Privacy Policy

Effective date: November 2026 | Last updated: November 2026 Surf Thru Express Car Wash (“Surf Thru,” “we,” “our,” or “us”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our websites, purchase our services, enroll in or use a membership or rewards program, communicate with us, or visit our locations. Certain information collected through automated license plate recognition technology is addressed in our separate surfthruexpress.com/lpr-privacy.

1. Information We Collect

The information we collect depends on how you interact with Surf Thru. This may include:

Contact Information: Name, email address, telephone number, mailing address, and other contact details you provide.
Account and Membership Information: Membership status, account identifiers, Rewards Club or Text Club enrollment, program benefits, account activity, and preferences.
Transaction Information: Wash purchases, transaction dates and times, products or services purchased, refunds, and records needed to administer memberships or resolve disputes.
Payment Information: Payment details submitted when purchasing our services. Payment card information may be processed directly by third-party payment providers. The information available to Surf Thru depends on the payment method and provider.
Vehicle Information: Certain vehicle and license plate information may be collected through automated license plate recognition technology. Additional details are provided in our separate ALPR Privacy Policy.
Communications: Messages, inquiries, feedback, survey responses, and other information you provide when contacting us or participating in a promotion.
Website and Device Information: Information such as IP address, browser type, device information, pages visited, referring websites, and website usage activity, depending on the technologies in use.
Marketing and Preference Information: Your communication preferences, promotional interests, and choices regarding offers and program participation.

2. How We Collect Information.

We may collect information directly from you when you make a purchase, create or manage an account, enroll in a membership or rewards program, sign up for text messages, submit a form, or contact us. We may collect information automatically through transaction systems, website technologies, cameras, and operational systems at our locations. We may also receive information from service providers and business partners that help operate our services, process transactions, support memberships, or provide customer service.

3. How We Use Information

We may use the information we collect for legitimate business and operational purposes, including to:

Provide and improve our car wash services, memberships, and rewards programs.
Process purchases, payments, refunds, and other transactions.
Create, maintain, and manage customer accounts and memberships.
Respond to customer inquiries, requests, and service issues.
Communicate important accounts, transaction, service, and program information.
Send marketing communications, promotions, and special offers in accordance with applicable law and your preferences.
Understand customer engagement, service usage, and business performance.
Measure the effectiveness of marketing campaigns and promotions.
Detect and prevent fraud, misuse, unauthorized activity, and security incidents.
Protect our employees, customers, facilities, and property.
Comply with applicable laws, regulations, and legal obligations.
Enforce our agreements and protect our business interests.

Information collected through automated license plate recognition is used as described in our separate ALPR Privacy Policy.

4. Text Messages, Email, and Marketing Choices

If you sign up to receive Surf Thru text messages, emails, or other marketing communications, we may use the contact information and preferences you provide to send the communications you requested or that are otherwise permitted by law. You may opt out of marketing emails by using the unsubscribed instructions included in the message. For marketing text messages, follow the opt-out instructions provided in the message, such as replying STOP where supported. Even if you opt out of marketing communications, we may still send non-marketing messages related to transactions, account administration, customer service, or other necessary business communications. Message and data rates may apply to text messages. Additional program-specific terms may apply.

5. How We Disclose Information

We may disclose information to third parties when reasonably necessary to operate our business, provide services, or meet legal obligations. This may include sharing information with:

Service Providers and Contractors: Companies that help us operate our business, including payment processors, point-of-sale providers, membership and customer relationship management systems, website providers, technology vendors, communication platforms, and customer support providers.
Employees and Authorized Personnel: Employees and contractors who need information to perform their job responsibilities.
Government and Legal Authorities: Law enforcement, regulators, courts, or governmental authorities when required or permitted by applicable law, legal process, subpoena, warrant, or court order.
Security and Fraud Prevention Partners: Parties involved in investigating or addressing suspected fraud, security incidents, unlawful activity, or threats to people or property.
Business Transaction Partners: Parties involved in a potential or completed merger, acquisition, financing, restructuring, or sale of business assets, subject to applicable safeguards.
Other Parties with Your Direction or Consent: When you request or authorize us to share information, or when disclosure is otherwise permitted or required by law.

Service providers are permitted to use information for the services they perform on our behalf and are expected to protect information through appropriate contractual or other safeguards.

Automated License Plate Recognition (ALPR) information is subject to separate disclosure restrictions described in our surfthruexpress.com/lpr-privacy. The general disclosure practices in this Privacy Policy do not replace or expand the requirements of that separate policy.

6. Cookies and Website Technologies

Our websites may use cookies, pixels, analytics, or similar technologies to operate the site, remember preferences, understand site usage, and support marketing or measurement. The technologies actually used may vary by website and over time. You can manage cookies through your browser settings and, where provided, our website privacy or cookie controls. Blocking certain technologies may affect website functionality.

7. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, maintain customer accounts, administer memberships, respond to customer service requests, prevent fraud, meet legal and accounting obligations, resolve disputes, and enforce agreements. Retention periods depend on the type of information, how it is used, and applicable legal or business requirements. Information collected through automated license plate recognition is retained according to the practices described in our separate ALPR Privacy Policy.

8. How We Protect Information

Surf Thru maintains reasonable administrative, technical, operational, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction. We also expect service providers that handle information on our behalf to maintain appropriate safeguards. Although we take reasonable steps to protect information, no method of electronic transmission or storage can be guaranteed to be completely secure.

9. Your Privacy Rights and Choices

Depending on where you live and applicable privacy laws, you may have certain rights regarding your personal information. These rights may include the ability to:

Request access to certain personal information we maintain about you.
Request correction of inaccurate personal information.
Request deletion of certain personal information.
Request information about how personal information is collected, used, or disclosed.
Opt out of certain processing activities, including targeted advertising or the sale or sharing of personal information, where applicable under law.

These rights may be subject to exceptions, identity verification, and other requirements under applicable law.

To submit a privacy request, contact our Privacy Officer using the information in Section 12. We will review and respond to requests as required by applicable law. Requests involving vehicle or license plate information collected through ALPR technology are addressed in our separate ALPR Privacy Policy.

10. Third-Party Websites and Services

Our websites, advertisements, and communications may contain links to websites, applications, or services operated by third parties. Surf Thru does not control the privacy practices of those third parties. Any information you provide directly to them is subject to their own privacy policies and practices. We encourage you to review those policies before providing personal information.

11. Contact Us

If you have questions about this Privacy Policy or would like to submit a privacy request, you may contact:

Surf Thru Express Car Wash

11837 Bolthouse Drive, Suite 400

Bakersfield, CA 93311

Email: info@surfthruexpress.com

Phone: 661-369-8938

For questions specifically regarding automated license plate recognition, please refer to our separate ALPR Privacy Policy or include “ALPR Inquiry” in the subject line of your email.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, technology, or applicable laws. When updates are made, we will post the revised policy on our website and update the “Last Updated” date. Where required by law, we will provide additional notice of material changes.