Last updated · 2026-11-03

Privacy Policy

This explains what we collect when you book a wash, why we need it, how long we keep it, and how to have it deleted.

What we collect

Your name and mobile number, so we can confirm the booking by phone. You give them on the first step of the booking form, and they are saved when you continue, so we can help you finish a booking you started. If it is never booked, we delete them after 30 days.
The service address, any gate or parking note, and the spot you pin on the booking map (or a Google Maps link, if the map cannot load), so the crew can reach the car. The map is drawn from OpenStreetMap's servers, which see your IP address and the part of the map you look at. If you tap Use my location, your device's position only moves the map. The pin is sent to us only with your booking; if you tap Check it in Google Maps, the spot opens in Google Maps, which then sees it.
Your car's type and colour, which you give when you book: pricing follows the type, and the crew needs both to find the car.
An email address, only if you choose to give one. It is optional and the booking works without it.
Your booking details: the service, add-ons, date, arrival window, price and any notes you add — and, if you send them, photos of the car and a screenshot of your payment transfer. Those images are stored privately and only our team can see them.

No card or bank credentials. You pay after the wash through InstaPay or Vodafone Cash, in their own apps — this site never sees a card number, a bank login or your bank PIN.
Not your Your washes PIN. Your washes opens with your mobile number and the 4-digit PIN you choose after your first booking; we store only a one-way scrambled form of it, which cannot be turned back into the PIN.
Nothing you type into the booking form — your name, number, address or email — is passed to Meta, Google or any other advertiser.

A functional cookie keeps you signed in to Your washes on the phone you used, for up to 90 days, and another keeps staff signed in to the operator dashboard. Neither is used for tracking.
Your language choice is part of the page address (/ for English, /ar for Arabic), so no cookie is needed to remember it. The booking form keeps a random number in your browser's session storage so we can count how far visitors get through it. It holds nothing about you and is cleared when you close the tab.
The public pages use the Meta Pixel to measure our ads on Facebook and Instagram, and Google Analytics to count visits and see how the site is used. They set their own cookies (_fbp for Meta, _ga for Google) and tell Meta and Google which pages are visited, with the browser, device and IP address they see. When you pass the first step of the booking form, the Pixel tells Meta that a booking was started, without anything you typed; when a booking is completed, it tells Meta that a booking was made, with only its service and price. Meta and Google each handle this under their own privacy policy. You can block or clear these cookies in your browser, and choose how Meta uses its cookie in your Facebook or Instagram ad settings; the site works the same without them.

Booking records are kept for up to 24 months so we can handle follow-up, disputes and repeat service.
After that they are deleted. A cancelled booking is deleted sooner on request.

Only Lam3a staff, through a password-protected dashboard. We never sell your details and we do not share them for anyone else's purposes.
The site runs on Cloudflare, which processes and stores the data on our behalf as our hosting provider.
When a booking is made, its details — including your name, number and address — are sent to the team's own messaging app so the crew is alerted straight away. That app processes the message on our behalf and for no other purpose.

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it.
Message us on Instagram with your booking reference and we will action it.

For any question about this policy, message us on Instagram.