Privacy policy

PRIVACY POLICY

Last Updated: February 12, 2026

At Used Engines Store, we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, share, and protect your information when you visit our website or make a purchase.

---

1. INFORMATION WE COLLECT

We collect the following types of personal information:

Personal Identification Information:
• Full name
• Email address
• Phone number
• Shipping address
• Billing address

Payment Information:
• Credit card details (processed securely through Shopify Payments)
• Payment method information

Vehicle Information:
• Year, make, and model of vehicle
• VIN (Vehicle Identification Number)
• Engine specifications and compatibility data

Order Information:
• Purchase history
• Order details and preferences
• Shipping preferences

Communication Records:
• Emails, phone calls, and chat conversations
• Customer support tickets and inquiries
• WhatsApp messages (if you contact us via WhatsApp)
• SMS text messages

Technical Information:
• IP address
• Browser type and version
• Device information
• Cookies and usage data
• Website navigation patterns

---

2. HOW WE USE YOUR INFORMATION

We use your personal information for the following purposes:

Order Fulfillment (Legal Basis: Contract):
• Process and fulfill your orders
• Verify VIN compatibility with purchased parts
• Arrange shipping and delivery
• Process payments and refunds
• Send order confirmations and shipping updates via SMS

Customer Service (Legal Basis: Contract & Legitimate Interest):
• Respond to inquiries and support requests
• Send order confirmations and shipping updates
• Provide personalized quotes and recommendations
• Handle returns, warranties, and claims
• Communicate via SMS, email, phone, or WhatsApp

Marketing Communications (Legal Basis: Consent):
• Send promotional emails (with your consent)
• Provide product recommendations
• You can opt-out anytime

Business Operations (Legal Basis: Legitimate Interest):
• Improve our website and services
• Analyze customer behavior and preferences
• Prevent fraud and unauthorized transactions
• Maintain security and prevent abuse

Legal Compliance (Legal Basis: Legal Obligation):
• Comply with tax and accounting requirements
• Respond to legal requests and court orders
• Enforce our terms and policies
• Maintain records as required by law

---

3. HOW WE SHARE YOUR INFORMATION

We share your personal information only with trusted third-party service providers:

Shipping Carriers (for order delivery):
• R&L Carriers
• FedEx Freight
• UPS Freight
• AAA Cooper Transportation

Payment Processor:
• Shopify Payments - processes all payment transactions securely
• Privacy Policy: https://www.shopify.com/legal/privacy

E-commerce Platform:
• Shopify Inc. - hosts our store and processes orders
• Privacy Policy: https://www.shopify.com/legal/privacy

SMS Service Provider (for text notifications):
• Quo - handles SMS delivery for order updates and customer notifications
• Phone numbers are NOT shared for third-party marketing

Analytics Providers (for website improvement):
• Microsoft Clarity - tracks website usage and user behavior
• Privacy Policy: https://privacy.microsoft.com/privacystatement

Customer Support Tools:
• WhatsApp (Dondy & Meta) - for customer messaging and support
• Shopify Inbox - for customer conversations
• Privacy Policy: https://www.whatsapp.com/legal/privacy-policy

Review Platforms:
• Trustpilot - for review collection and management

Social Proof Tools:
• Fomo - displays recent purchase notifications

We share information with these providers ONLY for the specific purposes listed. We do NOT sell your personal information to third parties for their marketing purposes.

Legal Disclosures:
We may disclose your information when required by law, court order, or to protect our legal rights.

Business Transfers:
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner.

---

4. DATA RETENTION

We retain your personal information for the following periods:

• Order and warranty records: Minimum 3 years (for tax and warranty purposes)
• Payment information: Deleted immediately after transaction completion (PCI-DSS requirement)
• Customer support records: 2 years after last interaction
• SMS records: 3 years (for order and warranty verification)
• Marketing consent data: Until you opt-out or withdraw consent
• Technical logs and IP addresses: 90 days
• VIN compatibility data: 3 years (for warranty verification)
• Deleted account data: 30 days (backup retention period)

After the retention period expires, data is securely deleted using industry-standard methods including cryptographic erasure and physical destruction.

---

5. YOUR RIGHTS AND CHOICES

You have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you.

Correction: Request correction of inaccurate or incomplete information.

Deletion: Request deletion of your personal information (subject to legal retention requirements).

Data Portability: Request your personal information in a portable, machine-readable format (e.g., CSV) to transfer to another service.

Restriction: Request that we limit processing of your data while you dispute its accuracy or our legal basis for processing.

Object: Object to processing of your data for marketing, analytics, or legitimate business interests.

Withdraw Consent: Withdraw consent for any processing at any time. Withdrawal doesn't affect the lawfulness of processing before withdrawal.

Opt-Out of Marketing Emails: Click "unsubscribe" in any marketing email or contact us.

Opt-Out of SMS: Reply STOP to any text message or contact us.

Cookie Control: Manage cookie preferences through your browser settings.

How to Exercise Your Rights:
1. Email: support@usedenginesstore.com with "Privacy Request" in subject line
2. Include: Your name, email address, and specific request
3. Provide proof of identity (we'll verify using email, last 4 digits of payment method, or order number)
4. We will respond within 5-10 Minutes 

If we deny a privacy request, we will explain the reason and provide information on how to appeal to the relevant supervisory authority.

