Privacy Policy

Version privacy-policy-2026-10-07-r5 · Effective October 7, 2026 · Last updated October 7, 2026

RR Payroll, LLC ("Royal Rinse", "we", "us" or "our") operates the Royal Rinse Car Wash locations and programs under that name, for itself and as operator for the entities that own our locations. This Privacy Policy (the "Policy") describes the information we may collect from you or that you may provide to us, and how we collect, use, keep, protect and share that information. It works together with our Customer Terms of Service (the "Terms") and, if you are a Royal Rewards member, the Royal Rewards Program Terms. Where this Policy refers to a Section of the Terms, it means the version of the Terms in force when you use our Services.

What this Policy covers

This Policy applies to information we collect through our website (https://royalrinsecarwash.com/, the "Website"), our mobile app, the payment kiosks and equipment at our car wash locations (including the Royal Rinse self-serve bay system), the cameras at our locations, our text-message programs, our loyalty and membership programs (including Royal Rewards), and when you contact us by any means. Together, these are our "Services".

Please read this Policy carefully. If you do not agree with our practices, you can choose not to use our Services. By using our Services, you agree to this Policy.

Who holds your information

Our locations are owned by separate entities, and we operate them for those entities. The payment-processor account for a location is in the name of the entity that owns it, so your card statement may show that entity's name, and your payment data for a session is held on that entity's account with our payment processor. Those entities, their affiliates, and we are among the "Royal Rinse Parties" described in Section 2 of the Terms. This Policy covers the information we and those entities hold about you through our Services, and we share it among us only as described under "Who we share your information with" below.

Changes to this Policy

This Policy may change from time to time. When we make changes, we will post the updated Policy on our Website and at our kiosks, and update the version and "last updated" date shown at the top of this page. If we make material changes to how we treat your Personal Information, we will also post a notice on our Website. Your continued use of our Services after we post changes means you accept them.

Information we collect

We may collect information that identifies you personally or that is kept in a personally identifiable form ("Personal Information"). The sections below describe what we collect and how.

Information you give us

We collect Personal Information directly from you when you provide it to us. This includes:

• your name;
• your e-mail address;
• your phone number;
• your postal address;
• your company or organization, if you provide one;
• your birthday and your vehicle's license plate, if you choose to enter them when you sign up for a membership;
• any other information you choose to give us in a form, message, membership sign-up, kiosk entry, incident report, claim, Notice of Dispute, or other contact with us.

You provide this information when you join Royal Rewards, buy a membership, sign up to receive information from us, contact us with a question or a problem, report an incident or a claim, or otherwise contact us about our Services or our business.

Information we collect at our car wash locations

When you use a bay, a kiosk, or a wash at one of our locations, we may collect:

• Your phone number, when you join Royal Rewards, request a text receipt, or text us.
• Payment card data. Card data is collected and stored by our payment processor, Stripe. We never see or store your full card number, expiration date, or security code. We keep the Stripe identifiers for your payment (such as the payment ID), the card brand (for example, Visa), and our transaction records; when we need to see the card itself, we look it up in Stripe's own records. For a membership billed through us, we may also keep the card brand and the last four digits of the card so that you can see which card renews.
• Wash session data: the location, the bay, the start and end time, the minutes used, the amount pre-authorized, and the amount charged.
• The record of your agreement to the Terms, described under "Record of your agreement to the Terms" below.
• Loyalty data: your points, your rewards, the offers shown to you, and which offers you chose.
• Video recordings, at the locations that have cameras. No location records audio. See "Cameras and video at our locations" below.
• License plates. We do not currently use license-plate recognition. A camera may incidentally record your license plate as part of its video. If we add license-plate recognition to recognise returning vehicles or to investigate damage, theft, or non-payment, we will say so in this Policy.

