. 
  • Activities required to: 
  • verify or maintain the quality or safety of a product, service, or device that we own, manufacture, had manufactured, or control; or 
  • improve, upgrade, or enhance the service or device that we own, manufacture, had manufactured, or controlled. 
  • Collecting or processing sensitive personal information that we do not use for the purpose of inferring characteristics about a consumer. 


We do not use or disclose sensitive personal information for purposes other than the Permitted SPI Purposes. For more on your right to limit these additional sensitive personal information use purposes, see the section titled: Your Rights and Choices. 


6.  Other Privacy Disclaimers

  • Images: If you upload images to our website, they may become viewable to the public. We do not check for metadata within the images uploaded by users of our website. You should avoid uploading images with embedded location data (EXIF GPS). Visitors to the website can download and extract location data from images.


  • Cookies:  Our site uses cookies to improve your browsing experience. Cookies may be used to: remember login details and preferences; track website performance and usage through analytics; and deliver personalized advertising (if enabled). You may disable cookies through your browser settings, but certain website features may not function properly.


  • Embedded Content from Other Websites: Articles or features on this site may include embedded content (e.g., videos, images, social media feeds). Embedded content from other websites behaves in the same way as if the visitor has visited the external website. These third-party sites may collect data about you, use cookies, or track your interaction with embedded content.


  • User Accounts: If you create a user account by registering, we store your personal information as long as your account is active. If you are no longer a customer, you may request deletion of your account information at any time.


7.  Additional Categories or Other Purposes

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice. If required by law, we will also seek your consent before using your personal information for a new or unrelated purpose. 


We may collect, process, and disclose aggregated or deidentified consumer information for any purpose, without restriction. When we collect, process, or disclose aggregated or deidentified consumer information, we will maintain and use it in deidentified form and will not to attempt to reidentify the information, except to determine whether our deidentification processes satisfies any applicable legal requirements. 


8.  Disclosing, Selling, or Sharing Personal Information

A. Business Purpose Disclosures 

We may disclose the personal information we collect, including sensitive personal information, to third parties for the business purposes described in the How We Use Personal Information section, such as to engage third parties to support our business functions. For example, we may disclose information from your visits to our website to a cybersecurity consultant to help secure the website. 


We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the personal information confidential, prohibit using the disclosed information for any purpose except performing the contract, and meet the CCPA’s other contract requirements for engaging service providers or contractors. 


The chart below identifies the categories of entities to whom we have disclosed our consumers’ personal information for a business purpose over the preceding 12 months, along with the personal information categories disclosed and the disclosure’s business purposes. 

Business Purposes Disclosure Recipient Category, Personal Information Category, and Purposes Chart

Category of Business Purpose Disclosure Recipients Personal Information Categories Disclosed Sensitive Personal Information Categories Disclosed Business Purpose Disclosures
Mobile App Service Provider A.1. Identifiers. B.1. Personal information categories. F. Internet or other similar network activity. G. Geolocation data. K.1. Inferences. L. Sensitive personal information. L.2. Complete account access credentials. L.3. Precise geolocation To deliver memberships and other products you may have purchased from us.
Website Service Provider A.1. Identifiers. B.1. Personal information categories. F. Internet or other similar network activity. G. Geolocation data. K.1. Inferences. L. Sensitive personal information. L.2. Complete account access credentials. L.3. Precise geolocation To deliver memberships and other products you may have purchased from us. To support customers with using our products and services, including online account management and troubleshooting.
Credit/Debit Card Payment Service Provider A.1. Identifiers. B.1. Personal information categories. L. Sensitive personal information. L.2. Complete account access credentials. L.3. Precise geolocation To process payments made by consumers on our website or mobile app.

9.  Selling or Sharing Personal Information

We do not sell your personal information, including sensitive personal information, to third parties and have not sold it in the preceding 12 months. We do share your personal information, including sensitive personal information (SPI), with third parties for cross-context behavioral advertising purposes and have or will share your personal information in the preceding 12 months.


10.  Your Rights and Choices

Under the California Consumer Privacy Act (CCPA/CPRA)  and any applicable Federal or State laws, you have:

  • The right to know what personal information we collect, use, disclose, or sell—including the specific pieces of personal information we have collected about you (a “data portability request”). 
  • The right to request deletion of your personal information, subject to certain exceptions. 
  • The right to opt out of the sale or sharing of personal information (we do not sell personal information). 
  • The right to correct inaccurate personal information. 
  • The right to non-discrimination for exercising your privacy rights. 


11.  How to Exercise Your Rights

a. Exercising the Rights to Know, Delete, or Correct 

To exercise the rights to know, data portability, delete, or correct described above, please submit a verifiable request by: 

Please describe your request in sufficient detail so we can properly understand, evaluate, and respond to it. You or your authorized agent may only submit a request to know or a data portability request twice within a 12-month period.


b. Exercising the Right to Limit or Opt-Out 

You can submit your request to limit or opt-out through: 


c.Verification Process and Authorized Agents 

Only you, or someone legally authorized to act on your behalf, may make a request to know, delete, or correct related to your personal information. If your minor child is our consumer, you may also make a verifiable request on their behalf. We may request specific information from you or your authorized representative to confirm your or their identity before we can process your right to know, delete, or correct your personal information. 


We cannot respond to your request to know, delete, or correct if we cannot verify your identity or authority to make the request and confirm the personal information relating to you. We will only use personal information provided in the request to verify the requestor’s identity or authority to make the request. 

We consider requests made through your password-protected account with our company sufficiently verified when the request relates to personal information associated with that specific account. You do not need to create an account with us to submit a request to know, correct, or delete. 


For requests to limit or opt-out, we ask for the information necessary to complete the request, which may include, for example, the consumer’s name, email address, or account username. 


d. Responding to Your Requests to Know, Delete, or Correct 

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the ten-day timeframe, please contact us by email at royal.support@crownamericacarwash.com and let us know of the delay. 


We endeavor to substantively respond to a verifiable request within 45 days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing. We will deliver our written response to your verified email address. Our substantive response will tell you whether or not we have complied with your request. 


If we cannot comply with your request in whole or in part, we will explain the reason, subject to any legal or regulatory restrictions. Applicable law may allow or require us to refuse to provide you with access to some or all of the personal information that we hold about you, or we may have destroyed, deleted, or made your personal information anonymous in compliance with our record retention policies and obligations. 


Any disclosures we provide will cover information for the 12-month period preceding the request’s receipt date. We will consider requests to provide a longer disclosure period that do not extend past January 1, 2024, unless providing the longer timeframe would be impossible or involves disproportionate effort. 


For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance. 


We do not charge a fee to process or respond to your verifiable request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. 


e. Responding to Your Right to Limit or Opt-Out 

In response to your request to limit or opt-out, we will process your request, as soon as feasibly possible, but no later than 15 business days from the date we receive the request. You do not need to create an account with us to exercise your limit and opt-out right. We will only use personal information provided from your request to comply with the request. 


We may deny opt-out requests if we have a good-faith, reasonable, and documented belief that the request is fraudulent and will clearly explain our denial decision to the requestor. 


Once you make a request to limit or opt-out, we will wait at least 12 months before asking you to reauthorize the use or disclosure of your sensitive personal information for purposes other than the Permitted SPI Purposes or personal information sharing. However, you may change your mind and opt back in at any time by going through the same processes described above for limiting or opting-out. 


Where We Send Your Data 

Visitor comments may be checked through an automated spam detection service.
We may also share your information with trusted third-party service providers (e.g., payment processors, website hosting providers, marketing tools) who help us operate our business. 


12.  How We Protect Your Personal Data 

We implement industry-standard measures to protect your personal information, which include employing commercially reasonable administrative, physical, and technical measures. However, no website, mobile application, system, electronic storage, or online service or storage is 100% secure, and we cannot guarantee absolute security. Any transmission of personal data is at your own risk. 


The safety and security of your information also depends on you. You are responsible for taking steps to protect your personal data against unauthorized use, disclosure, and access. 


13.  Children’s Privacy

Our website and services are not directed at children under 13. We do not knowingly collect information from children.


14.  Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last Updated” date. 


We reserve the right to update this Privacy Policy at any time, as we continue to develop our compliance program in response to legal developments of the CCPA and other government regulation. If we make any material changes to this Privacy Policy, we will update the policy’s “Effective Date” and “Last Updated” dates. 


15.  Contact Us

If you have questions or concerns about this Privacy Policy, the ways in which we collect and use your information described here, or your choices and rights regarding such use, please contact us at:


Crown America Car Wash 
5450 SOUTH ST. LAKEWOOD, CA 90712 
royal.support@crownamericacarwash.com 
(562) 262-0364