Privacy policy

Effective Date: January 1, 2025

CarDroi ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, share, and protect information when you visit our website at cardroi.myshopify.com (the "Site") or make a purchase from us. It also explains your rights under applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

By using our Site or providing us with your personal information, you consent to the practices described in this Privacy Policy.

1. Information We Collect

We collect several categories of personal information when you interact with our Site or place an order. The specific types of information we collect include:

1.1 Information You Provide Directly

  • Contact Information: Your name, email address (e.g., contact@cardroi.shop for business inquiries), phone number, billing address, and shipping address.
  • Order Information: Details about the products you purchase, order history, payment method information (processed securely by third-party payment providers), and transaction details.
  • Account Information: If you create an account, we collect your username, password, and any preferences you set.
  • Customer Service Information: Records of your communications with us, including emails, phone calls, and chat messages when you contact us for support or inquiries.

1.2 Information Collected Automatically

When you visit our Site, we automatically collect certain information about your device and browsing activity:

  • Device Information: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, and unique device identifiers.
  • Usage Information: Pages you visit, time and date of visits, time spent on pages, links clicked, referring website addresses, search terms used to find our Site, and other browsing behavior.
  • Location Information: General geographic location inferred from your IP address (city, state, country level).
  • Cookies and Tracking Technologies: We use cookies, web beacons, pixel tags, and similar technologies to collect information about your interactions with our Site. See Section 4 below for more details.

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

  • Service Providers: Payment processors, shipping carriers, and analytics providers who assist us in operating our business.
  • Social Media Platforms: If you interact with us through social media or use social login features, we may receive information from those platforms.
  • Marketing Partners: Advertising networks and data providers who help us understand customer interests and improve our marketing.

2. How We Use Your Information

We use the personal information we collect for the following purposes:

2.1 Order Processing and Fulfillment

  • Process and fulfill your orders, including payment processing, packaging, and shipping.
  • Communicate with you about your orders, including order confirmation, shipping updates, and delivery notifications (typically 3-5 working days for standard delivery).
  • Handle returns, refunds, and exchanges in accordance with our 30-day return policy.
  • Provide customer support and respond to your inquiries.

2.2 Site Operation and Improvement

  • Operate, maintain, and improve our Site and services.
  • Analyze usage patterns and trends to enhance user experience and Site functionality.
  • Troubleshoot technical issues and ensure Site security.
  • Develop new products, services, and features.

2.3 Marketing and Communications

  • Send you promotional emails, newsletters, and marketing materials about our products, special offers, and updates (you may opt out at any time).
  • Personalize your shopping experience and show you relevant product recommendations.
  • Conduct surveys, contests, and promotional campaigns.
  • Display targeted advertisements on our Site and third-party platforms.

2.4 Legal and Security Purposes

  • Comply with applicable laws, regulations, and legal processes.
  • Protect against fraud, unauthorized transactions, and other illegal activities.
  • Enforce our Terms of Service and other policies.
  • Protect the rights, property, and safety of CarDroi, our customers, and the public.

3. How We Share Your Information

We do not sell your personal information to third parties for their own marketing purposes. However, we share your information with the following categories of third parties to operate our business:

3.1 Service Providers

We share information with trusted third-party service providers who perform services on our behalf, including:

  • E-commerce Platform: Our Site is hosted on Shopify, which provides the technical infrastructure for our online store. Shopify may have access to your information to provide platform services. For more information, see Shopify's Privacy Policy.
  • Payment Processors: We use third-party payment processors to handle credit card and other payment transactions securely. These providers collect and process payment information directly and are subject to their own privacy policies and PCI-DSS security standards.
  • Shipping Carriers: We share shipping information (name, address, phone number, order details) with shipping carriers to deliver your orders. Standard delivery takes 3-5 working days within the United States, and shipping is FREE.
  • Email and Communication Services: Providers that help us send order confirmations, shipping updates, marketing emails, and other communications.
  • Analytics Providers: Services like Google Analytics that help us understand Site usage, visitor behavior, and marketing effectiveness. These providers may use cookies and similar technologies.
  • Marketing and Advertising Partners: Platforms that help us display advertisements, manage marketing campaigns, and track ad performance (e.g., Google Ads, Facebook Pixel).
  • Customer Support Tools: Services that help us manage customer inquiries and provide support.

3.2 Business Transfers

If CarDroi is involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your personal information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Site of any change in ownership or use of your information.

3.3 Legal Requirements and Protection

We may disclose your information when required by law or in response to valid legal processes, such as:

  • Subpoenas, court orders, or other legal requests from government authorities.
  • To protect the rights, property, or safety of CarDroi, our customers, or the public.
  • To investigate, prevent, or take action regarding suspected fraud, illegal activities, or violations of our Terms of Service.

3.4 With Your Consent

We may share your information with other third parties when you have given us explicit consent to do so.

4. Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing activity and enhance your experience on our Site.

4.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites recognize your device, remember your preferences, and improve functionality. Web beacons and pixels are tiny graphics embedded in web pages and emails that track user activity.

