THIS IS A COOL FONT... ISN'T IT?

Introduction

At Gearhead Grotto (“we,” “our,” or “the Company”), your privacy and the security of your data are of paramount importance. This Privacy Policy is designed to inform you about how we collect, use, disclose, store, and protect your personal information when you interact with our products, services, software, websites, and any related applications or platforms (collectively, the “Services”).

We recognize the importance of transparency and are committed to ensuring that your personal information is handled in a lawful, fair, and transparent manner, in compliance with applicable privacy and data protection laws including, but not limited to, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), the General Data Protection Regulation (GDPR) for European residents, and other applicable U.S. federal and state laws.

By using our Services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the practices and procedures described herein. If you do not agree with our policies and practices, please refrain from using our Services.

We may update this Privacy Policy periodically to reflect changes in applicable laws, evolving business practices, or changes to our Services. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our Services after we make changes to this Privacy Policy is deemed to be acceptance of those changes, so please review it regularly.

If you have any questions or concerns about this Privacy Policy, how we handle your personal information, or your rights under applicable privacy laws, please contact us using the information provided in the “Contact Us” section of this Privacy Policy.

2. Children's Privacy Under the Age of 13  Our Services are not directed to, nor intended for, children under the age of 13 (or the minimum age required by applicable law in your jurisdiction). We do not knowingly collect personal information from children without verifiable parental consent. Use of our Services by children is strictly prohibited.

We are committed to complying with the Children’s Online Privacy Protection Act (COPPA) in the U.S. and other similar laws globally. If we become aware that we have collected or received personal information from a child under the age of 13 without proper parental consent, we will take steps to promptly delete that information from our systems.

Parents and guardians: If you believe we might have inadvertently collected personal information from your child without your consent or knowledge, please contact us immediately at drive@gearheadgrotto.com. We will work diligently to verify the information in question and delete any such data in accordance with applicable law.

3. Information We Collect  We collect information from and about you in several ways to provide and improve our Services. This includes:

Information You Provide Directly:

- Personal Identifiers: such as your name, email address, postal address, phone number, or other unique identifiers by which you may be contacted.

- Account and Transaction Information: including payment information (such as credit card details), billing and shipping addresses, purchase history, and account preferences.

- User-Generated Content: including feedback, survey responses, content you upload, and any other interactive data you choose to share with us.

- Other Voluntarily Provided Information: such as when you contact us via email, phone, or through forms on our website, or when you participate in promotions or events.


Information We Collect Automatically:

- Device and Usage Information: such as your IP address, browser type and settings, operating system, device type and identifiers (including mobile device IDs), and other technical information about the device you use to access our Services.

- Log and Usage Data: such as the pages you view, features you use, access times and dates, referring and exit pages, and your interactions with our Services (clickstream data).

- Cookies and Similar Tracking Technologies: we use cookies, web beacons, pixel tags, and similar technologies to collect information about your browsing activities, preferences, and to help us improve our Services. You can control cookies through your browser settings; however, disabling them may affect the functionality of our Services.

Information from Third Parties:

We may receive information about you from third-party sources such as:

- Business partners and affiliates who assist us in providing our Services.
- Analytics and advertising partners that help us understand usage trends and optimize marketing efforts.
- Service providers who assist with hosting, payment processing, customer service, and other business operations.

Combining Data:

We may combine the information we collect (including from third parties) to create a more complete profile of you to better tailor our Services and communications.

Important Note:

This Privacy Policy does not apply to, and we are not responsible for, the privacy practices of third-party websites or services that may be linked to or accessible through our Services. Please review those third parties’ privacy policies to understand how they collect, use, and share your information.

4. How We Use Your Information We may use the information we collect about you for a variety of purposes, including but not limited to:

- To Provide, Maintain, and Improve Our Services: 
To operate, maintain, and deliver the Services you request, and to ensure their functionality and security.

- To Process Transactions:
To process and complete your transactions, including payment processing, order fulfillment, and to provide you with related information such as confirmations, receipts, and invoices.

- To Personalize Your Experience:
To customize and tailor the content, features, and offerings we provide based on your interests, preferences, and interactions with our Services.

- To Respond to Your Inquiries and Provide Customer Support:
To communicate with you, answer your questions, and address your concerns promptly and effectively.

- To Communicate with You:
To send you administrative information, such as updates about our policies, terms, or security alerts, as well as marketing or promotional communications that we believe may be of interest to you. You can opt out of marketing emails at any time.

- To Enforce Our Agreements and Comply with Legal Obligations:
To enforce our Terms of Service, to protect our rights, and to comply with applicable laws, regulations, and legal processes.

- To Detect and Prevent Security Incidents and Fraud:
To monitor, investigate, and mitigate suspicious, fraudulent, or illegal activities, and to maintain the integrity and security of our Services.

- To Conduct Analytics and Research:
To understand usage trends, analyze how our Services are accessed and used, and to improve our business operations.

- For Business Transfers:
In the event of a merger, sale, restructuring, or other business transfer, your information may be transferred to a third party as part of that transaction.

- For Other Purposes with Your Consent:
We may use your information for other purposes not listed here, but only with your consent.5. Legal Bases for Processing (for EU/EEA Users)For users in the European Union (EU) and the European Economic Area (EEA), we process your personal data only when we have a valid legal basis under applicable data protection laws, including:

- With Your Consent:
Where you have given clear, informed, and freely given consent for us to process your personal data for one or more specific purposes.

- To Perform a Contract:
When processing is necessary to enter into or fulfill a contract with you, such as providing our Services or processing your transactions.

- To Comply with Legal Obligations:
When processing is required to comply with a legal obligation, such as record-keeping, reporting, or responding to lawful requests by public authorities.

- For Our Legitimate Interests:
When processing is necessary for our legitimate business interests (or those of a third party), provided that these interests are not overridden by your fundamental rights and freedoms. These legitimate interests include:
- Operating, managing, and improving our Services.
- Protecting the security and integrity of our Services.
- Preventing and addressing fraud, abuse, or other harmful activities.
- Conducting analytics and improving user experiences.
- Marketing and promoting our Services, where permitted by law.

- To Protect Vital Interests:
In rare cases, where processing is necessary to protect your vital interests or those of another natural person.

If you have questions about the specific legal basis on which we rely for processing your personal data, please contact us using the details provided in the “How to Contact Us” section.

6. How We Share Your Information