Record of your agreement to the Terms

When you tap your card to pay at a self-serve bay, our systems record that you agreed to the Terms: the date and time, the location and bay, the version of the Terms and of the words shown on the screen, the Stripe payment ID for your session, and, if you are a Royal Rewards member, your member account and the phone number on it as it was at that time. We keep that record with our session and payment records so that we can find your session by location, date and time, or by its Stripe payment ID. We use it to show what you agreed to and what you were shown, including in a billing question, a payment dispute, an arbitration or other legal claim, and to enforce the Terms. Access to it is limited to authorized staff and to the providers that host our systems for us. For coin or cash sessions and for visits without a payment, there is no such record; any video recording we have of your visit and the notices posted at the location are the record of your visit and of the notice you were given.

Information collected by our mobile app

The My Wash Club App (also called the My Wash Membership App) may collect location-services access, app analytics, notification-services status, your credit or debit card payment information, your payment history, and your name, phone number and e-mail address, as described in the app.

Technical information

As you navigate through and interact with our Website, our app, or the e-mails and other electronic messages we send you, we or our service providers may automatically collect traffic data, usage information, and information about your computer or mobile device, such as your browser and operating system, your wireless carrier, the geographic region you are accessing from, configuration data, clickstream analytics, and your actions and patterns when you use our Website ("Technical Information"). The technologies we use for this may include cookies stored on your browser, small embedded files known as web beacons (also called clear gifs, pixel tags and single-pixel gifs), and other embedded code.

Today our Website is a static site hosted by Netlify. It loads map tiles from OpenStreetMap and Esri, map code from a public code library (unpkg.com), and fonts from Google, and its contact and gift-card forms are processed by Netlify. Those providers receive your IP address and browser information when your browser loads the page or sends a form. Our Website sets no advertising or analytics cookies.

We collect Technical Information to manage our content and improve your use of our Website; to count and review the number of users and their usage patterns; to track key performance indicators such as pages accessed and frequency of access; to identify which browsers people use; to recognise a returning user; to store information about a user's visits; to remember a user's preferences; and for similar purposes in monitoring, operating, maintaining and improving our Website.

Information from third parties

We may also receive information about you from third-party service providers we engage, such as our payment processor confirming that a payment succeeded, and from your card issuer or the card network, such as notice that you have disputed a charge.

Cameras and video at our locations

Which locations. Some of our locations have cameras that record video. No location records audio. By entering a location that has cameras, you consent to being recorded on video, as Section 11 of the Terms says.

Not continuously monitored. Cameras are not monitored continuously. Someone may view them from time to time, but do not expect anyone to be watching or to respond to an emergency. A camera does not replace your own care or a call to 911.

What we use recordings for. Security; safety; quality; training; enforcing the Terms; investigating injuries, damage, theft, dumping, trespass, and non-payment; and resolving disputes, including payment disputes. We will not use your image or likeness in marketing without your separate consent.

How long we keep recordings. We keep routine recordings only for a limited time, after which they are overwritten. That period is currently 7 days; it may change and may differ by location. We may keep a recording longer when an injury, damage, a theft, a claim, a payment dispute, a police report, a Notice of Dispute, or a legal demand is reported to us, or when the law requires it. We are not required to keep or produce a recording unless the law requires it, so report any incident before you leave the location, as Section 3 of the Terms asks.

Who we share recordings with. Law enforcement and government authorities; our insurers and the insurers of the other Royal Rinse Parties and of the owners and lessors of our locations; card issuers and card networks in a payment dispute; our lawyers and other advisers; and the owner of the location and our affiliates that own, operate, or manage our locations. We may also share a recording to enforce the Terms, to report a crime, fraud, or a knowingly false claim, or to protect the safety of our customers, our staff, or others.

