Legal

Privacy Policy

What this site collects, what it does not, and who ever sees it. Short version: the quote form never leaves your browser yet, and analytics is switched off because no property has been set up.

Not legally reviewedThis policy describes exactly how the site behaves today, written by the people who built it — not by a lawyer. It has not been reviewed by a Florida attorney, and it is not legal advice. The owner will have it reviewed before launch.

Last updated
September 2026
Applies to
This website
Analytics status
Inert — no ids configured
Cookies set today
None

01Who we are

SERRES Wrap Center is a vehicle protection studio — paint protection film, wraps, window tint and detailing — opening in the Boca Raton area of South Florida, run by the same team as the SERRES studio in Barcelona.

This policy covers this website only. It does not cover the Barcelona site, our Instagram account, or anything you send us through a third-party platform, each of which has its own terms.

TODO(owner)The registered US entity name and a postal address for privacy requests are not published yet. Both are required here and will be added when the studio's contact details go live in October 2026.

02What we collect

There are no accounts on this site. Nothing asks you to log in, and nothing is stored about you unless you type it into the quote form.

Quote form
Your name, phone number, email address (optional), the car — make, model and year — the service you are interested in, and anything you write in the message box.
Analytics
Pages viewed, approximate location from your IP address, device and browser type, and which buttons you press — once analytics is switched on. Today it is not. See section 04.
Your browser
One local flag recording that you dismissed the cookie notice. It is stored in your own browser and is never sent anywhere.
Not collected
No card numbers, no driver's licence or VIN, no account passwords, no health or financial records, and no data bought from third parties.

03The quote form

The form on this site does not send anything anywhere. The studio's direct line is not open yet, so instead of pretending to deliver a message, the form builds a summary of what you typed and hands it back to you to copy and send when the phone goes live.

That means your name, phone number, email and vehicle details stay in your browser tab. We do not receive them, we cannot read them, and closing the tab discards them. No server, no database, no email relay.

When the studio's contact channels open in October 2026, this changes: the form will deliver your details to us. This policy will be updated on the same day, and it will say exactly where the message goes.

Anti-spam: the form carries a hidden field that people never see and a three-second minimum fill timer. Both run in your browser. There is no CAPTCHA, so nothing about you is sent to a CAPTCHA provider.

04Analytics: GA4 and Meta Pixel

The site is built to run Google Analytics 4 and the Meta Pixel. Neither is running right now. The analytics property id and the pixel id are both empty in the site's configuration, so the script that would load them does nothing at all: no request to Google, no request to Meta, no cookie, no identifier.

We are telling you this rather than describing tracking that does not exist. You can check it yourself — open your browser's network panel on any page of this site and you will see no analytics request.

What happens when they are switched on

  • Google Analytics 4 will record page views, approximate location derived from your IP address, device and browser, and a handful of named events: a quote submission, a reservation, a deposit click, a phone, text or WhatsApp tap, and a view of the pricing page.
  • Meta Pixel will receive the same named events so we can tell whether an advert actually led to a booking. Meta may match that activity to your Facebook or Instagram account if you have one.
  • Both are loaded after your first interaction with the page, or three seconds of idle time — whichever comes first — so they never slow down the page you came to read.
  • The form summary itself is never sent to either provider. The event records that a quote was submitted, not what was in it.

Our Barcelona studio's analytics property is deliberately not reused here. US traffic will go to a separate property, so the two businesses never share visitor data.

05Cookies and the notice bar

This site currently sets no cookies. Not one. Because analytics is inert, there is nothing to consent to, so the cookie notice bar stays hidden — announcing cookies we do not set would be a false statement.

The moment an analytics or pixel id is configured, a dismissible bar appears at the bottom of the page: it says we use cookies for analytics, links to this policy, and has a "Got it" button. It is a notice, not a gate — it informs you, it does not withhold anything, and dismissing it does not switch tracking on or off.

When you dismiss it, your browser stores a single local flag so the bar does not come back. That flag lives in your browser's local storage, contains nothing about you, and is never transmitted. Clearing your site data removes it and the bar returns.

If you would rather not be measured at all once analytics is live, a browser extension that blocks Google Analytics and the Meta Pixel will stop both, and nothing on this site will break.

06Payments and Square

No payment is ever taken on this website. There is no checkout here, no card form, and no card data passes through any page you are reading.

Deposits and invoices are handled by Square. When that goes live, paying means following a link to a page hosted by Square, on Square's own domain. You enter your card details there, Square processes the payment, and we see only what a merchant sees: that a payment succeeded, for how much, and who it came from. We never see, hold or store your card number.

Square is its own data controller for the payment it processes. What Square does with your card details is governed by Square's privacy notice, not by this one.

07Hosting and server logs

This site is a set of static files served by GitHub Pages. There is no application server and no database behind it. Like any web host, GitHub records standard request logs — IP address, time, and the file requested — to deliver pages and defend against abuse. Those logs belong to GitHub and we do not have access to them.

The fonts are served from this site's own domain, not from a font provider, so no third party is told which pages you read. Apart from a Google Maps frame on the contact page, which loads from Google when that page is opened, no third-party content is embedded in these pages.

08Who else sees your data

We do not sell your personal information, and we do not share it with anyone for their own advertising.

  • Google — analytics, once a property is configured. Also the map frame on the contact page.
  • Meta — advertising measurement, once a pixel is configured.
  • Square — payments, on Square's own pages.
  • GitHub — hosting and server logs.
  • Nobody else. No data brokers, no mailing-list resale, no "marketing partners".

These providers are US companies and process data in the United States. If you are writing to us from outside the US, that is where your information goes.

09How long we keep it

  • Quote form entries — not kept at all today: nothing is transmitted, so there is nothing to retain. Once the form delivers to the studio, a quote enquiry is kept for as long as we might reasonably follow it up, and job records for as long as a warranty on the work could still be claimed.
  • Analytics — retained by Google and Meta under their own schedules, once configured. We view reports, not individual visitors.
  • The cookie-notice flag — stays in your browser until you clear your site data.

TODO(owner)Exact retention periods, in months, are set with the attorney review — this section states the principle, not a number we have not agreed.

10Your choices and rights

Florida residents have rights over personal information held about them, and so do visitors from many other places: to ask what we hold, to get a copy, to have it corrected, and to have it deleted.

Right now the practical answer is simple — we hold nothing you have sent through this site, because the form does not deliver yet. Once it does, you can ask us at any time to delete what you sent, and we will.

The route for that request is the contact page. The studio's phone, WhatsApp and email are not published until October 2026; when they are, a named address for privacy requests will be published here alongside them.

TODO(owner)Name the channel for privacy requests — a dedicated address or the main one — and the response window, once contact details are live.

11Children

This site is aimed at car owners, not children. We do not knowingly collect information from anyone under 13. If you believe a child has sent us something through this site, tell us and we will delete it.

12Changes to this policy

When the way the site works changes, this page changes with it — and the two dates that matter are on it: the "last updated" date at the top, and the analytics status next to it. Both are part of the page, not a footnote.

The next scheduled change is October 2026, when the studio's contact details go live and the quote form starts delivering.

Still reading

Questions about
any of this?

Ask before you send us anything. The same goes for the commercial side of the work — deposits, warranty and what a quote actually commits you to are all on the terms page.

Get an exact quote in 2 hours

Send your make & model — exact quote within 2 hours.

Get a Quote →