Legal information
Privacy Policy
Notice version: privacy-2026-09-20.3 · Prepared September 20, 2026
This notice explains how Alan Schack Automotive handles information through this website. It covers browsing, vehicle questions, service requests, trade-in details, and messages to the shop. Separate paperwork may apply when you buy a vehicle, obtain financing from a lender, or authorize repairs.
Information submitted by customers
When you contact us, we collect your name, the phone number or email address you provide, how you would like us to respond, and your message. Service requests may include the work needed and your preferred day or time. Vehicle questions include the listing you asked about. Trade-in submissions may include your VIN, mileage, condition, and optional photos. Photos remain private and are available only to authorized staff handling your request. Avoid including people, documents, or other personal information in your photos.
Please do not send Social Security numbers, credit applications, income, bank details, medical information, or identity documents. We do not request that information on these forms.
How it is used
We use your information to answer your questions, discuss a vehicle or trade-in, arrange service, and keep track of our follow-up. Sending a service request does not book an appointment; we will contact you to confirm. Your contact preference helps our staff respond and does not sign you up for automated marketing texts.
We also use limited technical information to protect the website, prevent duplicate or abusive submissions, and diagnose failures. Our application uses a salted hash of your network address for form abuse checks. Staff notifications contain a brief alert and a link to the protected request, rather than the full message or photos.
Website services and outside links
We use Cloudflare to host and protect the website and store files, and Supabase to store request records and manage staff sign-in. Configured email and push providers deliver staff alerts. These providers process the information needed to supply their services and may keep technical or delivery records under their own policies.
The website loads its typefaces from Google Fonts, which receives the technical connection information needed to serve those files. Staff sign-in uses session cookies. The public forms do not require a customer account.
Directions, Facebook, Google reviews, and lender links take you to other services. Their privacy policies apply when you visit them. We do not automatically send your form submission to a lender.
Website analytics and your choices
When enabled, our website analytics runs automatically on eligible visits unless you turn it off below or your browser sends a privacy preference. We record public page paths and visit times to count browsers and page views, show authorized staff the most recently active page, and send staff new-visit alerts. A random identifier saved in your browser recognizes it for up to 30 days. We do not record form entries, search terms, your screen, or browsing on other websites, or connect these records to your contact requests.
We collect analytics for visits our hosting provider identifies as coming from the United States, across all states. Visits outside the United States or with an unknown country are excluded. Location estimates can be inaccurate; we do not save your location in the analytics records. Cloudflare and Supabase support hosting and storage, and configured notification providers deliver generic staff alerts. We do not sell analytics records or use them for advertising across other websites.
Turn off analytics below to stop future collection for this browser and remove its identifier. We remember that choice until you change it or clear browser storage. Existing records expire under the periods below. We honor Global Privacy Control and Do Not Track; turning analytics on here does not override those signals. Different devices or cleared storage can count separately. The random identifier does not tell us your name.
JavaScript is required to change this browser's preference. With JavaScript disabled, visitor analytics does not run.
Page-view records are scheduled for deletion after 30 days, recent-activity records after 24 hours without activity, and abuse-control counters within two days. Abuse checks use a keyed hash of the network address, not the raw address. Generic visit-alert history follows the 90-day notification policy. Deleted records may remain in rolling backups until those backups expire. Expired browser identifiers are removed or replaced on the next eligible visit.
Retention
Customer request details and uploaded photos are scheduled for deletion after 12 months by default, even if the request is still open, unless a specific legitimate business reason for keeping them is recorded. Photos are scheduled for earlier deletion 90 days after we mark a request Closed or Not Pursued. If we change the default period, the change must be covered by the approved notice. Retention exceptions are recorded for review. Failed deletions are retried and reviewed; request details remain protected until photo deletion is verified. A minimal record of the request and its deletion remains, without your name, contact details, message, submitted vehicle details, or uploaded photos.
Routine completed background-task and resolved notification history is scheduled for cleanup after 90 days. Unresolved problems, documented holds, and records needed for recovery or to prevent duplicate actions may remain longer. Minimal completion records can remain after the detailed history is removed.
Security audit records are kept for at least 12 months. Deleted information may remain in encrypted rolling backups until those backups expire, normally within 90 days. Specifically protected recovery copies or documented retention exceptions may remain longer. Technical records held by our service providers follow the retention applicable to those services.
Questions and requests
Contact Alan@Alansautoinc.com or call 607-373-4567 with questions or an access, correction, or deletion request. You can also write to Alan Schack Automotive, 523 County Road 16, Plymouth, NY 13832. We may need to verify your identity before discussing or changing private information. Depending on where you live and the laws that apply, you may also request a copy of your information or appeal a denied request by contacting us through the same email or phone number. We will not discriminate against you for exercising applicable privacy rights. We will explain any records that must be kept for a documented business or legal reason.