Privacy Policy
This Privacy Policy describes how Shop Expedite (the "Site") collects, uses, shares and protects information about you when you visit, register, purchase, or interact with us at https://shopexpedite.com.
It is designed to comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA / CPRA) and other applicable US state privacy laws.
1. Who We Are
Shop Expedite is an online retailer of automotive parts and accessories operating a distributed supplier fulfillment network in the United States. Contact us at support@shopexpedite.com.
2. Personal Information We Collect
| Category | Examples |
|---|---|
| Identifiers | Name, email, phone, billing & shipping address |
| Order data | Cart contents, order history, returns, RMAs |
| Payment data | Processed exclusively by Stripe; we never store full card numbers |
| Device & usage data | IP address, browser, OS, pages viewed, referrers |
| Marketing data | Marketing-email opt-in/out, ad-click identifiers (fbp/fbc), UTM tags |
| Voluntary submissions | Contact form messages, quote requests, support tickets |
3. How We Use Your Information
We use the data above to:
- Process orders, payments, returns and refunds.
- Coordinate fulfillment with our suppliers and shipping carriers.
- Send transactional emails (order confirmation, shipped notifications with tracking, delivery confirmation).
- Provide customer service and respond to inquiries.
- Detect, prevent and investigate fraud.
- Measure and improve site performance.
- Run advertising and remarketing campaigns (with your consent where legally required).
- Comply with legal obligations, court orders and tax reporting.
Legal bases (GDPR): contract performance (orders), legal obligation (tax, fraud), legitimate interest (security, analytics), consent (marketing & advertising cookies).
4. Tracking Technologies & Third-Party Tools
The Site uses the following technologies. Each is configurable from your browser and the cookie consent banner (where shown):
- Google Analytics 4 (Measurement ID maintained by us) — aggregated site analytics.
- Google Tag Manager — tag deployment container, no PII at rest.
- Google Ads / Conversion Tracking — measures campaign performance.
- Meta Pixel (Facebook & Instagram) — measures ad performance and audiences.
- Meta Conversions API (server-side) — sends hashed purchase events to Meta for attribution; emails and phone numbers are hashed with SHA-256 before transmission.
- TikTok Pixel / Events API — measures campaign performance on TikTok (when enabled).
- Stripe — secure payment processing; their privacy policy applies to payment data.
- Resend — transactional email delivery.
- Functional cookies — cart contents, session, locale, consent state.
We do not sell your personal information. We do share hashed identifiers with advertising platforms for ad measurement; under CCPA this is treated as "sharing for cross-context behavioral advertising" and you may opt out (see §10).
5. How We Share Information
We share data only with the parties needed to deliver your order:
- Fulfillment suppliers (CJ Dropshipping, Doba, Keystone, Meyer, Turn14, Premier Performance, Bodega, manufacturer-direct and future distributors) — to ship your order.
- Shipping carriers (USPS, UPS, FedEx, DHL, LTL) — for delivery and tracking.
- Payment processor (Stripe) — for card processing.
- Email & analytics providers listed in §4.
- Government, regulators and law enforcement when legally required.
- Successors in connection with a merger, acquisition or asset sale.
All processors are contractually bound to use your data only for the purposes we instruct.
6. Data Retention
We retain order, billing and tax records for the period required by US tax and consumer protection laws (typically 7 years). Marketing data is retained until you unsubscribe. Inactive customer accounts may be archived after 36 months.
7. Security
We use HTTPS encryption everywhere, signed JWT sessions, hashed passwords, role-based admin access, and least-privilege API keys. No system is 100 % secure — you remain responsible for safeguarding your account credentials.
8. Your Rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your data ("right to be forgotten").
- Port your data to another service.
- Object to processing or withdraw consent.
- Opt-out of sale/sharing for cross-context behavioral advertising (CCPA/CPRA).
To exercise any right, email support@shopexpedite.com from the email associated with your account. We respond within 30 days (45 days for complex CCPA requests).
9. Children
The Site is not directed to children under 13 (or under 16 in the EU). We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will delete it.
10. Do Not Sell or Share My Personal Information (CCPA)
To opt out of advertising-related sharing, email support@shopexpedite.com with the subject line "CCPA Opt-Out", or use your browser's Global Privacy Control (GPC) signal — we honor GPC automatically.
11. International Transfers
Some of our processors operate outside the EU/UK. Where required we rely on Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework where applicable.
12. Changes to This Policy
We may update this Privacy Policy. Material changes will be posted on this page with an updated "Last revised" date. Continued use of the Site means you accept the new version.
13. Contact
Privacy questions, requests or complaints: support@shopexpedite.com.
Last revised: June 20, 2026