Privacy Policy

Five Star Towing (“we”, “us”, “our”) respects your privacy and is committed to protecting the personal information you share with us when you visit our website, call or text us, request or receive towing and roadside assistance, or otherwise interact with our business in Oklahoma City, Oklahoma. This Privacy & Cookie Policy explains what information we collect, why we collect it, how we use it, how we protect it, your rights, and how to contact us. By using our website or services, you consent to the practices described in this Policy.

Scope & Who This Covers

This policy applies to personal information collected through:

our website (desktop and mobile), online booking forms and web chat;
phone calls, SMS/text messages, and emails;
in-person interactions when providing towing or roadside assistance at a vehicle or property;
mobile apps or third-party platforms used to request services;
vehicle drop-off/pick-up and related service activities (e.g., storage, vehicle release).

We operate primarily in Oklahoma City, Oklahoma, and follow applicable federal and state laws. If you are a California resident, this policy explains certain California privacy rights.

Information We Collect

We collect information you provide directly and information collected automatically.

Information You Provide Directly

Contact details: name, billing and service address, phone number, email address.
Vehicle & property details: vehicle make/model/year, VIN, license plate number, location of vehicle, description of issue, photographic images you provide of the vehicle or damage.
Driver’s license and ID information: when required for identification, vehicle release, billing or legal compliance.
Payment information: payment card details, billing address, invoicing and transaction records.
Communications: recorded phone calls (where permitted by law), texts, emails, work-order notes, and messages describing the service requested or provided.
Account/booking info: account username, password (hashed), service history, timestamps, and user preferences.
Proof of ownership or authorization: when releasing vehicles or performing certain services we may collect signed release forms, proof of insurance, or comparable documentation.

Information Collected Automatically

Technical & usage data: IP address, browser type, operating system, device identifiers, pages visited, referring URL, clickstream data, and time spent on pages.
Location data: approximate location inferred from IP address, and precise location only if you opt in on a mobile app or provide location to dispatch. Precise GPS coordinates are collected only if necessary for service dispatch and with your consent.
CCTV/dashcam footage: video or photographic recordings captured by our company vehicles or facilities for safety, claims, or security.

Sensitive Data

We do not seek to collect special categories of sensitive personal data (e.g., health, racial or ethnic origin, political opinions). If such data is disclosed to us inadvertently (e.g., an audio recording that contains sensitive information), we will treat it with additional protections and delete it if retention is not necessary.

Minors

We do not knowingly collect personal information from children under 13 (or the age required by local law) without parental consent. If we learn we have collected a minor’s information without authorization, we will take steps to delete it.

How We Use Your Information

We use personal information for the following legitimate purposes:

To provide services: dispatch tow trucks, perform roadside assistance, handle vehicle storage and releases, process payments, prepare invoices and receipts.
Communications: confirm bookings, send appointment reminders, provide ETA and service updates, respond to questions and complaints.
Safety & security: review dashcam or CCTV footage, investigate accidents or claims, monitor driver safety and compliance.
Billing & legal compliance: tax reporting, insurance claims, fraud prevention, dispute resolution, and law enforcement requests as permitted by law.
Customer service & records: maintain service histories, warranties, and maintenance scheduling where applicable.
Improvements & analytics: analyze service performance, website performance, customer satisfaction, and to detect problems.
Marketing: with your explicit consent, to send promotions, newsletters, or offers. You may opt out at any time.
Business operations: with vendors and subcontractors who help deliver services (e.g., storage facilities, repair shops, recovery subcontractors).

We only retain and use data as long as necessary to fulfill these purposes.

Sharing & Disclosure of Your Information

We share personal information only as necessary and with appropriate safeguards:

Service providers & subcontractors: tow truck drivers, vehicle storage facilities, repair shops, payment processors, software providers (dispatching, CRM, scheduling, analytics). They are contractually required to protect your data and use it only for the services they perform.
Insurance companies & claim handlers: when you or we file or defend a claim.
Law enforcement & legal requests: when required by law, subpoena, court order, or to respond to emergency situations.
Business transfers: in the event of a sale, merger, reorganization or asset transfer; we will use contractual controls to protect personal data.
With your consent: where you have explicitly authorized disclosure.

We do not sell or rent your personal information for direct marketing purposes.