How we use your information

We may use the information we collect about you, including Personal Information, to:

• provide our Services to you, including granting wash time you have paid for and running your Royal Rewards and membership accounts;
• keep the record of your agreement to the Terms and use it as described above;
• provide you with information you request from us;
• authenticate or verify your identity in connection with your requests;
• provide support, respond to your inquiries and customer-service requests, investigate and address your concerns, and monitor and improve our responses;
• update and maintain our subscription, e-mail, text and mailing lists;
• provide you with informational content and promotional materials about our Services;
• carry out the advertising, promotional and marketing purposes described under "Marketing" below;
• run, measure and improve promotions and loyalty offers, including by testing different offers with different customers;
• detect and prevent fraud, unpaid use, and abuse of promotions;
• document and resolve payment disputes and chargebacks, including by giving the card issuer and the card network our meter, payment, session, and agreement records for the session and any video recording we have of it, as Section 4 of the Terms says;
• investigate and respond to injuries, damage, theft, dumping, and other incidents at our locations, and to insurance claims;
• help maintain the safety, security and integrity of our locations, our Website, our databases and other technology assets, and our business;
• use aggregated and de-identified information as described under "Aggregated or de-identified data" below;
• use Technical Information as described under "Technical information" above;
• notify you about changes to our Services, the Terms, or this Policy;
• respond to lawful requests for information through court orders, subpoenas, warrants and other legal processes or obligations;
• enforce any agreement between you and us, including for billing and collection, or to establish, exercise or defend legal claims, including in arbitration under Section 14 of the Terms;
• evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, in which Personal Information held by us is among the assets transferred;
• fulfil any other purpose for which you provide the information, any other purpose we describe when you provide it, or any other purpose with your consent.

Marketing

We may use your Personal Information to send you marketing and promotional information about our Services. Marketing texts require your separate opt-in. We do not use your mobile information or SMS opt-in or consent data to market the products or services of third parties, affiliates or partners, and we do not share those data with them for marketing or promotional purposes. See "Text messages", "Who we share your information with" and "Your choices" below.

Text messages

Providing a phone number, joining Royal Rewards, or accepting the Terms does not by itself authorize text messages. We send account texts (an enrollment confirmation, receipts you request, and a points-expiry notice) only if you check the optional account-texts box at Join. Consent to texts is not a condition of purchase or membership. A receipt you request on the receipt screen is sent once to the number you enter, whether or not you check that box. Requesting a text receipt without joining authorizes that receipt only. Marketing texts, including 10-day and 2-day promotional reward-expiry reminders, require your separate optional opt-in. You do not have to agree to marketing texts to buy a wash, join Royal Rewards, or hold a membership. Message frequency varies. Message and data rates may apply. Reply HELP for help. Carriers are not liable for delayed or undelivered messages. The Royal Rewards SMS Program is described in the Royal Rewards Program Terms.

Stopping texts. Reply STOP to any text to stop all texts from this sender, including receipts, enrollment confirmations, points-expiry notices and marketing texts. To withdraw only marketing-text consent while keeping authorized account texts, reply to any text saying which texts you want to stop, e-mail kennedy@royalrinsecarwash.com, or call (980) 308-2967. You may withdraw any text consent by any reasonable means, and we will honor it within ten business days. After a STOP or similar request we may send one text confirming it and, if it is unclear which texts you meant, asking you to clarify. Stopping texts does not end your membership or forfeit your points or rewards. Tell us if you change or give up a phone number you have given us.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. We do not share SMS opt-in or consent data with third parties or affiliates for their marketing or promotional purposes.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

How your phone number is stored

Our loyalty system identifies your Royal Rewards account by a keyed, one-way hash of your phone number, and also stores the number itself so that we can deliver authorized texts, provide support, honor opt-outs, and keep the record of your agreement to the Terms. That record includes a copy of the phone number on your member account as it was at the time of the session. We retain your phone number and text-consent records as needed for those purposes and as described under "How long we keep your information"; the copy in the record of your agreement is kept with that record. Access to those records is limited to authorized staff and providers performing those functions, subject to the sharing restrictions in this Policy. Phone numbers are not displayed in operational reports or exports except to authorized staff.

