Legal
Privacy Policy
How we collect, use, and protect your information.
Information we collect
We collect a small set of information when you use Get Valet Parking. This includes information you submit through the quote request form on the site, information sent automatically by your browser, and information generated by your activity on the site.
When you submit a quote request, we collect your name, email address, phone number, event date, vehicle count, venue location, and any notes you choose to include. This information is stored in our database so that local valet operators can respond with a quote.
When you sign up for the newsletter, we collect your email address and the page or section where you signed up. We do not collect your name or other personal details for newsletter delivery.
When you visit any page on the site, our hosting provider records standard server log information. This includes your IP address, the user agent string from your browser, the time of the request, the page you requested, and the page that referred you. We use these logs to detect abuse and to triage technical issues.
We use a small number of functional cookies to keep the site working. We do not run advertising trackers at this time. The cookie banner explains your choices and lets you accept all, reject all, or manage your preferences.
How we use your information
We use the information we collect to route quote requests to local valet operators in your area, send you a confirmation when your request is received, send you the operator's response by email, send you newsletter content if you have signed up, prevent fraud and abuse, and respond to legal requests when required.
We do not sell your personal information to third parties. We do not share your information with advertisers. We do not run profile-based advertising at this time.
Reviews
Writing a review is optional, and it is the only place on the site where we deliberately hold an email address in order to verify a person rather than to reply to them. Here is exactly what is collected, what is published, and when it is deleted.
| Field | What it is | Published? |
|---|---|---|
| `authorName` | The name you type on the review form | Yes, reduced to first name plus last initial |
| `authorEmail` | Your email address | Never. Not published, not sold, not shared with the operator, not shown in any public API response. Visible only to Get Valet Parking staff at editor level and above |
| `authorEmailHash` | A peppered HMAC of your email address | No. Used to enforce the one-review-per-operator-per-180-days rule and to match your review against a quote request you previously sent the same operator |
| `submitterIpHash` | An HMAC of your IP address, keyed with a secret that rotates monthly | No. Abuse detection only |
| `submitterUserAgent` | Your browser's user agent string | No. Abuse detection only |
| Rating, title, body | What you wrote | Yes |
We never store your plaintext IP address against a review. The IP is hashed at the edge, before the review row is written, and only the hash is kept. Because the hashing key rotates every month, hashes cannot be correlated across months. Once a review is in a final state (published, rejected, or removed) and more than 90 days old, the `submitterIpHash` and the `submitterUserAgent` are both nulled.
Your email address is used to send you one confirmation link, to send you a notice when your review is published or declined, and to give you a private link for editing or removing your own review. It is not added to the newsletter, not passed to the operator, and not used for marketing.
Deleting a review
You can remove your own review at any time with the private link in your confirmation email. If you no longer have the link, write to support@getvaletparking.com from the address you used and we will remove it for you. Removal takes the review off the site and out of the operator's rating; the row is retained in a removed state with its removal reason so that the moderation record stays auditable, and the email address is deleted on request.
If a review names someone else, that person can ask us to scrub their details. Under the California Consumer Privacy Act we scrub the identifying detail rather than delete the whole review, so the customer's own account of the service is preserved while the third party's information is not.
For the full explanation of how a review is verified before it is published, see How we verify reviews.
Cookies and tracking
The site uses a small set of functional cookies to remember your consent choice and to keep the lead form working through Cloudflare's bot mitigation challenge. We do not run analytics cookies at launch and we do not run advertising cookies.
If you have set the Global Privacy Control flag in your browser, we treat that signal as a request to opt out of any sharing of personal information. The cookie banner does not appear when GPC is detected. Your consent state is recorded automatically as denied for analytics and marketing categories.
You can change your cookie preferences any time by clicking the Cookies link in the footer or by clearing the gvp-consent cookie in your browser.
Your rights
If you are a resident of the European Economic Area, the United Kingdom, Switzerland, or California, you have specific rights regarding your personal information. These rights generally include the right of access, the right of rectification, the right of erasure, the right of portability, and the right to opt out of sale or sharing.
To exercise any of these rights, submit a request through the Do Not Sell or Share My Personal Information page. We will respond within 30 days. We may need to verify your identity before processing the request, and we may decline to process requests that are clearly fraudulent or repeated.
Data retention
Quote requests are retained for 24 months from the submission date. After 24 months, the records are removed from the active database in our quarterly retention review. Newsletter subscriptions are retained until you unsubscribe. A review is retained for as long as the operator's listing is live, because it is published content; the hashed IP and user agent attached to it are nulled once the review is final and more than 90 days old, and the reviewer's email address is deleted on request.
If you submit a deletion request, we will remove the matching records within 30 days, except where we are required to retain them by law or for legitimate fraud prevention.
Third-party processors
We use a small set of third-party services to operate the site. Each provider receives only the information needed to perform its function.
Cloudflare hosts the site, runs the content delivery network, and provides the bot mitigation challenge on the lead form. Cloudflare may process your IP address and request metadata. Cloudflare's privacy policy is at cloudflare.com.
Resend handles transactional email delivery, including the quote request confirmation and operator notification messages. Resend may process your email address and the contents of these messages.
Neon hosts our primary database. Neon stores the data described in this policy in encrypted Postgres tables.
Payload CMS, self-hosted on Railway, runs the application that writes to the database and processes the lead routing logic.
Meta Platforms, Inc. (Meta Model API, the variant whose data is not used to improve Meta's products) processes the text of a submitted review for automated screening before a moderator sees it. The review text, its rating, and the operator, event type and city it describes are sent; your name, your email address, and the email and IP hashes are not.
We do not use any other personal-data processors at this time. If we add one, we will update this policy and the cookie banner before processing personal information through the new provider.
Contact
For privacy questions, write to support@getvaletparking.com. For data deletion requests, use the Do Not Sell or Share My Personal Information page.