Privacy Policy

Effective Date: July 7, 2026  ·  Last Updated: July 7, 2026

California Reflections Auto Body & Paint (“California Reflections,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect the personal information of customers, website visitors, and others who interact with our collision repair business, located at 3575 First Street, Suite D, Livermore, CA 94551. It also describes the rights available to California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), the California Online Privacy Protection Act (“CalOPPA”), California’s “Shine the Light” law, and other applicable California laws.

1. Scope of This Policy

This Policy applies to personal information we collect in person at our shop, over the phone, by email or text, through our website at calreflections.com, and through third parties such as insurance companies and referral networks. It applies to consumers, customers, prospective customers, and website visitors. It does not apply to information handled solely in an employment context or to the practices of businesses we do not own or control.

2. Information We Collect

In the preceding 12 months, we may have collected the following categories of personal information (as defined by the CCPA):

We do not knowingly collect Social Security numbers, financial account log-in credentials, biometric information, precise health data, or the contents of your private communications.

3. Vehicle & Repair Information (Auto Body–Specific)

Because we are a licensed automotive collision repair facility, we handle certain information unique to vehicle repair:

• Vehicle identifiers: VIN, license plate, make/model/year, mileage, and color codes needed to order parts and match paint.
• Repair documentation: written estimates, repair orders, and your signed authorization before any work begins, as required by California’s Automotive Repair Act and the Bureau of Automotive Repair (BAR).
• Insurance information: your insurer, policy and claim numbers, adjuster contact details, and deductible information, used to process your claim and coordinate direct repair (including AAA Direct Repair Network).
• Photographs and inspection records: images of damage and completed repairs kept for warranty, quality, and insurance purposes.
• Vehicle electronic/telematics data: during diagnostics, ADAS (Advanced Driver Assistance Systems) calibration, or scanning, we may access data stored in your vehicle’s onboard computers solely to diagnose, repair, calibrate, and verify the safe operation of your vehicle.
• Replaced parts: in accordance with BAR rules, you may request the return of replaced parts (except warranty, core, or hazardous-waste exchanges) at the time you authorize the repair.

4. Sources of Information

• Directly from you (in person, phone, email, text, or website forms).
• Your vehicle and its onboard systems during inspection and repair.
• Insurance companies, adjusters, and estimating platforms (e.g., CCC, Mitchell, Audatex) involved in your claim.
• Referral and direct-repair networks (e.g., AAA), tow operators, dealerships, and rental agencies.
• Our website analytics providers and service vendors.
• Publicly available sources and payment processors.

5. How We Use Information

We use personal information for the following business and commercial purposes:

• Preparing estimates, performing collision repair, painting, mechanical, glass, and calibration services, and completing your repair order.
• Ordering parts and paint and coordinating sublet or specialty services.
• Processing insurance claims and communicating with your insurer, adjuster, or direct-repair network.
• Processing payments, invoicing, and honoring our limited lifetime warranty.
• Communicating with you about your vehicle, appointments, status updates, and follow-up.
• Providing customer support, responding to inquiries, and requesting feedback or reviews.
• Maintaining records required by law, defending legal claims, and preventing fraud.
• Operating, securing, and improving our website and premises (including security cameras).
• Marketing our own services (you may opt out of marketing at any time).

We will not collect additional categories of personal information or use it for materially different, unrelated purposes without providing you notice.

6. How We Disclose Information

We may disclose personal information for a business purpose to:

• Insurance companies, adjusters, and estimating platforms to process and document your claim.
• Parts suppliers, paint vendors, and sublet repair providers to complete your repair.
• Direct-repair and referral networks (e.g., AAA) and towing/rental partners.
• Service providers and contractors that support our business (payment processing, IT, hosting, communications, analytics, marketing) under contracts limiting their use of the information.
• Professional advisors such as attorneys, accountants, and auditors.
• Government agencies or law enforcement when required by law, subpoena, or legal process, including the Bureau of Automotive Repair.
• A successor entity in connection with a merger, acquisition, or sale of assets.