Third-party websites

Our Website may include links to blogs, social media and third-party websites. Those sites have their own privacy policies and terms of use and are not controlled by this Policy. Review their terms and policies before visiting them or giving them personal information. If you follow a link from our Website to a third-party site, any information you provide to that site is governed by its terms and privacy policy, not this Policy. You may be able to use social media widgets (for example, a Facebook "Like" button) on our Website. These widgets collect your IP address and the page you are visiting, and make your preference information available to third parties, under those third parties' privacy policies.

We are not responsible for the privacy or security of information you give to a third-party website, or for its information practices. A link to a third-party site is not an endorsement of that site. We are not responsible for any loss or damage from your use of a third-party website or from information you share with it.

Aggregated or de-identified data

We may convert or combine Personal Information into de-identified or aggregated data that does not identify any individual. For example, we may aggregate information about you and other customers to generate trends or insights about how our Services are used, and share those with third parties. We may use and disclose de-identified or aggregated data, including traffic and usage data that does not identify you personally, for any lawful purpose.

Tracking and "Do Not Track"

Tracking means using cookies, web beacons, or other embedded code to collect, analyze and store information about a user's behavior over time and across multiple sites, to enable interest-based ("behavioral" or "personalized") advertising.

We do not currently collect Personal Information about your online activities over time and across third-party sites for tracking purposes, and we do not currently allow third parties to collect Personal Information through our Website for their own tracking purposes. Accordingly, our Website does not respond to "do not track" signals, and does not treat users who send them differently. For information on disabling tracking technologies, see the Network Advertising Initiative's Consumer Opt-Out page and the Digital Advertising Alliance's Consumer Assistance page.

Google Analytics

We may use Google Analytics to monitor and analyze traffic and usage statistics for our Website, such as the number of visitors, how visitors find us, visitors' general geographic region, how long they stay, and the browser and operating system they use. Google Analytics may set a cookie and may collect your IP address or mobile device ID as part of this service; we do not use Google Analytics to identify you. If we use it, we use this information internally to gauge the effectiveness of our advertising and to improve our Website and our marketing.

For more information, see Google's information about its use of cookies and about its use of information from sites and apps that use Google services. You can opt out of certain Google Analytics features by updating the "Ads Settings" on your browser or device, by installing the Google Analytics Opt-out Browser Add-on, or through the Network Advertising Initiative's Consumer Opt-Out page linked above. Those opt-outs are specific to the browser you use and are not operated by us, so we cannot perform them for you.

Who we share your information with

We do not sell or lease your Personal Information to third parties. RR Payroll, LLC is the registrant for our Royal Rinse Car Wash / Royal Rewards text-message program. The mobile-information and SMS opt-in/consent non-sharing restrictions under "Text messages" apply throughout this Policy and to every disclosure category below, including a sale of our business and "With your consent". References to affiliates, partners, providers or the Royal Rinse Parties defined in Section 2 of our Customer Terms of Service do not override those restrictions or authorize those parties to use the protected data for their own marketing or promotional purposes. Messaging service providers may process mobile information and SMS consent records only on our behalf to deliver our authorized messages and administer consent, help and opt-outs; they may not use those data for their own marketing or promotional purposes. Subject to those restrictions, we permit use of your Personal Information by our own personnel and share it only in the following limited circumstances:

