Privacy Policy
This site collects very little. This page states exactly what, why, and who else sees it.
Last updated
Who we are
This website is operated by Smart PPF ("Smart PPF", "we", "us"). We manufacture and supply paint protection film, window film and windshield protection.
For any privacy question, or to have your data deleted, emailsupport@smartppf.com. We answer privacy requests within 30 days.
What we collect
Nothing is sold through this website. There are no user accounts and no payment processing, so we never handle passwords or card details. What we do collect:
| Data | When | Why |
|---|---|---|
| Name, email address, phone number, topic and message | You submit the contact form | To read and reply to your enquiry |
| Name, email, phone, company, region and estimated monthly volume | You submit the distributor application form | To assess and respond to a distribution request |
| IP address (held in memory only, for minutes) | Any form submission | Rate limiting, to stop automated abuse. Never written to storage. |
| Anonymous usage statistics: pages viewed, approximate country, device type | Only if you accept analytics cookies | To understand which pages are useful |
Everything above is information you chose to type into a form, except the IP address used for rate limiting and the analytics statistics you can decline. We do not ask for more than we need in order to reply to you.
Why we are allowed to hold it
We process contact and distributor enquiries because you asked us to get in touch. That is a legitimate interest in responding to a request you started, and a necessary step toward a possible business relationship. Analytics is processed only with your consent, which you give or withhold in the cookie banner and can change at any time.
Cookies
No cookie is set when you first arrive, and the site works fully without any.
- Analytics cookies are set by Google Analytics only after you press Accept. They record which pages are viewed, roughly which country you are in, and what kind of device you use. Press Decline and Google Analytics is never loaded at all.
- Your choice itself is remembered in your browser so we do not ask again on every page. That value stays on your device.
- reCAPTCHA loads on the contact and distributor pages so the forms can tell people from bots. Google may set cookies as part of that check.
To change your mind later, use the Cookie settings link in the footer, or clear this site's data in your browser.
Who else sees your data
We do not sell, rent or trade personal data. We share it only with the services that make this website work:
| Service | What it does | Their policy |
|---|---|---|
| Vercel | Hosts and serves this website | Privacy policy |
| Resend | Delivers form submissions to our inbox as email | Privacy policy |
| Google reCAPTCHA | Tells people from bots on our forms | Privacy policy |
| Google Analytics | Anonymous usage statistics, loaded only after you accept | Privacy policy |
We may also disclose information where the law requires it, or to protect our rights, safety or property.
How long we keep it
Form submissions reach us as email and are kept while the enquiry is live and for up to24 months afterwards, so we can pick up a conversation you started. After that they are deleted. Rate-limiting IP addresses exist only in server memory and are gone within minutes. Analytics data is retained by Google for 14 months.
Your rights
You can ask us at any time to:
- tell you what personal data of yours we hold;
- correct anything that is wrong;
- delete it entirely;
- stop using it for any particular purpose.
Email support@smartppf.com and we will act within 30 days. You do not need to give a reason, and asking costs you nothing.
If you are in California, the CCPA gives you these rights explicitly, including the right not to be treated differently for exercising them. We do not sell personal information as the CCPA defines it. If you are in the EU or UK, the GDPR gives you equivalent rights, plus the right to complain to your local data protection authority.
Children
This is a trade website for vehicle protection products. It is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has sent us personal data, email us and we will delete it.
Security
The site is served only over HTTPS. Form submissions are verified server-side with reCAPTCHA and are rate-limited. API credentials are held as server-side environment variables and never appear in anything your browser downloads. No system is perfectly secure, but this website keeps no customer database, which removes the largest category of risk.
Changes to this policy
When this policy changes we update the date at the top of the page. Material changes will be noted here rather than made quietly.