Privacy policy

Section 1 – Who we are and scope

Southbay JDM is an independent retailer based in San Jose, California. We sell used and refurbished Japanese domestic market (JDM) and Korean engines, transmissions, front clips, and auto parts to customers across the United States, and we offer local pickup and local installation from our San Jose warehouse.

This policy covers personal information we collect when you:

• Visit or browse southbayjdm.com
• Create or use a customer account, including your orders and invoices
• Place an order online, by phone, or in person
• Book a local installation or pick up an order from our warehouse
• Contact us by phone, email, or our contact form
• Sign up to receive updates or promotions from us

Southbay JDM is the business responsible for your personal information under applicable U.S. privacy law. Our contact details are in Section 15.

Section 2 – Information we collect

We collect only the information we need to process your orders, deliver or install your parts, support you, and meet our legal obligations.

Account and contact information

Your name, email address, phone number, and account password. Passwords are stored in hashed form, and we cannot see them.

Order and transaction information

Billing and shipping addresses, items purchased, order totals, order numbers, invoices, delivery or pickup details, and records of returns, cancellations, and warranty claims.

Payment information

Payments are handled by Stripe and PayPal. We receive limited details from them, such as the card brand, the last four digits of the card, the payment method used, and a transaction ID. We never receive or store your full card number or security code.

Vehicle and support information

The year, make, model, engine code, or VIN you share to check fitment; messages you send through our contact form or by email; notes from phone calls; and photos or documents you provide for warranty or damage claims.

Device and technical information

Your IP address, browser type, device type, operating system, pages visited, referring URL, and cookie identifiers, collected automatically through server logs and cookies. See our Cookie Policy.

Marketing preferences

Whether you have opted in to or out of promotional emails or text messages, and records of that consent.

Section 3 – How we use your information

We use personal information only for the purposes below. We will not use it for an unrelated purpose without telling you first and, where required, getting your consent.

• Order fulfillment and delivery: processing your order, arranging parcel or freight shipping, scheduling local pickup or installation, and sending tracking and delivery updates. Freight deliveries of engines and transmissions may require us to share your phone number with the carrier to set an appointment.
• Payment processing: authorizing and completing payments through Stripe and PayPal, issuing refunds, and keeping financial records.
• Customer support: answering questions, checking part compatibility, handling warranty claims, returns, and cancellations under our warranty and Return & Refund Policy, and resolving disputes.
• Your account: letting you sign in and view your orders, invoices, and settings.
• Transactional messages: order confirmations, invoices, shipping notices, and warranty or installation information. These are sent regardless of your marketing preferences.
• Website operation and improvement: keeping the site secure and working, fixing errors, and understanding which pages and parts customers look for.
• Fraud prevention and legal compliance: detecting fraudulent orders and chargebacks, calculating and remitting sales tax, complying with law and lawful requests, and enforcing our Terms.
• Marketing (with consent only): if you opt in, sending news about new inventory and offers. You can unsubscribe at any time.

Section 4 – How we share information

• Shipping and freight carriers: your name, delivery address, and phone number, so they can pick up, transport, and deliver your order.
• Payment processors: Stripe (cards and Apple Pay) and PayPal receive the payment details you enter directly into their secure checkout. Their use of your data is governed by their own privacy policies.
• Technology providers: companies that host our website, store our data, deliver our email, and provide similar services. They process information only on our instructions.
• Analytics providers: if we use analytics tools such as Google Analytics, they receive browsing data collected through cookies to help us understand site usage.
• Legal and safety: law enforcement, courts, or regulators when required by a subpoena, court order, or other legal process, or when needed to prevent fraud, protect safety, or enforce our rights.

Business transfers: if Southbay JDM is involved in a merger, acquisition, or sale of assets, personal information may transfer as part of that transaction. We will give notice on this website or by email, and your information will remain subject to this policy or a successor policy with equivalent protections.

Section 5 – Cookies and tracking

We use cookies and similar technologies to keep you signed in, protect forms, remember your preferences, process payments securely, and understand how the site is used. Strictly necessary cookies cannot be switched off without breaking core features such as your cart, sign-in, and checkout. Other cookies can be managed in your browser settings.

For the full list of cookies, what they do, and how to control them, see our Cookie Policy.

Section 6 – Data retention

We keep personal information only as long as reasonably necessary for the purposes it was collected for, including legal, tax, and warranty obligations.

When a retention period ends, we delete or anonymize the information. You may ask us to delete your information sooner, but we may need to keep some records to meet legal obligations, complete a transaction, or resolve an open dispute.