• The Royal Rinse Parties. We share session, payment, loyalty, agreement, and incident records, and video recordings, with the entity that owns the location you used, with our affiliates that own, operate, or manage our locations and programs, and with their insurers, lawyers, and advisers, to operate our locations and programs, to handle billing questions and disputes, to respond to incidents and claims, and to enforce the Terms. They may use that information only as this Policy allows.
• Service providers. We share Personal Information with contractors and service providers who need it to provide services to us, and who may collect it directly from you on our behalf. These include our payment processors (Stripe at our locations, and Square for gift cards bought on our Website), the text-messaging providers we engage to deliver our messages, our cloud hosting, video-security, and analytics providers, and our equipment and software vendors, including Dencar for the membership app. They may use it only to provide their services to us. Messaging providers are subject to the mobile-information and SMS opt-in/consent restrictions above; being a provider or affiliate does not authorize independent marketing use.
• Card issuers and card networks. If you dispute a charge, we may give your card issuer and the card network our meter, payment, session, and agreement records for the session and any video recording we have of it, as Section 4 of the Terms says.
• Insurers. We may share information, including video recordings, with our insurers and with the insurers of the other Royal Rinse Parties and of the owners and lessors of our locations, to report, investigate, and resolve an injury, damage, theft, or other claim.
• Law enforcement and government authorities. We may share information, including video recordings, with law enforcement and other government authorities to report a crime, fraud, a knowingly false claim, dumping, or trespass, as the Terms say, and to respond to any government or regulatory request or audit.
• Legal process. We may disclose Personal Information to comply with any court order, law or legal process, including national security and law-enforcement requirements, and in an arbitration or court case between you and a Royal Rinse Party.
• Enforcement and safety. We may disclose Personal Information to enforce or apply any agreement between you and us, or if we believe disclosure is necessary or appropriate to protect the rights, property or safety of our customers, our staff, or others.
• A sale of our business. We may disclose Personal Information to a buyer or other successor in a sale of equity or assets of any of the Royal Rinse Parties or of any location, reorganization, merger or similar transaction, whether as a going concern or as part of a bankruptcy, liquidation or similar proceeding, and during due diligence for such a transaction.
• With your consent, or for any other purpose disclosed to you when you provide the information.

Your choices

• Cookies. You can set your browser to refuse all or some cookies. If you do, some parts of our Website may not work properly.
• Marketing e-mail. If you do not want us to contact you with informational or promotional e-mail, e-mail your request to kennedy@royalrinsecarwash.com, or click "Unsubscribe" in the most recent e-mail you received from us and follow the prompts.
• Texts. Reply STOP to any text to stop all texts from this sender, including receipts, enrollment confirmations, points-expiry notices and marketing texts. You may also withdraw text consent by any reasonable means, including by e-mailing kennedy@royalrinsecarwash.com or calling (980) 308-2967; we will honor it within ten business days. To stop only marketing texts while keeping authorized account texts, reply to any text saying so, or use either contact method and ask to stop marketing texts only. Reply HELP for help. Stopping texts does not end your membership or forfeit your points or rewards.
• A marketing e-mail opt-out does not stop transactional e-mail about your account or a purchase, requested e-mail support replies, or e-mail notices about changes to our Services, the Terms, or this Policy. A sender-wide text opt-out stops all categories of texts, subject to one opt-out confirmation, one clarifying question if it is unclear which texts you meant, and replies limited to a later help or text-permission request you initiate. Those control replies do not themselves restore permission for account or marketing texts. If you reply START or UNSTOP after a STOP, or otherwise ask us to restart, we resume only the texts you had authorized before; to change which texts you receive, tell us by any of the means above.
• Cameras. You cannot opt out of video recording at a location that has cameras while you are there. If you do not want to be recorded, please do not enter that location.

See "Google Analytics" above for opting out of certain Google Analytics features.

How long we keep your information

• Account information (Royal Rewards, memberships): for as long as your account is active, and afterward as needed for the purposes below.
• Session, payment, and transaction records, and the record of your agreement to the Terms: we keep these indefinitely, because they are the record of what you paid for, what you were shown, and what you agreed to.
• Text-consent records: for at least five years after the consent ends, and longer while a claim about it is open.
• Video recordings: as described under "Cameras and video at our locations" above; currently 7 days for routine recordings.
• Backups: copies of information may remain in our backups after the live copy is deleted. Most backups are kept for about a month, and we may keep some backups indefinitely for business continuity and record-keeping.

