Privacy Policy

Information You Provide

When you create an account, place an order, or contact our support team, we collect information you provide directly to us, including: your name, email address, mailing and billing address, phone number, payment card information (processed securely via our payment processor — we never store raw card numbers), vehicle information (year, make, model) used to find compatible parts, and any messages or attachments you send to our support team.

Information Collected Automatically

When you visit our website or use our mobile app, we automatically collect certain information, including: IP address and approximate geographic location, browser type and version, operating system, referring URLs, pages visited and time spent on each page, search terms used on our site, items added to your cart, and click-through data from our emails.

Information from Third Parties

We may receive information about you from third parties, including: our payment processors (Stripe, PayPal) for fraud prevention and payment verification; advertising partners who help us reach you on other platforms; and shipping carriers who provide delivery updates and address validation services.

Order Fulfillment

We use your information primarily to process and fulfill your orders, communicate order status and shipping updates, process returns and exchanges, provide customer support, and verify your identity and prevent fraud.

Site Improvement & Personalization

We use collected data to improve our website, catalog, and product recommendations; personalize your shopping experience by surfacing relevant parts for your vehicles; conduct analytics to understand how customers use our site; and fix technical issues.

Marketing Communications

With your consent, we may send you promotional emails about sales, new products, and maintenance tips. You can unsubscribe at any time using the link at the bottom of any marketing email, or by contacting us at privacy@rockautotec.com. We do not sell your email address to third parties for their marketing purposes.

Legal & Safety

We may use or disclose your information to comply with applicable laws and regulations, respond to lawful requests from law enforcement or government agencies, protect the rights and safety of RockAutoTec, our customers, and the public, and enforce our Terms of Service.

Service Providers

We share your information with trusted third-party service providers who assist us in operating our business. These include shipping carriers (UPS, FedEx, USPS) to fulfill deliveries; payment processors (Stripe, PayPal) to handle transactions securely; email service providers for transactional and marketing emails; analytics providers (Google Analytics) to measure site performance; and fraud prevention services. All service providers are contractually obligated to use your data only as directed by us and in compliance with applicable privacy laws.

Business Transfers

If RockAutoTec is involved in a merger, acquisition, or sale of all or substantially all of its assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent website notice before your information is transferred and becomes subject to a different privacy policy.

What We Do Not Do

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We do not share your data with data brokers. We do not share your vehicle or purchase data with insurance companies without your explicit consent.

Types of Cookies We Use

Essential Cookies: Required for the site to function (shopping cart, login sessions). These cannot be disabled without breaking site functionality. Analytics Cookies: Help us understand how visitors use our site (Google Analytics). Preference Cookies: Remember your vehicle selections and display preferences. Marketing Cookies: Used to show you relevant ads on other websites (Google Ads, Facebook Pixel). You can manage marketing cookies through your browser settings or opt-out tools provided by the respective platforms.

Your Cookie Choices

You can control cookie settings through your browser's privacy settings. Note that disabling certain cookies may impact site functionality. We honor browser-level "Do Not Track" signals for analytics purposes.

How We Protect Your Data

We implement industry-standard security measures to protect your personal information, including 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers; PCI-DSS compliant payment processing (card numbers are never stored on our servers); access controls limiting employee access to personal data on a need-to-know basis; regular security audits and penetration testing; and two-factor authentication for administrative systems.

Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you by email within 72 hours of discovery (or as required by applicable law), describe the nature of the breach, and provide guidance on steps you can take to protect yourself.

Access & Correction

You have the right to access the personal information we hold about you and to request correction of any inaccurate data. You can view and update most of your account information by logging into My Account → Profile. For other requests, contact us at privacy@rockautotec.com.

Data Deletion

You may request deletion of your personal information by contacting us at privacy@rockautotec.com. We will process deletion requests within 30 days, subject to legal retention requirements (e.g., we must retain financial records for 7 years). Deletion of your account will also delete your order history from our customer-facing systems.

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, use, and share; the right to delete personal information; the right to opt-out of the sale of personal information (we do not sell your data); and the right to non-discrimination for exercising your privacy rights. To submit a CCPA request, contact us at privacy@rockautotec.com.

We retain your personal information for as long as your account is active or as needed to provide you with services. Specifically: account information is retained until you request deletion; order history is retained for 7 years for tax and legal compliance; inactive accounts are purged after 5 years of inactivity; server logs are retained for 90 days; and marketing consent records are retained for 3 years after your last interaction.

Our website is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child, please contact us at privacy@rockautotec.com.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by email (to the address associated with your account) at least 30 days before the changes take effect, or by posting a prominent notice on our website. Your continued use of our services after the effective date constitutes acceptance of the updated policy.