Interpretation

Words with capitalised initial letters have meanings defined below. These definitions apply whether they appear in singular or plural form.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for you to access our Service.
• App or Application means the Ask A Mechanic mobile/web application provided by the Company.
• Company (referred to as “we”, “us”, or “our”) means Asoro Automotive Solutions Limited, 47 Ediae Street, Ogbeson Quarters, Ikpoba Hill, Benin City, Nigeria.
• Device means any device that can access the Service, such as a smartphone, tablet, or computer.
• Personal Data means any information that relates to an identified or identifiable individual.
• Service means the App and the website at https://askamechanic.asoroautomotive.com.
• Service Provider means any third-party entity that processes data on our behalf.
• Usage Data means data collected automatically from your use of the Service.
• You means the individual accessing or using the Service.

Personal Data You Provide

While using our Service, we may ask you to provide certain personally identifiable information, including but not limited to:

Usage Data

Usage Data is collected automatically when you use the Service. It may include information such as your device’s IP address, browser type and version, pages you visit, date and time of your visit, time spent on pages, unique device identifiers, and other diagnostic data.

Social Login Information

If you choose to register or log in through a third-party social media service (such as Google), we may collect personal data already associated with your social media account, such as your name, email address, and profile picture. You may also have the option to share additional information through your social media account with us.

We collect information through the following means:

• Directly from you when you register, fill in forms, or interact with our Service.
• Automatically through cookies, web beacons, pixels, log files, and similar tracking technologies when you use the Service.
• From third parties such as social media platforms when you use social sign-in features.
• From your device when you grant permissions for location, contacts, or camera access.

Asoro Automotive Solutions Limited uses the data we collect for the following purposes:

• To provide and maintain our Service, including monitoring usage of the Service.
• To manage your Account and give you access to different features available to registered users.
• For the performance of a contract, including developing, complying with, and undertaking purchases, services, or other contracts entered into with us.
• To contact you via email, telephone, SMS, or push notifications about updates, security alerts, and service-related messages.
• To provide you with news, offers, and general information about other goods, services, or events we offer, unless you have opted out.
• To manage your requests to us, including mechanic service requests submitted through the App.
• For business transfers, to evaluate or conduct a merger, divestiture, restructuring, or sale of assets.
• For analytics and improvement, to understand how users interact with our Service so we can improve it.
• For advertising and remarketing, to show you relevant ads on third-party platforms based on your use of the Service.
• For legal compliance, to comply with applicable laws, regulations, and legal processes.

We use cookies and similar tracking technologies to track activity on our Service and store certain information.

Types of Tracking Technologies

• Cookies: Small files placed on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
• Web Beacons / Pixels: Small electronic files that permit us to count users and gather statistics about usage patterns.
• Session Cookies: Deleted when you close your browser.
• Persistent Cookies: Remain on your device after you close your browser.

Google Analytics

We use Google Analytics to analyse how our Service is used. Google Analytics collects data such as how often you visit our Service, what pages you visit, and what other sites you visited before coming to our Service. We use this information only to improve our Service. Google Analytics collects only the IP address assigned to you at the time of your visit, not your name or other identifying information.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

We send emails to users of our Service. These may include:

• Transactional emails (booking confirmations, receipts, service updates).
• Account-related notifications (password resets, security alerts).
• Promotional emails and newsletters (only where you have consented or opted in).

You may opt out of receiving promotional emails at any time by clicking the “Unsubscribe” link included in every marketing email, or by contacting us directly. Please note that you may still receive transactional and administrative emails even after opting out of marketing communications.

We show advertisements through our Service and use remarketing (retargeting) services to advertise our business on third-party websites after you visit our Service.

Remarketing Services We Use

We may use remarketing platforms including but not limited to:

These services use cookies to serve ads based on your prior visits to our Service. You can opt out of personalised advertising by visiting:

• Google Ads Settings

We provide paid products and/or services within our Service. In that case, we use third-party services for payment processing. We do not store or collect your payment card details. That information is provided directly to our third-party payment processors, whose use of your personal information is governed by their own Privacy Policies.

The payment processors we work with are compliant with the standards set by PCI-DSS (Payment Card Industry Data Security Standard) as managed by the PCI Security Standards Council.