---

6. SMS TEXT MESSAGING

We use SMS text messages to communicate with you about your orders and provide customer support.

SMS Provider:
• Quo - handles SMS delivery for order updates and notifications

Transactional SMS (sent automatically):
• Order confirmations
• Shipping and delivery notifications
• Customer support responses
• Warranty and return updates

Message Frequency:
• Varies based on your orders (typically 1-3 messages per order)
• Message and data rates may apply

SMS Terms:
• Standard carrier rates apply
• Carriers are not liable for delayed or undelivered messages
• You can opt-out by replying STOP to any message
• Reply HELP for assistance

Your phone number is shared ONLY with Quo for message delivery. We do NOT share your number with third parties for their marketing purposes.

We retain SMS records for 3 years for order and warranty verification purposes.

---

7. COOKIES AND TRACKING TECHNOLOGIES

We use the following types of cookies:

Essential Cookies (required for website functionality):
• Shopping cart management
• Session management
• Security and fraud prevention

Analytics Cookies:
• Microsoft Clarity - tracks website usage and performance
• Helps us improve user experience

You can manage cookie preferences through:
• Your browser settings (disable/delete cookies)
• Microsoft Clarity opt-out: https://clarity.microsoft.com/

Note: Disabling essential cookies may affect website functionality.

---

8. DATA SECURITY

We implement the following security measures to protect your information:

Technical Safeguards:
• SSL/TLS encryption for data in transit (HTTPS)
• AES-256 encryption for data at rest
• PCI-DSS compliance for payment card data
• Secure payment processing through Shopify Payments

Organizational Safeguards:
• Access controls limiting employee access to personal data
• Regular security audits and vulnerability assessments
• Employee training on data protection
• Incident response procedures

Data Breach Notification:
In the event of a data breach affecting your personal information, we will notify you within 72 hours as required by GDPR and applicable law.

Important: While we implement robust security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

---

9. INTERNATIONAL DATA TRANSFERS

Our servers and service providers are located in the United States. If you access our website from outside the U.S., your information will be transferred to, stored, and processed in the United States.

For EU/UK Residents:
• Your data is transferred to the US under Standard Contractual Clauses (SCCs) approved by the European Commission
• We have a Data Processing Agreement (DPA) in place with Shopify
• You can request a copy of the SCCs or DPA at support@usedenginesstore.com

For other international users:
• By using our website, you consent to the transfer of your information to the United States
• We ensure appropriate safeguards are in place for international transfers

---

10. CALIFORNIA RESIDENTS (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: Request disclosure of personal information collected, used, and shared in the past 12 months.

Right to Delete: Request deletion of personal information (subject to legal exceptions).

Right to Opt-Out of Sale: We do NOT sell your personal information. If this changes, we will provide an opt-out mechanism.

Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at support@usedenginesstore.com with "CCPA Request" in the subject line.

---

11. CHILDREN'S PRIVACY

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors.

If we discover we have collected data from a minor without parental consent:
• We will delete the information immediately
• We will notify the parent/guardian if contact information is available

If you believe we have collected information from a minor, contact us immediately at support@usedenginesstore.com.

---

12. AUTOMATED DECISION-MAKING AND PROFILING

We do NOT use automated decision-making or profiling that produces legal or similarly significant effects on you.

Any automated processes (e.g., fraud detection, VIN compatibility checks) are used only to assist human decision-making and do not solely determine outcomes.

---

13. THIRD-PARTY LINKS

Our website may contain links to third-party websites (e.g., social media, payment processors, shipping carriers). We are not responsible for the privacy practices of these third parties.

We recommend reviewing the privacy policies of any third-party websites you visit:
• Shopify Privacy Policy: https://www.shopify.com/legal/privacy
• Microsoft Privacy Policy: https://privacy.microsoft.com/privacystatement
• WhatsApp Privacy Policy: https://www.whatsapp.com/legal/privacy-policy

---

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.

Material Changes:
• We will notify you via email at least 30 days before implementation
• Material changes include: modifications to data sharing practices, retention periods, or user rights
• Continued use of our services after notification constitutes acceptance

Non-Material Changes:
• Posted on this page with updated "Last Updated" date
• We encourage you to review this policy periodically

---

15. CONTACT US

For questions, concerns, or requests regarding this Privacy Policy or your personal information:

📞 Phone: 307-218-7900
   Available 24 hours a day, 7 days a week (MST)

📧 Email: support@usedenginesstore.com
   Privacy requests: Include "Privacy Request" in subject line
   Response time: Within 5-10 Minutes

📍 Mailing Address:
   Used Engines Store
   30 N Gould St, Ste R
   Sheridan, WY 82801
   United States

---

16. SUPERVISORY AUTHORITY

If you are located in the European Economic Area (EEA) or United Kingdom, you have the right to lodge a complaint with your local data protection supervisory authority if you believe we have violated your privacy rights.

---

17. ACCESSIBILITY

Our website aims to comply with WCAG 2.1 AA accessibility standards. If you experience accessibility issues or need assistance accessing this Privacy Policy in an alternative format, contact us at support@usedenginesstore.com.

---

CONSENT

By using our website, making a purchase, or providing your personal information, you acknowledge that you have read, understood, and agree to this Privacy Policy.

---

Thank you for trusting Used Engines Store with your personal information. Your privacy is important to us.