Privacy policy

South Bay JDM is an independent retailer in San Jose, California. We sell used and refurbished JDM and Korean engines, transmissions, front clips and auto parts across the United States, and offer local pickup and installation.

This policy explains how we handle personal information when you browse our website, create an account, place an order, use pickup or installation, contact us by phone, email or our contact form, or sign up for marketing. It is written for customers in the United States.

We only collect what we need to process orders, deliver or install parts, support you and meet our legal obligations:

• Account and contact details: name, email, phone number and account password (managed securely by Shopify).
• Order details: billing and shipping addresses, items, totals, invoices, delivery or pickup details, and any returns, cancellations or warranty claims.
• Payment details: from Shopify Payments or PayPal we receive the card brand, last four digits, payment method and transaction ID. We never receive or store full card numbers or security codes.
• Vehicle and support details: year, make, model, engine code or VIN for fitment checks, plus messages, call notes and photos or documents for claims.
• Device and usage details: IP address, browser, device and operating system, pages viewed, referring page and cookie identifiers, collected automatically.
• Marketing choices: whether you opted in or out, and the record of your consent.

We don't collect Social Security numbers, precise location, biometric or health data, or information about race, religion or political views. For high-value orders we may ask for proof of identity, and we keep only what we need for as long as we need it.

• Orders and delivery: shipping, freight scheduling, pickup or installation, and tracking updates.
• Payments: authorizing payments, issuing refunds and keeping financial records.
• Support: fitment checks, warranty claims, returns under our Return & Refund Policy and dispute handling.
• Your account: letting you sign in and view orders and settings.
• Transactional messages: order confirmations, invoices, shipping notices and warranty information, which we send whatever your marketing choices.
• Running the site: security, fixing errors and understanding how the site is used.
• Fraud prevention and the law: spotting fraud and chargebacks, calculating sales tax, answering legal requests and enforcing our terms.
• Marketing (only if you opt in): news and offers, which you can unsubscribe from at any time.

We do not sell your personal information. We share it only as needed:

• Shipping and freight carriers: your name, delivery address and phone number.
• Shopify: our e-commerce platform, which hosts the store and processes orders on our behalf.
• Payment processors: Shopify Payments (cards, Apple Pay and other wallets) and PayPal, under their own privacy policies.
• Other service providers: email delivery and similar services that act only on our instructions.
• Analytics providers: such as Google Analytics, if we use it, which receive cookie-based browsing data.
• Legal and safety reasons: when the law requires it, or to prevent fraud, protect safety or enforce our rights.
• Business transfers: if the business is merged or sold, we will tell you, and this policy or an equivalent one will continue to apply.

Cookies keep your cart and sign-in working, protect checkout, remember your choices and show us how the site is used. Strictly necessary cookies can't be switched off; you can manage the others in your browser. See our Cookie Policy for the full list.

When a period ends we delete or anonymize the information. We may have to keep some information longer because of a legal obligation, an open order or a dispute.

• Every page, including checkout, is encrypted with HTTPS (TLS).
• Card details go straight to Shopify Payments or PayPal and never sit on our systems.
• Account passwords are stored by Shopify using one-way hashing.
• Only staff who need customer information can see it.
• No system is 100% secure. If a breach affects you, we will notify you as required by California Civil Code Section 1798.82 and other applicable state laws.

All U.S. customers can ask to access, correct or delete their personal information (subject to records we must keep) and can opt out of marketing. We respond to verified requests within 45 days, or sooner if your state requires.

California residents (CCPA/CPRA) have the right to know and access, delete, correct, opt out of sale or sharing, limit the use of sensitive information, and get a portable copy of their data. We don't sell personal information, but you can still opt out on our Do Not Sell or Share My Personal Information page. We use sensitive information such as your account login only to provide the services you ask for, and we won't treat you differently for using your rights. We acknowledge requests within 10 business days and answer within 45 calendar days, with one possible extension of up to 45 more days. We verify identity by matching details against our records, and an authorized agent may act for you with your written permission. We don't have to answer more than two requests to know from the same person in 12 months. Under California's "Shine the Light" law: we don't share personal information with third parties for their direct marketing.

Residents of other states with privacy laws, including Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, may confirm, access, correct, delete or get a copy of their data and opt out of targeted advertising, sales and profiling. We honor these rights for every U.S. customer. If we deny a request, you can appeal within 60 days by replying to our decision; if the appeal is unresolved, you can contact your state attorney general.

To make a request, email southbayjdmmotors@gmail.com with the subject "Privacy Request – [Your Name]", or call (669) 230-3198 during business hours. Tell us your full name, the email on your account or order, your state, and which right you want to use.

Our site doesn't change how it works when a browser sends a Do Not Track signal. We do treat a Global Privacy Control (GPC) signal as a valid request to opt out of the sale or sharing of personal information for that browser, as California law requires.

This site isn't aimed at children under 13 and we don't knowingly collect their information (COPPA). Our products are meant for adults 18 and older, and we don't knowingly sell or share information about consumers under 16. If you think a child has given us information, email us and we'll delete it promptly.

• Shopify: store hosting, checkout and customer accounts.
• Shopify Payments: card, Apple Pay and other wallet payments.
• PayPal: PayPal payments.
• Google: map directions and, if enabled, website analytics.
• Facebook and Instagram: our social media pages, if linked from the site.

We aren't responsible for how these companies handle your information; please read their privacy policies.

• Email (CAN-SPAM): every marketing email includes our physical address and an unsubscribe link. We act on unsubscribe requests within 10 business days.
• Text messages (TCPA): we send marketing texts only with your prior express written consent. Reply STOP to opt out; message and data rates may apply.
• Transactional messages about orders, invoices, shipping and warranty claims continue while you have an active order or claim.

• You enter full card numbers and security codes only in the Shopify Payments or PayPal checkout; we never see or store them.
• We keep the card brand, last four digits, payment method and transaction ID to reconcile payments, issue refunds and handle disputes.
• Sales tax is calculated from your shipping or pickup address and paid to the tax authorities.
• See our Payment Policy for accepted payment methods and timing.

We may update this policy when our business, services or the law change, and we'll update the date at the top. We'll announce material changes on the website or by email before they take effect. Using the site after an update means you accept it. Ask us if you'd like a previous version.

Email southbayjdmmotors@gmail.com with the subject "Privacy Request – [Your Name]", call (669) 230-3198 or (510) 571-7739, or write to 226 Phelan Ave, Unit G, San Jose, CA 95112. This policy is governed by California law; see our Legal Notice for business details and how disputes are resolved.