Section 7 – Data security

We use reasonable technical, administrative, and physical safeguards to protect your information, including:

• Encryption in transit: all pages are served over HTTPS (TLS).
• PCI-compliant payments: card details are entered directly into Stripe’s or PayPal’s secure checkout and never pass through or rest on our servers.
• Hashed passwords: account passwords are stored using one-way hashing.
• Access controls: only staff who need customer information to do their job can access it.

No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the appropriate authorities as required by California Civil Code Section 1798.82 and the laws of your state.

Section 8 – Your privacy rights

Rights we honor for every customer: wherever you live in the United States, you may ask to access the personal information we hold about you, correct inaccurate information, delete your information (subject to legal retention requirements), and opt out of marketing at any time. We respond to verified requests within 45 days, or sooner if your state’s law requires.

California residents (CCPA / CPRA)

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, California residents have the right to:

• Know and access the categories and specific pieces of personal information we collect, the sources, the purposes, and the categories of third parties we disclose it to
• Delete personal information we collected from you, subject to legal exceptions
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information. We do not sell your information, but you can still submit a request on our Do Not Sell or Share My Personal Information page
• Limit the use of sensitive personal information. We use sensitive information, such as your account login, only to provide the services you request
• Data portability: receive a copy of your information in a portable format
• Non-discrimination: we will not deny service, charge different prices, or provide a lower quality of service because you exercised your rights

How we handle requests: we acknowledge requests within 10 business days and respond within 45 calendar days. If we need more time (up to another 45 days), we will tell you why. To protect you, we verify your identity by matching the information you give us against our records. You may use an authorized agent with your written permission. We are not required to respond to more than two requests to know from the same person in a 12-month period.

Shine the Light: California Civil Code Section 1798.83 lets California residents ask whether we disclosed personal information to third parties for their own direct marketing in the previous year. We do not make such disclosures.

Residents of other states

Residents of states with comprehensive privacy laws, including Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, may have rights to confirm, access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and profiling. We honor these requests for all U.S. customers, whether or not a specific law applies to us.

Appeals: if we decline your request, you may appeal by replying to our decision within 60 days. We will respond to your appeal within the time your state’s law requires (generally 45 to 60 days). If your appeal is denied, you may contact your state attorney general.

To exercise any right, email southbayjdmmotors@gmail.com with the subject “Privacy Request – [Your Name]” or call (669) 230-3198 during business hours. See Section 15.

Section 9 – Do Not Track and Global Privacy Control

Do Not Track: some browsers offer a “Do Not Track” setting. There is no common industry standard for how websites should respond to it, so our website does not currently change its behavior based on that signal.

Global Privacy Control (GPC): if your browser sends a GPC signal, we treat it as a valid request to opt out of the sale or sharing of personal information associated with that browser, as required by California law.

Section 10 – Children’s privacy

Our website is not directed to children under 13, and we do not knowingly collect personal information from them, in line with the Children’s Online Privacy Protection Act (COPPA). Our products are intended for adults 18 and older who can enter into binding purchases. We do not knowingly sell or share the personal information of consumers under 16.

If you believe a child has given us personal information, contact us at southbayjdmmotors@gmail.com and we will delete it promptly.

Section 11 – Third-party links and services

Our website links to or uses services run by other companies. We are not responsible for their privacy practices, and we encourage you to read their policies:

• Stripe processes card and Apple Pay payments: Stripe Privacy Policy
• PayPal processes PayPal payments: PayPal Privacy Statement
• Google provides map directions to our warehouse and, if enabled, website analytics: Google Privacy Policy
• Facebook and Instagram host our social media pages, which you reach through links on our site: Meta Privacy Policy

Section 12 – Email, SMS, and marketing

Email (CAN-SPAM Act): every marketing email we send includes our physical address and a clear unsubscribe link. We honor unsubscribe requests within 10 business days and never use misleading subject lines or headers.

Text messages (TCPA): we send marketing text messages only with your prior express written consent. Reply “STOP” at any time to opt out. Message and data rates may apply.

Transactional messages, such as order confirmations, invoices, shipping updates, and warranty communications, are not marketing and will still be sent while you have an active order or claim.

Section 13 – Payment information

• Full card number and security code: entered directly into Stripe’s or PayPal’s secure checkout. We never see or store them.
• What we keep: card brand, last four digits, payment method, and transaction ID, used for reconciliation, refunds, and dispute resolution.
• Sales tax: calculated from your shipping or pickup address at checkout and remitted to the appropriate tax authorities.

For accepted payment methods and payment timing, see our Payment Policy.

Section 14 – Changes to this policy

We may update this policy to reflect changes in our business, the services we use, or the law. When we do, we will update the date at the top of this page. If a change materially affects your rights, we will post a notice on our website or email you before it takes effect.

Continued use of our website after an update means you accept the revised policy. You may request a copy of the previous version at any time.