Privacy policy

Who we are

S 3 X Y Auto Service is an independent auto repair shop at 24002 Via Fabricante, Suite 508, Mission Viejo, CA 92691. This policy covers s3xyautoservice.com. When it says "we", "us" or "our", it means the shop.

Information you send us

The site has two forms. You need to give a name and either a phone number or an email address. The other fields are optional.

• Contact form (Location & Contact page): name, phone, email, the best way to reach you, and your message.
• Service request form (the Schedule page's backup form): name, phone, email, the best way to reach you, your Tesla's model, year and mileage, the services you're interested in, days and times that suit you, whether you only want a quote, and your description of the problem.

When you send a form, it goes to the shop's email inbox, which uses Google's Gmail service. A copy is also saved as a text file in a private folder on our web server, outside the public part of the site, in case an email goes missing. We keep these messages until we no longer need them to serve you.

We use what you send to reply, set up appointments, prepare quotes and work on your car. None of it is sent to Google Analytics.

Online scheduling by Mitchell 1

The Schedule page shows an appointment form run by Mitchell 1, an auto repair software company. It loads from Mitchell 1's own servers (mitchell1crm.com and onlineappointments.mitchell1.com), not ours. What you type into it goes to Mitchell 1, which passes your request to the shop. Mitchell 1 sets its own cookies when that form loads. Their handling of your information is covered by Mitchell 1's privacy policy (Mitchell 1 is part of Snap-on, so the link opens Snap-on's policy). We can't see what you type into it, so Google Analytics can't either.

Spam protection

To keep automated spam out, the forms use:

• a hidden field that people don't see but spam bots tend to fill in,
• a timer that notes how long the form was open before it was sent (we use this only for the check and don't save it),
• a limit on how many messages one connection can send. For this, our server saves a scrambled, one-way version (a "hash") of your IP address together with the times of your recent submissions. We can't turn the hash back into your IP address. Times older than 24 hours are ignored, and they're cleared the next time that connection sends a form.

Information collected automatically

Like nearly every website, ours is hosted by a web hosting company, A2 Hosting. Their servers keep standard logs of visits: your IP address, the date and time, the page you asked for, the page that sent you, and your browser and device type. These logs are used to run the site, fix problems and block attacks. The host's security systems may also use IP addresses to stop abuse. The logs are kept under the host's standard settings.

Analytics: Google Tag Manager and Google Analytics

We use Google Analytics 4, loaded through Google Tag Manager, to see how people use the site so we can improve it. Google Analytics sets two first-party cookies on our domain, _ga and _ga_<ID>, which last up to two years and let it tell repeat visits from new ones. It collects:

• the pages you view and the page or site that sent you,
• your approximate location (city or region), worked out from your IP address. Google says Google Analytics 4 doesn't log or store IP addresses,
• your device type, operating system, browser and screen size,
• three events we set up ourselves: a click on a Schedule button or link (or a click into the Mitchell 1 scheduler), a click on a phone number (and whether it was in the header, footer or page body), and a successfully sent form, recorded only as "contact" or "service request".

These events never include your name, phone number, email address, message, vehicle details or anything else you type into a form. We have Google Signals and advertising features switched off, and Google Analytics isn't linked to any advertising account.

We also use Google Search Console to see how the site shows up in Google search. It works from Google's own search data and doesn't put any cookies or code on our pages.

Your choices about analytics

• Global Privacy Control: if your browser sends a Global Privacy Control signal, our pages don't load Google Tag Manager or Google Analytics at all.
• Browser settings: you can block or delete cookies in your browser. The site still works without them.
• Google's opt-out: Google offers a Google Analytics opt-out browser add-on.

Other services on our pages

Some parts of our pages come from other companies. When your browser loads them, those companies receive your IP address and basic browser details, and they may set their own cookies:

• Google Fonts: the site's typeface, Saira, loads from Google's font servers (fonts.googleapis.com and fonts.gstatic.com) on every page.
• Google Maps: the map on the Location & Contact page is a Google Maps embed. Google may set cookies and collect data when it loads.
• Mitchell 1: the scheduler on the Schedule page, described above.

Google's handling of data, including Google Analytics, Tag Manager, Fonts and Maps, is covered by the Google Privacy Policy. The link to our online diagnostic tool, What's Wrong With My Tesla, takes you to a separate site with its own privacy terms. Nothing from that site loads on ours.

Who we share information with

• The people at the shop who reply to you and work on your car.
• The companies that keep the site, email and statistics running for us: A2 Hosting (web hosting and the saved form copies) and Google (Gmail, Analytics, Tag Manager, Fonts and Maps), plus Mitchell 1 for anything you send through its scheduler.
• Anyone we're required to share with by law, for example in response to a valid legal request.

We don't sell your personal information, and we don't share it for cross-context behavioral advertising. Google Analytics works for us as a service provider to measure how our own site is used. We don't use it for advertising, and our analytics data isn't shared with Google's advertising products. We also honor Global Privacy Control, as described above.

Your California privacy rights

If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you the right to ask us to:

• Know what personal information we have about you, where it came from, why we have it and who we've shared it with,
• Delete personal information we have about you,
• Correct personal information about you that's wrong.

We won't treat you differently for using these rights. To make a request, call us or write to us at the address below. Tell us what you're asking for and the name, phone number or email you used, so we can find your information and confirm the request is yours. Someone you authorize can make a request for you. In that case we may ask for proof that they're allowed to act for you. We aim to respond within 45 days. If we have to keep some information, for example because the law requires it, we'll tell you.

Children

This site is meant for vehicle owners and isn't directed at children under 13. We don't knowingly collect personal information from children under 13. If you believe a child has sent us information, contact us and we'll delete it.

Keeping information safe

The whole site uses HTTPS, so what you send is encrypted on the way to our server. Saved form copies sit in a private folder that isn't reachable from the web. Only the shop can get to the saved copies and the shop's inbox. No website or email system is perfectly secure, so please don't send payment card numbers or other sensitive details through the forms.

Changes to this policy

If we change how we handle information, we'll update this page and the effective date at the top.

Contact us

S 3 X Y Auto Service
24002 Via Fabricante, Suite 508
Mission Viejo, CA 92691

Phone: (949) 741-7399 ((949) 741-S3XY)

For privacy requests, call us or mail a letter to the address above marked "Privacy request".