1Information we collect

In short: We collect what you give us when you shop, create an account, or contact us, plus information about how you use our site.

When you buy something from our physical and/or online stores, we collect the personal information you give us as part of the sale, such as your name, address, and email address.

When we use the term "personal information," we mean information that identifies you, or that can reasonably be linked to you or your household, device, or activity. Personal information does not include information that has been anonymized or de-identified so that it can no longer reasonably be associated with you.

We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

• Contact details including your name, address, billing address, shipping address, email address, phone number, and other contact information you provide to us.
• Account information: If you create an account, we may collect information such as your username, password, account preferences, security questions, and account settings.
• Transaction and purchase information, including the products you view, add to cart, add to your wishlist, purchase, return, exchange, or cancel. We may also collect information such as transaction details, shipping and delivery information, payment method and confirmation, as well as information needed to process returns, exchanges, or other transactions.
• Payment information includes credit card, debit card, financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation, and other payment details. Payment information is generally processed by Shopify and/or third-party payment processors. We do not intend to collect or store complete payment card information ourselves except where handled through services specifically designed for secure payment processing.
• Communications with us: When you contact us, submit an inquiry, request a quote, communicate with customer service, participate in a survey, or otherwise communicate with us, we may collect the information contained in those communications.
• Usage information: When you visit or use our Services, we may automatically collect information such as: IP address, browser type and version, operating system, device type, network information, unique device or online identifiers, pages viewed, products viewed, links clicked, referring and exit pages, date and time of activity, and additional information about how you interact with and navigate the Services.

2How we collect personal information

In short: We get information directly from you, automatically when you use our site, and from the companies that help run our business.

We may collect personal information from several sources, including:

• Directly from you, such as when you create an account, place an order, request a quote, contact us, subscribe to communications, complete a survey, or otherwise provide information to us.
• Automatically through the Services, including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies.
• From service providers, including companies that provide technology, payment processing, analytics, fulfillment, shipping, customer support, marketing, advertising, or other services on our behalf.
• From business partners and other third parties, where permitted by applicable law.

3Your consent

In short: Placing an order means you agree to us using your information for that order. Marketing texts need their own separate opt-in, and you can withdraw your consent anytime.

How we obtain your consent

When you give us personal information to complete a transaction, verify your credit card, place an order, arrange a delivery, or return a purchase, you consent to us collecting and using it for that specific reason only.

Marketing text messages are handled differently. We will only send you marketing text messages if you specifically agree to receive them, by checking the SMS marketing box at checkout, signing up on our website, or signing up in our store. Providing your phone number or email address, making a purchase, or subscribing to our marketing emails does not, by itself, sign you up for marketing text messages.

How you can withdraw consent

If you opt in and later change your mind, you can withdraw your consent at any time. This covers us contacting you and the continued collection, use, or disclosure of your information. Email us at support@miamistar.net or write to us at:

4How we use personal information

In short: We use your information to run our store and fill your orders, to market to you where you've allowed it, to keep things secure, and to meet legal requirements.

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

Provide, tailor, and improve the Services. We use your personal information to provide you with the Services, including to process and fulfill orders, process payments, arrange shipping and delivery, process returns and exchanges, respond to questions and requests, process quotes and parts inquiries, notify you about your account, maintain customer accounts, remember preferences and items of interest, recommend products or services that may be relevant to you, enable you to post reviews, and improve our website, products, services, and customer experience.

Marketing and advertising.* Where permitted by law and consistent with your communication preferences, we may use personal information to send promotional emails, text messages and/or direct-mail promotions, inform you about products, sales, events, and promotions, provide personalized marketing based on items you previously have purchased or added to your cart and other activity on the Services, display advertising on our Services or on third-party websites, measure and improve the effectiveness of our marketing campaigns. We send promotional text messages only to customers who have separately opted in to receive them, as described in "Text Messaging and Mobile Information" below.

Security and fraud prevention. We use your personal information to authenticate your account, to provide a secure payment and shopping experience, detect, investigate, or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and to secure our services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password, or other access details with anyone else. If you give us your credit card information, it is encrypted using Secure Sockets Layer (SSL) technology and stored with AES-256 encryption. No method of sending data over the internet or storing it electronically is 100% secure, but we follow all PCI-DSS requirements and use additional generally accepted industry standards.

Legal and business purposes. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.

*You may opt out of promotional communications as described in the "Your Privacy Rights and Choices" section below.

5How we disclose personal information

In short: We share information with companies that help run our store, with advertising partners (usually in hashed form), and when the law requires it. Your text opt-in data is never shared for marketing.

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

Service providers. We may share information with companies that perform services on our behalf, including Shopify, payment processors, shipping and fulfillment providers, information technology providers, cloud storage providers, customer service providers, analytics providers, marketing and advertising service providers, fraud prevention and security providers, and other vendors that help us operate our business. These providers are generally permitted to use personal information only as necessary to provide services to us, subject to their applicable agreements and privacy obligations.

Text messaging service providers. We use text messaging and SMS service providers to send our order-related and marketing text messages. We share your mobile phone number, your text messaging consent records and preferences, and message content with these providers only so they can deliver messages, process opt-in and opt-out requests, and operate our messaging programs on our behalf. These providers are not permitted to use your mobile information for their own marketing or to sell it. Except for these service providers, we do not sell or share your text messaging opt-in data and consent with any third parties or affiliates for marketing or promotional purposes.

