CarPrivacy and use of data
CarPal uses the information entered in its forms to handle your enquiry. Contact: info@carpal.ee.
What information do we ask for?
A service request asks for the vehicle registration number, make, model, year, requested service, work description, county and town, and the customer’s name and email address. VIN, mileage and phone number are optional. With your browser’s permission, you may share your location to calculate approximate straight-line distances and share it with the workshops receiving your request. Location is not collected in the background. The partner form asks for company and contact person details. For a demo, we ask for a preferred meeting time. After the service, you may rate the work quality, communication and value for money.
Requests and workshop quotes
Enquiries submitted through the website form are stored in the CarPal database. Service requests are sent to active partners in the selected county; the CarPal administrator may add suitable partners from other areas if needed. Partners can see the requests assigned to their workshop and offer an appointment and price. Customers receive a personal link to view and confirm quotes. Keep that link private. A partner sees the total number of quotes but not other workshops’ names or prices. Conversation messages are visible only to the customer, the relevant workshop and the CarPal administrator.
Email notifications and feedback
When the email service is connected, notifications are sent about enquiries, quotes, bookings and cancellations. Workshop notifications include the details entered by the customer. After a job is marked as completed, the customer receives one invitation to an optional quality survey. The feedback link is valid for 30 days and allows one response per service. Responses are visible to the CarPal administrator and are not automatically published on partner pages. These notifications are not used for marketing emails. Until the email service is connected, notifications remain queued.
Access and data protection
Partners and administrators sign in using a one-time link sent to their account email address. The link is valid for 10 minutes, is tied to the browser that requested it, and can be used once. The session cookie is valid for up to 8 hours. Access is assigned by the CarPal administrator. Workshop users can access only enquiries assigned to their workshop. Administrators can manage partners, users, enquiries and feedback. The system records an activity log of important administrative actions.
Potential partner contacts
To introduce partnership opportunities, CarPal collects public car repair business information from OpenStreetMap and company websites: workshop name, area, address, services, website and public contact details. The source and verification time are recorded. The list is visible only to the CarPal administrator, and a listing does not automatically make a business a partner. The basis for using a contact is checked before sending an invitation. Each invitation has a free unsubscribe link; you can also unsubscribe or request corrections at info@carpal.ee. The address is retained on a suppression list to honour the request, and no further partnership invitations are sent to it. Service notifications relating to job requests are separate.
Automatic vehicle details
When automatic vehicle details are enabled, we send the entered registration number to the Estonian Transport Administration’s official data exchange service to find the vehicle details. We use only the vehicle data needed for the service request, not the owner’s personal details. You can correct the details before submitting. If the connection is unavailable, you can enter the details manually.
Languages and automatic translation
CarPal supports Estonian, Russian and English. Account language preferences are stored in the database and public website preferences in a language cookie. Once the DeepL API is connected, service-related free text is translated into the recipient’s preferred language. Separate name, email, phone, registration number and VIN fields are not sent to the translation service; known values are masked in the text. Other personal information included in free text may still reach the translation service. The original is retained and machine translations are labelled separately. Translations are kept in an encrypted cache for up to 30 days. If the connection is missing or fails, the original is displayed.
Correcting and deleting data
Contact info@carpal.ee to correct your data, request deletion or ask how your data is used. You can ask CarPal by email for the responsible company details, retention periods and information about deletion.
Cookies and measurement
The website does not use advertising cookies or visitor analytics. Sign-in and private preview access are managed by the hosting environment, which may use essential cookies for this purpose.