Last updated: 24 September 2026
Socar Detailing Services ("we", "us") operates the Socar Detailing Services TT Android application (the "app"). The app is a point-of-sale and staff time clock used by our own employees on tablets at our locations in Trinidad and Tobago. It is not a consumer app and is not intended for use by the general public.
This policy explains what the app records, why, where it is kept, and how to ask us to remove it.
Socar Detailing Services is the data controller for everything described here.
Contact: socardetailertt@gmail.com
When a manager sets up an account for a member of staff, the app stores their name, employee ID, role (cashier or detailer), hourly pay rate, date hired, and a 4-digit PIN. Administrators additionally have an email address and a password.
The app then records each clock-in, lunch break and clock-out, and which member of staff processed each sale.
When a customer has work done, staff may record the vehicle's licence plate, the customer's name and contact number, and optionally the vehicle's colour, make and model. This is kept so that a returning customer can be identified by their plate, and so we can see what work has previously been done on that vehicle.
Giving these details is optional. A customer who prefers not to be recorded can be served as a walk-in, and no customer information is stored for that sale.
For each sale the app records the services performed, prices, discounts, the payment method (cash, debit card, credit card or bank transfer), the amount of cash handed over and change given, the date and time, the location, the member of staff who processed it, and the customer and vehicle when they were recorded.
The app never records card numbers, bank details or any payment credentials. Card payments are taken on separate card terminals; the app only notes that a sale was paid by card.
The app keeps an audit log of changes made by administrators — for example price changes, staff accounts being added or disabled, and sales being voided — recording who made the change and when.
It does not use GPS or track the location of any device or person.
It does not access the camera, microphone, photos or contacts.
It contains no advertising and no third-party analytics or tracking.
It does not sell or rent personal information to anyone, ever.
It does not share information with third parties for their own purposes.
Permission
Why
Internet and network state
To back up records to our own cloud database
Bluetooth
Only to send a receipt to a paired receipt printer. No information is collected through Bluetooth and no scanning for location is performed.
Records are stored on the tablet itself so the shop keeps working without an internet connection, and are copied to our own private database hosted by Supabase, Inc. in the United States. Supabase acts as our service provider and processes the data only to provide that hosting.
We do not use any other third-party service to store or process this information.
Passwords and PINs are stored as one-way cryptographic hashes (PBKDF2-SHA256) and are never stored or transmitted in readable form.
An additional copy of an employee PIN is kept on the tablet only, encrypted with a key held in the tablet's hardware-backed keystore, so a manager can look up a forgotten PIN. This copy never leaves the tablet.
The key the app uses to upload records can add and update records but cannot read them back, so a lost or stolen tablet cannot be used to download the business's records.
A tablet must be opened by an administrator signing in with an email address and password before it can be used, and administrator sessions end automatically after a period of inactivity.
Sales, time-clock and audit records are kept for as long as needed to run the business and to meet tax and employment record-keeping obligations in Trinidad and Tobago.
Customer and vehicle records are kept while the customer remains a customer. A customer can be removed from our records at any time on request. Removing a customer does not alter past sales totals, which we are required to retain for accounting purposes, but the customer and vehicle record itself is deleted.
If you are a customer or a member of staff, you may ask us to:
tell you what information we hold about you,
correct anything that is wrong,
delete your customer record, or
provide a copy of your information.
Email socardetailertt@gmail.com and we will respond within 30 days. There is no charge for this.
The app is a staff tool and is not directed at children. We do not knowingly record information about anyone under 16 other than, incidentally, the name of a vehicle owner where that owner is a minor.
If we change how the app handles information we will update this page and change the date at the top. Material changes will also be communicated to our staff directly.
Questions, corrections or deletion requests:
Socar Detailing Services Email: socardetailertt@gmail.com Trinidad and Tobago