Privacy notice
This notice explains which personal data the Kit-Go Warranty platform keeps, why, for how long, and what rights you have. It covers installers who use an account and end customers who receive a warranty link.
Who is responsible
Kit-Go S.R.L. (Romania) runs this platform and decides why and how the data is used. Contact: warranty@kit-go.com.
What data we keep
Installer accounts: company name, country, tax number; the name, email and mobile phone of the person; sign-in data (passwords are stored only as a salted fingerprint, never in clear text; passkeys and authenticator secrets); a record of actions.
Kits: the vehicle (make, model, chassis number, sometimes the plate number), the fitting checklist, and the photos taken at delivery, at inspections and for defect reports. Photos can show a plate number. Location data (GPS) is removed from the copies that are shown.
End customers: the name, phone and email that the installer entered, your language, the date you accepted the warranty conditions (with a shortened, non-reversible form of your IP address), your messages and defect reports, and your requests about your data.
Security logs keep shortened IP addresses.
Why we use it, and the legal basis
To give and manage the warranty and its inspections (performance of the warranty). To answer defect reports (the warranty and legal duties). To keep the platform secure and prevent fraud (our legitimate interest). To answer your requests about your data (legal duty). We do not use your data for advertising and we do not sell it.
Who receives it
Your installer sees only the data of its own customers and kits. Kit-Go staff who run the warranty can see what is on the platform. Providers working for us: server hosting, email delivery, SMS delivery (when enabled), and a trusted time-stamping service that receives only a fingerprint (hash) of the delivery file, never the data itself. Company numbers can be checked against official registers (ANAF, EU VIES).
Where the data is stored
On servers in the European Union. We choose providers that work inside the EU/EEA or under the safeguards that the law requires, and we update this notice if that changes.
How long we keep it
Warranty and inspection records: for the warranty period plus 36 months. After that we delete the end customer’s contact details, the plate number, and all photos and certificates; only the technical record of the kit stays (serial, chassis number, product, dates). Kits cancelled before delivery: 12 months. Installer accounts: while the company works with Kit-Go and afterwards as long as a legal duty requires.
The activity log records who did what using identifiers, without names or contact details; it is kept as an integrity record.
Encrypted backups are replaced within about 90 days. Data deleted from the live system disappears from backups as they are replaced, and is deleted again if a backup is ever restored.
Your rights
You can ask to see your data, have it corrected or deleted, restrict or object to its use, and receive it in a portable form. End customers can do this on their warranty page (“Your data”) or by writing to warranty@kit-go.com; installers write to the same address. We answer within 30 days. If we delete your contact details we can no longer send you inspection reminders; deletion does not remove the technical record of the kit or the certificate. You may complain to the data protection authority of your country; in Romania: ANSPDCP (www.dataprotection.ro).
How we protect it
Connections are encrypted. Files and secrets are encrypted in storage. Access is limited by role inside the database itself. Installers sign in with a passkey or with a password and an authenticator app; administration needs a second factor. No system is perfectly secure; if a breach affects you we will tell you as the law requires.
Version 1.