We do not sell your personal information. We may share your personal data in the following situations:

• With Service Providers: We share your data with trusted third parties who perform services on our behalf (hosting, analytics, payment processing, email delivery, advertising). These providers are obligated to protect your data.
• For Business Transfers: In connection with a merger, acquisition, or sale of all or part of our assets, your data may be transferred. We will notify you before your data becomes subject to a different Privacy Policy.
• With Affiliates: We may share your information with our affiliates, who are required to honour this Privacy Policy.
• With Business Partners: We may share your data with our business partners to offer you certain products, services, or promotions.
• With Your Consent: We may disclose your personal information for any other purpose with your explicit consent.
• For Legal Requirements: We may disclose your data if required by law or in good faith that such action is necessary to comply with legal obligations, protect rights or safety, or investigate fraud.

We retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

Usage Data is generally retained for a shorter period, except when used to strengthen security, improve functionality, or when we are legally obligated to retain it for longer periods.

When your data is no longer needed, we will securely delete or anonymise it. You may request deletion of your account and associated data at any time by contacting us.

The security of your Personal Data is important to us. We implement commercially reasonable technical and organisational measures to protect your information from unauthorised access, disclosure, alteration, or destruction.

These measures include:

• Encryption of data in transit using TLS/SSL protocols.
• Secure storage of passwords using industry-standard hashing.
• Regular security assessments and access controls.
• Employee training on data protection.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

If we become aware that we have collected Personal Data from anyone under the age of 13 without verification of parental consent, we will take steps to remove that information from our servers promptly.

If we need to rely on consent as a legal basis for processing your information, and your country requires consent from a parent or legal guardian, we may require your parent’s or guardian’s consent before we collect and use that information.

If you are located in the European Union (EU) or European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

You have the following rights:

• Right to Access: Request copies of your personal data.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: Request that we restrict processing of your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on our legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

Legal Bases for Processing

We process your personal data under the following legal bases:

• Contract: Processing necessary to fulfil a contract with you.
• Legitimate Interests: Processing necessary for our legitimate business interests.
• Consent: Where you have provided explicit consent.
• Legal Obligation: Where we must comply with a legal requirement.

International Data Transfers

Your information may be transferred to and maintained on computers located outside your country, where data protection laws may differ. By submitting your information, you agree to this transfer. We take appropriate safeguards to ensure your data remains protected in accordance with GDPR.

To exercise your GDPR rights, please contact us using the details in Section 19. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

If you are a resident of California, USA, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you specific rights regarding your personal information.

Your California Privacy Rights

• Right to Know: Request disclosure of the categories and specific pieces of personal information we collect about you.
• Right to Delete: Request deletion of your personal information we have collected, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: Opt out of the sale or sharing of your personal information with third parties.
• Right to Limit Use of Sensitive Personal Information: Limit how we use and disclose sensitive personal information.
• Right to Non-Discrimination: Not receive discriminatory treatment for exercising your privacy rights.

Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information from California consumers:

Do Not Sell or Share My Personal Information

We do not sell your personal information in the traditional sense. However, under California law, certain sharing of data for targeted advertising may qualify as a “sale” or “sharing.” You have the right to opt out of this. To exercise this right, please contact us at [email protected].

To exercise any of your California rights, please submit a verifiable consumer request to us using the contact details in Section 19. We will respond within 45 days of receiving your request. We will not discriminate against you for exercising any of your CCPA/CPRA rights.

CalOPPA is the first state law in the United States to require commercial websites and online services to post a privacy policy. In accordance with CalOPPA, we agree to the following:

• Users can visit our Service anonymously.
• Once this Privacy Policy is created, we will add a link to it on our home page, accessible via the first significant navigation link.
• Our Privacy Policy link includes the word “Privacy” and can easily be found on the home page.
• You will be notified of any Privacy Policy changes directly on this Privacy Policy page.
• You can change your personal information by logging into your account or by emailing us.

Do Not Track Signals

We honour Do Not Track (“DNT”) signals and do not track, plant cookies, or use advertising when a DNT browser mechanism is in place. Please see Section 16 for more detail.

Some browsers have a “Do Not Track” feature that signals to websites that you do not want your online activity tracked. Our Service responds to Do Not Track signals. When a Do Not Track signal is detected, we will not collect behavioural tracking data for advertising purposes from that session.

Please note that third-party services such as Google Analytics or advertising networks integrated into our Service may have their own Do Not Track policies. We encourage you to review their policies directly.

Our Service may contain links to third-party websites, services, or apps that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. Our Privacy Policy does not apply to those third-party sites.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top.

We will notify you via email and/or a prominent notice on our Service prior to the change becoming effective, where the changes are material. You are advised to review this Privacy Policy periodically for any changes.

Changes to this Privacy Policy are effective when they are posted on this page.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a complaint regarding how we handle your personal information, please contact us using any of the methods below: