Privacy
Privacy notice
Version pre-launch-1.3, effective from September 29, 2026
This notice covers the Pitstop360 launch waitlist and requests from garages interested in partnering. We do not sell your personal data.
Who is responsible
The controller is Nick Taylor (PitStop360), the founder responsible for this pre-launch site. The planned company is not yet registered. For privacy questions or requests, contact nick@pitstop360.tech.
Joining the waitlist
We collect your first name, last name and email. Your county, interests and short note are optional and help us plan the launch. We also record your chosen language, market, signup time, referral and campaign information, IP address, browser information and the result of the anti-spam check.
By joining, you consent to a confirmation email and one email announcing the launch in your market, including the list-only launch offer. There is no newsletter. The basis is consent under Article 6(1)(a) GDPR and, for the launch email, Article 12 of Romanian Law 506/2004.
Your confirmation includes an invite link. We record signups through that link; it does not carry a referral reward. We use referral and campaign information to understand how people find us, based on our legitimate interest in planning the launch (Article 6(1)(f) GDPR).
You can withdraw consent at any time using the leave-the-list link in your email or by writing to nick@pitstop360.tech. This removes your waitlist entry and stops the launch email. Withdrawal does not affect earlier lawful processing; separate delivery records are described below.
Garage partnership requests
We collect the garage name and city, contact name, phone, email and role. Optional details include branch count, address or map location, preferred contact method and notes. We also record the market, source of the request, relevant dates, an IP-derived abuse-prevention identifier and the progress of our discussions.
We use these details to acknowledge your request and discuss a partnership through the contact details you provide. Our basis is our legitimate interest in responding to enquiries and building a partner network (Article 6(1)(f) GDPR). If you would personally be party to a contract, steps you request before that contract rely on Article 6(1)(b). You can ask us to stop contacting you at any time.
Applying does not enter you into a partnership contract. We will explain the founding-partner offer and its terms before you decide whether to join.
How long we keep data
Our retention policy is to remove waitlist entries after the launch email, or no later than 24 months after signup. Waitlist IP addresses and browser details are removed after 30 days.
Garage partnership requests are deleted in full 180 days after the last update, including the garage and contact details, location, notes and associated application history. Any partnership you later enter into will be covered by the information provided at that stage.
Email delivery records are separate from the forms. Personal data in our message queue is subject to a 90-day retention period for delivery support and troubleshooting, based on our legitimate interest (Article 6(1)(f) GDPR). Leaving the waitlist does not itself erase those records. You can also request erasure of your personal data.
Site services and cookies
Hosting and network services process technical information, including your IP address and browser details, to deliver and secure the site. We use Cloudflare Turnstile to prevent automated abuse, based on our legitimate interest in protecting the forms (Article 6(1)(f) GDPR).
Cloudflare processes technical signals for this check on our behalf and, as a separate controller, to improve bot detection. Its notice explains this processing: https://www.cloudflare.com/turnstile-privacy-policy/
Google Maps and address search are optional and load only if you choose to enable them. This lets Google receive your IP address, browser details and searches, and use browser storage to provide the service. Our basis for loading it is your consent (Article 6(1)(a) GDPR). A selected place can fill in garage details and a location. You can return to manual entry at any time to stop new searches from the form; this does not undo processing already carried out. The choice lasts for the current page only. Google also processes data under its own privacy policy (https://policies.google.com/privacy); use of its Maps features is subject to the Google Maps terms (https://maps.google.com/help/terms_maps/).
We do not use advertising cookies. Embedded services may access or store information in your browser. Your browser settings let you review, block or delete stored information, although this can affect these services. If enabled, Cloudflare Web Analytics provides visit statistics without analytics cookies; our basis is our legitimate interest in understanding site use. It is not required for either form.
Recipients and international transfers
The people handling launch enquiries and providers of hosting, data storage, network delivery, security, email and communications may access data needed for their work. Providers acting on our behalf are subject to data-processing terms. Google and Cloudflare may also act for their own purposes as described above. We disclose data to authorities where legally required.
Some providers process data outside the European Economic Area, including in the United States. Transfers rely on an applicable European Commission adequacy decision, including the EU-US Data Privacy Framework for covered certified recipients, or the Commission’s standard contractual clauses. You can request information about the applicable safeguards and a copy at nick@pitstop360.tech.
Your choices and rights
The forms are voluntary. Required fields let us register your request and contact you; without them we cannot process the form. You can leave optional fields blank. The site is intended for people aged 16 or over.
Subject to the GDPR conditions, you can request access, correction, erasure, restriction and portability of your data. You can object to processing based on legitimate interests and withdraw consent at any time. Contact nick@pitstop360.tech. We respond within one month. For complex or numerous requests, we may extend this by up to two further months and explain why within the first month. We may request information needed to verify your identity.
You can complain directly to Romania’s data protection authority, ANSPDCP (https://www.dataprotection.ro), or the authority where you live, work or believe an infringement occurred. You do not have to contact us first.
We do not make solely automated decisions with legal or similarly significant effects. Automated anti-spam checks can block a submission; contact us if you cannot use a form.
Changes to this notice
We will update this notice when our processing changes, including when a registered company takes over or the platform launches. We will inform you of material changes affecting data already collected. The version and effective date appear above.