7. Sale & Sharing of Personal Information

California Reflections does not sell your personal information for money, and we do not share your personal information for cross-context behavioral advertising, as those terms are defined under the CCPA. We have not sold or shared personal information in the preceding 12 months. We also do not knowingly sell or share the personal information of consumers under 16 years of age.

If this ever changes, we will update this Policy and provide a clear “Do Not Sell or Share My Personal Information” method before doing so.

8. Sensitive Personal Information

We collect a limited amount of sensitive personal information—primarily your driver’s license number and, in limited circumstances, precise geolocation for towing or vehicle pickup. We use this information only as necessary to verify identity and authorization, perform the services you request, and comply with law. We do not use or disclose sensitive personal information for purposes that would give you a right to limit its use under the CCPA.

9. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights, subject to certain exceptions:

• Right to Know / Access: request the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties to whom we disclosed it.
• Right to Delete: request that we delete personal information we collected from you.
• Right to Correct: request that we correct inaccurate personal information.
• Right to Opt Out of Sale/Sharing: though we do not sell or share personal information, you retain this right.
• Right to Limit Use of Sensitive Personal Information: to the extent applicable.
• Right to Non-Discrimination: we will not deny services, charge different prices, or provide a different level of quality because you exercised your privacy rights.

Certain information may be exempt from deletion where we must retain it to complete your repair, honor a warranty, process a payment or insurance claim, comply with legal obligations (including BAR recordkeeping), detect fraud, or exercise legal rights.

10. How to Exercise Your Rights

You may submit a request to know, delete, or correct by:

• Phone: (925) 455-4112
• Email: info@calreflections.com
• In person or by mail: 3575 First Street, Suite D, Livermore, CA 94551

Verification. To protect your privacy, we will take steps to verify your identity before responding, which may require matching information you provide with information in our records (such as name, phone number, VIN, or repair details). We will not respond to a request until identity is reasonably verified.

Authorized agents. You may use an authorized agent to submit a request. We may require the agent to provide proof of authorization and may require you to verify your identity directly with us.

Timing. We will confirm receipt of your request within 10 business days and respond within 45 calendar days, with one additional 45-day extension when reasonably necessary and with notice to you. There is no fee unless a request is excessive, repetitive, or manifestly unfounded.

11. California “Shine the Light” Rights

Under California Civil Code §1798.83, California residents may request information about our disclosure of personal information to third parties for their own direct marketing purposes. California Reflections does not disclose personal information to third parties for their direct marketing purposes. To make an inquiry, contact us using the information in Section 18.

12. Cookies, Analytics & Do Not Track

Our website may use cookies and similar technologies for essential functionality, performance, and analytics (for example, to understand how visitors use our site and to improve it). You can manage or disable cookies through your browser settings; some features may not function properly if you do.

Do Not Track. Because there is no common industry standard for interpreting “Do Not Track” browser signals, our website does not currently respond to them. We will honor recognized opt-out preference signals (such as the Global Privacy Control) where required by law.

13. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including completing your repair, servicing your warranty, resolving disputes, and complying with legal and regulatory obligations. Automotive repair records are generally retained in accordance with Bureau of Automotive Repair requirements and applicable tax, accounting, and insurance obligations, and then securely deleted or de-identified.

14. Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

15. Children’s Privacy

Our services and website are intended for adults and not for children under 16. We do not knowingly collect personal information from minors under 16. If you believe a minor has provided us with personal information, please contact us so we can delete it.

16. Third-Party Links

Our website may contain links to third-party sites (such as insurers, review platforms, or manufacturers). We are not responsible for the privacy practices of those sites; please review their policies separately.

17. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top reflects the most recent revision. Material changes will be posted on this page, and your continued use of our services or website after changes take effect constitutes acceptance of the updated Policy.

18. Contact Us

If you have questions about this Policy or how we handle your personal information, or if you would like this notice in an alternative format or language (including Spanish), please contact us using the details above.