Privacy policy
Effective Date: May 5, 2025
Last Updated: May 5, 2025
1. Introduction
Welcome to Indy Pro Parts (“we,” “us,” or “our”). We are committed to protecting and respecting your privacy. This Policy explains what personal data we collect, how we use and share it, how you can exercise your rights, and how to contact us.
Email: privacy@indyproparts.com
By using our website indyproparts.com (the “Site”) or any of our services (collectively, the “Services”), you agree to this Privacy Policy.
2. Changes to This Policy
We may update this Privacy Policy periodically to reflect operational, legal, or regulatory changes. If material changes are made, we will post notice on our Site and, where required, notify you by email before changes become effective.
3. Information We Collect
We collect personal data in several ways:
A. Information You Provide Directly
- Name, email, phone number, billing and shipping addresses
- Account and order details (order ID, items purchased, payment method, shipping status)
- Support communications (messages or attachments you send us)
- Marketing preferences and consent choices
B. Information Collected Automatically
We and our partners automatically collect technical data such as:
- IP address, browser type, device identifiers, operating system
- Pages viewed, time on site, referral URLs, and usage logs
- Approximate location derived from IP address
C. Information from Third Parties
We may receive limited data from:
- Shopify Inc. (e-commerce platform)
- Payment processors (e.g., Shopify Payments, PayPal)
- Analytics and advertising partners (e.g., Google, Meta)
- Other vendors supporting our IT, shipping, and customer support operations
4. How We Use Your Information
- Process and fulfill orders, returns, and exchanges
- Provide customer support and account management
- Process payments and prevent fraud
- Improve our website and user experience
- Conduct marketing, remarketing, and performance analysis (with consent where required)
- Comply with legal and tax obligations
- Secure and protect our Services and users
5. Cookies and Tracking Technologies
We and our service providers use cookies, web beacons, and similar tools for website functionality, security, analytics, and advertising. You can manage your preferences at any time via our Cookie Preferences Center.
| Cookie Name | Vendor | Purpose | Retention |
|---|---|---|---|
| session_id | Shopify Inc. | Maintain user session | Session |
| _ga, _gid | Google LLC | Analytics | 2 years |
| _fbp | Meta Platforms, Inc. | Advertising | 90 days |
| _shopify_s | Shopify Inc. | Security / Fraud prevention | 1 year |
The full, current list of cookies is available via our Cookie Preferences Center. For Shopify’s cookie details, see the Shopify Cookie Policy.
When you first visit our Site, you will see a cookie banner allowing you to accept all, reject non-essential, or manage preferences. You can change preferences anytime via the Cookie Preferences link in the footer. We honor the Global Privacy Control (GPC) signal as an opt-out of sharing/targeted advertising for that browser or device. Except for GPC, we do not recognize other “Do Not Track” (DNT) signals.
6. Advertising and Analytics
- Google Ads / Analytics — Privacy: policies.google.com/privacy — Opt out: adssettings.google.com
- Meta Pixel (Facebook/Instagram) — Privacy: facebook.com/privacy/policy — Manage ads: facebook.com/settings/?tab=ads
Opt out of interest-based ads via the Network Advertising Initiative or the Digital Advertising Alliance. You can also adjust preferences through our Cookie Preferences Center.
7. Sharing and Disclosure of Personal Information
We may disclose personal information to:
- Service providers (payment, shipping, IT, analytics, support)
- Business and marketing partners for advertising or analytics (with consent where required)
- Affiliates within our corporate group
- Authorities or legal requests to comply with law or protect rights
- Successor entities in the event of a merger or sale
8. Do Not Sell or Share My Personal Information
We share limited data with advertising partners for cross-context behavioral advertising. California residents may opt out by using the “Do Not Sell or Share My Personal Information” link in the footer or by emailing privacy@indyproparts.com with the subject “Do Not Sell/Share.” We verify requests via email or account information and respond within 45 days (extendable once by another 45 days with notice). Authorized agents may submit requests with proof of authorization.
9. Your Privacy Rights
Depending on your location (California, Colorado, Virginia, EEA, UK and others), you may have the right to access, delete, correct, port, object/restrict processing, withdraw consent, appeal a denied request, and lodge a complaint with a supervisory authority.
How to Submit a Request: Email privacy@indyproparts.com and include your name, email address, and describe your request. We may ask for verification. We will not discriminate against you for exercising these rights.
10. Legal Bases for Processing (EU/UK)
- Contract performance — processing orders, account management
- Legitimate interests — fraud prevention, analytics, site improvement
- Consent — marketing emails and non-essential cookies
- Legal obligation — recordkeeping, tax, compliance
11. Payment Processing and Security
We do not store full payment card numbers or authentication credentials. Payments are processed by Shopify Payments and/or PayPal, both PCI-DSS compliant. All checkout data is transmitted over secure HTTPS connections. See Shopify Privacy and PayPal Privacy for details.
12. Data Retention
| Data Type | Retention |
|---|---|
| Order and transaction records | Up to 7 years (to meet tax/accounting laws) |
| Account profile information | While active + 3 years after closure unless longer required |
| Analytics / log data | Up to 2 years or until anonymized |
| Cookies / advertising IDs | As specified in cookie table or until withdrawal of consent |
After retention periods, data is deleted or anonymized securely.
13. Security and Breach Notification
We use administrative, technical, and physical safeguards to protect your information. In the event of a data breach likely to pose a risk to your rights and freedoms, we will notify you and the appropriate authorities without undue delay as required by law.
14. Automated Decision-Making and Profiling
We do not use purely automated decision-making (including profiling) that produces legal or similarly significant effects for you. If this changes, we will notify you and provide human review rights.
15. International Transfers
Your data may be processed outside your country (e.g., United States, Canada). Where required, we use Standard Contractual Clauses (SCCs) or other recognized mechanisms and apply additional safeguards (encryption, access controls) to ensure adequate protection.
16. Children’s Privacy
Our Services are not directed to children under 13 years of age (or 16 where applicable by law). We do not knowingly collect data from children. If you believe a child has provided data, contact us at privacy@indyproparts.com and we will delete it.
17. Complaints
If you believe we have not handled your data properly, contact us first at privacy@indyproparts.com. If unsatisfied, you may lodge a complaint with your local data protection authority.
Contact Information
Indy Pro Parts2230 Stafford Rd, Suite 115
Plainfield, IN 46168
United States
Customer Support: support@indyproparts.com
Shipping / Order Status: shipping@indyproparts.com
Privacy / Compliance: privacy@indyproparts.com