Accessing and correcting your information

You may e-mail kennedy@royalrinsecarwash.com to request access to Personal Information you have provided to us, or to correct or delete it. For security, we may ask you for specific information to confirm your identity before we act. We evaluate requests case by case. In some cases we cannot delete Personal Information; for example, we cannot keep your account, your membership, or your Royal Rewards balance without retaining some Personal Information, so a request to delete it may require closing your account and ending those services, and we will not delete session, payment, or agreement records on request, because we keep them as described under "How long we keep your information" (this includes the phone number on a member account at the time of a session), and we will not delete a video recording we still have while it may be needed for a dispute, a claim, or a legal obligation. We may decline a change we believe would violate a law or make the information incorrect.

Nevada residents

Nevada residents who wish to exercise their sale opt-out rights under Nevada Revised Statutes Chapter 603A may submit a request by e-mail to kennedy@royalrinsecarwash.com. We do not currently sell data that triggers that statute's opt-out requirements.

California residents

The California Civil Code permits California residents with whom we have an established business relationship to request a list of the categories of Personal Information we have disclosed to third parties for their direct marketing purposes during the preceding calendar year. To make such a request, e-mail kennedy@royalrinsecarwash.com and mention that you are making a "California Shine the Light" inquiry. We do not currently disclose Personal Information to third parties for their direct marketing purposes.

Virginia residents

Where Virginia's Consumer Data Protection Act applies to us, Virginia residents may ask us to confirm whether we process their personal data, to access it, to correct it, to delete it, and to opt out of targeted advertising or the sale of personal data. We do not sell personal data and do not use it for targeted advertising. To make a request, e-mail kennedy@royalrinsecarwash.com. If we decline your request, you may appeal by replying to our answer, and we will respond within the time the law allows.

North Carolina and South Carolina residents

Our locations are in North Carolina, South Carolina, and Virginia. We offer every customer, in every state, the access, correction, and deletion requests described above, and we honor any additional rights that the law of your state gives you. If a security breach affects your Personal Information, we will notify you as the law of your state requires.

Users outside the United States

Our Services are hosted and provided from the United States. Some information may be stored on servers in other countries through cloud or similar hosting platforms. If you use our Services from Canada, the European Union, Asia or any other jurisdiction whose data laws differ from those of the United States, you consent to the transfer of your Personal Information to the United States and other jurisdictions, and to our use of it in accordance with this Policy.

Children

Our Website and Services are not intended for children under 16, and no one under 16 may provide any information to us. You must be at least 18 to agree to the Terms, to join Royal Rewards, or to buy a membership. We do not knowingly collect Personal Information from children under 16. If you are under 16, do not use or provide any information on our Website, make any purchases through it, or give us any information about yourself. If we learn we have collected Personal Information from a child under 16 without verification of parental consent, we will delete it. If you believe we might have information from or about a child under 16, contact us at kennedy@royalrinsecarwash.com.

Data security

We have implemented measures designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration and disclosure. Your card number is handled by our payment processor and is never stored by us. Phone identifiers, messaging destinations and text-consent records are handled as described under "How your phone number is stored" above. The record of your agreement to the Terms and our session and payment records can be viewed only by authorized staff.

The safety and security of your information also depends on you. If we have given you, or you have chosen, a password or code for any part of our Services, you are responsible for keeping it confidential.

The transmission of information over the Internet is not completely secure. Although we have implemented security measures we believe are adequate, we cannot guarantee the security of Personal Information transmitted to us. Any transmission is at your own risk.

Disputes. Any dispute about this Policy or about how we collect, use, keep, share, or protect your information is governed by the Terms, including the limitation of liability in Section 12, binding individual arbitration and the class-action waiver in Section 14 (unless you opted out), and Section 15.

Contact us

To ask questions or comment about this Policy or our privacy practices, e-mail kennedy@royalrinsecarwash.com or call (980) 308-2967. Our Customer Terms of Service and Royal Rewards Program Terms are published alongside this Policy.