Third-Party Services & Payment Processing

We use third parties to help operate our business (e.g., payment processors such as Stripe, Square, or similar; mapping/dispatch providers; analytics services). These providers have their own privacy practices and we require them to process data in compliance with applicable law. Payment card data is collected and processed by PCI-compliant processors; Five Star Towing does not store full card numbers on our servers except where required and secured in limited, tokenized form.

Security Measures

We use administrative, technical, and physical safeguards designed to protect your personal information from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Measures include:

encryption in transit (TLS) and where feasible at rest;
access controls and role-based authorizations for staff;
secure servers and regularly updated software;
employee training on data protection and confidentiality;
periodic security assessments and vulnerability scanning.

While we employ reasonable safeguards, no system is completely secure. If a security incident affects personal data, we will respond according to applicable law.

Data Retention

We retain personal data only as long as required for the purposes described and to satisfy legal, tax, or insurance obligations. Typical retention periods:

Service records, invoices, and payment records: generally retained for 7 years to satisfy tax and accounting obligations.
Dashcam/CCTV footage: retained for a limited period (commonly 30 – 120 days) unless needed for an incident investigation, insurance claim, or legal requirement.
Booking histories and customer account information: retained for as long as needed to provide services and for legitimate business needs (commonly 3 – 7 years), unless you request deletion and no legal hold exists.
Marketing consent records: kept as long as you are subscribed to our marketing and for a reasonable period after to demonstrate compliance.

We will securely delete or anonymize data once it is no longer required.

Data Breach Notification

In the unlikely event of a data breach affecting personal data, we will:

take immediate steps to contain and remediate the incident;
notify affected individuals and relevant supervisory authorities as required by applicable law. We will notify as required under applicable state laws;
provide information and reasonable guidance to affected individuals on steps to protect themselves.

We will not delay necessary action to protect safety or comply with law.

Your Privacy Rights & How to Exercise Them

General U.S. Residents

You may:

request access to your personal information;
request correction of inaccurate or incomplete data;
request deletion of your personal data (subject to legal or business retention requirements);
opt out of marketing communications (unsubscribe links are provided in marketing emails or reply STOP to texts);
request restriction of processing in certain circumstances;
request a copy of data in a commonly used, machine-readable format (where practicable).

California Residents (CCPA-style rights)

If you are a California resident, you may have additional rights to:

request disclosure of categories of personal information collected, sold or disclosed for a business purpose;
request a copy of the specific pieces of personal information we hold about you;
request deletion of personal information (exceptions may apply);
not be discriminated against for exercising privacy rights.

We will respond to verifiable requests in accordance with applicable law. For California residents, we will typically respond within 45 days of receipt of a verifiable request (extensions may be allowed by law).

How to Submit Requests

To exercise these rights, contact us. Please provide sufficient information to allow us to verify your identity and to locate the data. For security, we may ask for additional verification before fulfilling requests. We will not fulfill requests that are unfounded, repetitive, or manifestly excessive.

Cookies & Similar Technologies

We and our third-party analytics and advertising partners use cookies, web beacons, and similar technologies to collect information about how you use our website and services.

Types of cookies we use

Essential cookies: required for site operation (e.g., session management and security).
Performance & analytics cookies: collect usage statistics to help improve site performance.
Functional cookies: store preferences (language, location, booking info).
Marketing cookies: used for advertising and display of relevant offers (set only with your consent).

Managing cookies

You can control cookie preferences through the cookie banner on our website on your first visit, or by adjusting browser settings. Disabling cookies may limit some functionality. For browser-specific instructions, visit www.allaboutcookies.org.

Links to Third-Party Websites

Our website may contain links to third-party websites (e.g., repair shops, partner directories). We are not responsible for the privacy practices or content of those sites. Please review the privacy policies of any third-party site you visit.

International Transfers

If your data is transferred outside your country (e.g., to service providers in other jurisdictions), we will ensure appropriate safeguards are in place (standard contractual clauses, data processing agreements, or other lawful mechanisms) and that transfers comply with applicable law.

Changes to This Policy

We may update this Policy to reflect changes in our practices, legal requirements, or business operations. When we do, we will post the revised Policy on our website with a new effective date. Material changes affecting your rights will be highlighted or notified to you as required by law.

Contact Information

If you have questions, wish to submit a data subject request, or want to lodge a complaint, contact:

Email: Dispatch@247okctowing.com
Phone: (405) 245-3162