4.2 Types of Cookies We Use

  • Essential Cookies: Required for the Site to function properly. These cookies enable core features like shopping cart functionality, secure login, and payment processing. They cannot be disabled without affecting Site performance.
  • Performance Cookies: Collect anonymous information about how visitors use our Site (e.g., pages visited, time spent, bounce rates). We use this data to improve Site performance and user experience.
  • Functional Cookies: Remember your preferences and settings (e.g., language, region, previous selections) to provide a more personalized experience.
  • Advertising and Marketing Cookies: Track your browsing activity across websites to deliver targeted advertisements and measure ad campaign effectiveness. These cookies may be set by us or third-party advertising networks.

4.3 Third-Party Cookies

We allow certain third parties to place cookies on our Site for analytics and advertising purposes, including:

  • Google Analytics: Tracks Site usage and visitor behavior to help us understand how people use our Site.
  • Google Ads and Facebook Pixel: Enable targeted advertising and retargeting campaigns on Google and Facebook platforms.
  • Other Advertising Networks: May track your activity to show you relevant ads on other websites.

4.4 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, though this may affect Site functionality. To opt out of interest-based advertising, you can visit:

  • Digital Advertising Alliance (DAA) opt-out page: www.aboutads.info/choices
  • Network Advertising Initiative (NAI) opt-out page: www.networkadvertising.org/choices
  • Google Ads Settings: www.google.com/settings/ads

Please note that opting out of advertising cookies does not mean you will no longer see ads; it means the ads you see will be less relevant to your interests.

5. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) regarding your personal information.

5.1 Categories of Personal Information We Collect

In the preceding 12 months, we have collected the following categories of personal information from California consumers:

  • Identifiers: Name, email address, phone number, postal address, IP address, and device identifiers.
  • Commercial Information: Purchase history, order details, product interests, and shopping behavior.
  • Internet/Network Activity: Browsing history, search history, and interactions with our Site and advertisements.
  • Geolocation Data: General location inferred from IP address.
  • Inferences: Profiles reflecting preferences, characteristics, and behavior derived from the above information.

5.2 How We Use Personal Information

We use these categories of personal information for the business and commercial purposes described in Section 2 above, including order fulfillment, customer service, marketing, analytics, and fraud prevention.

5.3 Your California Consumer Rights

As a California resident, you have the following rights:

  • Right to Know: You can request that we disclose what personal information we have collected, used, disclosed, and sold about you in the past 12 months, including the categories of information, sources, purposes, and third parties with whom it was shared.
  • Right to Delete: You can request that we delete the personal information we have collected from you, subject to certain legal exceptions (e.g., to complete transactions, comply with legal obligations, or detect security incidents).
  • Right to Correct: You can request that we correct inaccurate personal information we maintain about you.
  • Right to Opt-Out of Sale or Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising. See Section 5.4 below.
  • Right to Limit Use of Sensitive Personal Information: If we collect sensitive personal information (e.g., Social Security number, precise geolocation, health data), you have the right to limit its use to purposes necessary to provide goods or services. We do not currently collect or use sensitive personal information beyond what is necessary for our business purposes.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your California privacy rights. You will not be denied goods or services, charged different prices, or provided a different level of quality solely because you exercised your privacy rights.

5.4 Do Not Sell or Share My Personal Information

Under the CCPA/CPRA, "sale" and "sharing" have broad definitions that may include disclosing personal information to third parties for certain advertising and marketing purposes, even without monetary exchange.

Sale of Personal Information: We do not sell personal information in the traditional sense (i.e., we do not exchange your data for money). However, our use of third-party advertising cookies and pixels (such as Google Ads and Facebook Pixel) may constitute "sharing" under California law because these services may use your browsing data to show you targeted ads on other websites.

Your Opt-Out Right: If you are a California resident, you have the right to opt out of such "sharing" for cross-context behavioral advertising. To exercise this right:

  • Adjust your cookie preferences using the cookie management tool on our Site (if available).
  • Use the industry opt-out tools listed in Section 4.4 above (DAA, NAI, Google Ads Settings).
  • Enable the Global Privacy Control (GPC) signal in your browser, which we will recognize as a valid opt-out request.
  • Contact us at contact@cardroi.shop with the subject line "Do Not Sell or Share My Personal Information."

We do not knowingly sell or share the personal information of consumers under 16 years of age without affirmative authorization.

5.5 Authorized Agent

You may designate an authorized agent to make requests on your behalf. To do so, you must provide the agent with written permission, and we may require you to verify your identity directly with us and confirm the agent's authority.

6. How to Exercise Your Rights

To exercise any of the privacy rights described above (including California consumer rights), please contact us using one of the following methods:

  • Email: contact@cardroi.shop (subject line: "Privacy Rights Request")
  • Phone: 9834552441
  • Mail: CarDroi, 156 Waco St, Colorado City, TX 79512, United States

When you submit a request, please provide sufficient information for us to verify your identity and process your request, including:

  • Your full name, email address, and phone number.
  • A description of the request (e.g., "I would like to delete my personal information" or "I want to