Privacy Policy

Introduction

D8 Wrap ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website d8wrap.com.

Data Controller

The data controller responsible for your personal data is:

• Company: D8 Wrap
• Address: R. Prof. Mota Pinto 1A, 2610-152 Amadora, Portugal
• Email: info@d8wrap.com
• Phone: +351 91 097 097 8

Information We Collect

Personal Information

When you use our contact form or book a service, we may collect:

• Name
• Email address
• Phone number
• Message content
• Service preferences

Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Device type
• Pages visited and time spent
• Referring website

How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and requests
• Provide and improve our services
• Communicate with you about appointments
• Analyze website usage to improve user experience
• Send marketing communications (only with your consent)
• Comply with legal obligations

Legal Basis for Processing

We process your personal data based on:

Cookies

We use cookies and similar technologies to enhance your experience. Our website uses:

Analytics Cookies

Google Analytics to understand how visitors interact with our website. These cookies collect anonymous information about your visit. We also use Ahrefs Web Analytics, which sets no cookies and measures only aggregate visit statistics.

Marketing Cookies

Used to track visitors across websites and display relevant advertisements.

AI Wrap Preview Module

The AI Wrap Preview ("preview the wrap on your car") is a separate module of our website. When you use it, to make the service work and to prevent abuse, we read and process technical data about your device and connection — your IP address, device and browser characteristics, cookies and similar identifiers, including forming a device fingerprint. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR): keeping the service operational and protecting this paid feature from automated abuse. This data is not shared with third parties and is used only within the module. Using the module is voluntary — if you do not agree, you can simply not use it; the rest of the site works without it. Advertising trackers inside the module follow the cookie choice you made on the main site.

Data Sharing

We may share your information with:

• Google: analytics and advertising. With your marketing consent we also send the advertising click identifier and a hash of your email and phone number, so we can measure which advertisement produced an enquiry.
• Meta (Facebook, Instagram, WhatsApp): advertising measurement, and the delivery of WhatsApp messages. When you write to us on WhatsApp, Meta carries and stores that conversation under its own terms, in addition to the copy we keep.
• Anthropic (United States): we send the content of conversations to translate the conversation between your language and the studio’s, and to summarise the thread for the colleague who answers you. They process it on our instructions and do not use it to train their models. Transfers are covered by the European Commission’s standard contractual clauses.
• Hosting providers: To store and serve our website
• Legal authorities: When required by law

We do not sell your personal data to third parties.

Enquiry Records and Advertising Measurement

Every enquiry (contact form, AI Wrap Preview) and every contact click on this site (WhatsApp, phone, email, directions, social links) is recorded on our own server with a reference number, the time, the page, the traffic source including advertising click identifiers, your IP address, approximate location, device type and time spent on the site. We do this to know which of our marketing actually produces work, and to be able to trace a specific enquiry later. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). These records are kept for 24 months, after which the identifying fields are erased and only anonymous statistics remain. This record is made regardless of your cookie choice: refusing cookies stops us sharing anything with third parties, it does not stop us keeping our own record of an enquiry you sent us.

If, and only if, you accepted marketing cookies, we share with Google Ads the advertising click identifier and a cryptographic hash (an irreversible fingerprint) of your email address and phone number, so that Google can tell us which advertisement produced the enquiry and, later, what it was worth. If you refuse marketing cookies, none of this leaves our server and the value of the work is used for our internal statistics only.

Messages and Telephone Calls

Talking to us is itself processing of your data, so this section says plainly what happens when you write or ring.

WhatsApp. When you message our business number, we store the conversation — your number, your profile name as WhatsApp gives it to us, the messages, and any photograph or voice note you send — on our own server, so that whoever answers you can see what was already discussed. Meta delivers and separately stores that conversation under its own terms. We keep our copy for 24 months after the last message.

Phone calls. Calls to the studio are not recorded. We keep only the fact of the call: your number, the time and length, and which of us answered — so we can call back if we missed you. It is stored with the rest of your enquiry history.

To translate the conversation between your language and the studio’s and to summarise a long thread for the colleague answering it, we send the content of the conversation to Anthropic in the United States. They act on our instructions, do not use it to train their models, and the transfer is covered by the European Commission’s standard contractual clauses. No decision about you is taken by a machine alone: a person reads it and answers you.

Your Rights

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we use your data
• Portability: Receive your data in a structured format
• Object: Object to processing of your data
• Withdraw consent: Withdraw consent at any time

To exercise any of these rights, please contact us using the details below.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Contact form submissions are retained for up to 2 years.

Security

We implement appropriate technical and organizational measures to protect your personal data, including SSL encryption, secure data storage, and access controls.

Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this page.