Marketing and advertising partners. Depending on the tools and services we use, we may share certain information with advertising and marketing partners to help us advertise our products, measure advertising performance, personalize advertising, or reach customers who may be interested in our products. This may include contact information, such as your email address or phone number, which is typically shared in a hashed (encoded) form. It never includes your text messaging opt-in data or consent. Certain disclosures or uses may be considered "sale," "sharing," or "targeted advertising" under privacy laws applicable in certain states. Where required by applicable law, we will provide consumers with the ability to opt out of those activities.

Shopify and Shopify-enabled services. Our Services are hosted and powered by Shopify. Information submitted through our website may be transmitted to Shopify and other providers that support the operation of our store. Shopify may process information relating to your interactions with our store to provide, maintain, secure, and improve its services and certain enhanced features. For more details, see Shopify's Terms of Service and Privacy Statement.

Shopify Payments. If you choose a direct payment gateway to complete your purchase, your credit card information may be stored by Shopify. It is encrypted to the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as needed to complete your purchase. All direct payment gateways follow the PCI-DSS standards managed by the PCI Security Standards Council, a joint effort of brands like Visa, Mastercard, American Express, and Discover. PCI-DSS requirements help make sure our store and its service providers handle credit card information securely. For more details, see Shopify's Terms of Service and Privacy Statement.

Affiliates and business transactions. We may disclose information to companies within our corporate group or in connection with a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar business transaction.

Legal requirements. We may disclose information when we believe disclosure is reasonably necessary to comply with applicable law, respond to legal process, respond to government requests, protect the rights, property, or safety of Miami Star Truck Parts, LLC, our customers, employees, or others, investigate fraud or unlawful activity, and enforce our Terms of Service or other agreements.

6Analytics, advertising, cookies & similar technologies

In short: We use Google Analytics, Meta Pixel, and cookies to run the site, understand how it's used, and support our advertising.

We use cookies, pixels, tags, and similar technologies to operate and improve our website, understand how visitors use our services, measure the effectiveness of our marketing, and support advertising activities.

Google Analytics

We use Google Analytics, a web analytics service provided by Google, to help us understand how visitors interact with our website. Google Analytics may collect information such as device and browser information, pages visited, interactions with our website, referring websites, and other information relating to website usage.

We use this information to analyze website traffic and performance, understand customer behavior, improve our website and services, and evaluate the effectiveness of our marketing activities.

Google may process information collected through Google Analytics in accordance with its own privacy policies and terms.

Meta Pixel and related technologies

We use Meta Pixel and related technologies provided by Meta to help us understand how visitors interact with our website, measure advertising performance, create or improve advertising audiences, and support our marketing and advertising activities.

These technologies may collect information about your interactions with our website, such as pages or products viewed, actions taken on the website, and information about your browser, device, or other technical identifiers.

Information collected through these technologies may be used to measure the effectiveness of our advertising and, where permitted by applicable law, support personalized or targeted advertising.

Cookies and similar technologies

Our website, Shopify, and certain third-party service providers may use cookies and similar technologies for purposes including operating and securing the website, remembering preferences and shopping-cart information, understanding website traffic and usage, measuring website and marketing performance, improving our products, services, and customer experience, and supporting advertising and remarketing activities.

Some cookies and similar technologies are necessary for the website to function, while others may be used for analytics, advertising, or other purposes.

The specific cookies and technologies used on our website may change over time as we add, remove, or update services and features.

Consent and privacy controls

Miami Star may implement cookie and privacy preference controls that allow visitors to manage certain non-essential cookies and similar technologies. Where consent is required by applicable law, we will seek consent or provide the applicable privacy choices before using technologies that require such consent.

The availability and functionality of privacy controls may vary depending on your location, applicable law, and the technologies used on our website.

When privacy preference or consent controls are made available, you may use those controls to make or change your choices regarding applicable analytics, advertising, or other non-essential technologies.

7Text messaging & mobile information

In short: Order texts and marketing texts are separate programs, each with its own consent. Reply STOP anytime to opt out.

We operate separate text messaging programs. Each requires its own consent, and they may be sent from different phone numbers.

When you give us your mobile phone number, whether on our website, in our store, by phone, or by text, we collect that number so we can contact you about your orders, quotes, parts availability, and customer service requests.

If you specifically opt in to marketing text messages by checking the SMS marketing box at checkout, signing up on our website's text message signup page, or signing up in our store, we will send you recurring automated marketing text messages about sales, special offers and discounts, product announcements, new arrivals, and back-in-stock alerts. Consent to receive marketing texts is not a condition of any purchase.

For each program, we keep a record of your consent, including the date, time, and method you used to give it, and the phone number you provided.

We share your mobile number and consent records with our text messaging service providers only so they can deliver our messages and manage your preferences on our behalf. We do not sell or share your text messaging opt-in data and consent with third parties or affiliates for marketing or promotional purposes.

How you can opt out of text messages

Reply STOP to any text message from us. Because our order texts and marketing texts may come from different phone numbers, replying "STOP" opts you out of messages from the number you replied to. You will receive one message confirming your opt-out.

To opt out of all text messages from us at once:

• Call +1-786-800-2443
• Email support@miamistar.net

Opting out of one program does not opt you out of the other unless you ask us to stop both.

8Third-party services & links

In short: Our service providers only use your information to do their job for us. Other websites and social platforms have their own privacy practices.

The Services may provide links to websites or other online platforms operated by third parties. In general, the third-party providers we use will only collect, use, and disclose your information as far as needed to perform the services they provide to us. However, some third-party providers, such as payment gateways and other payment processors, have their own privacy policies for the information we must give them to complete your purchase. We recommend that you read their privacy policies so you understand how they will handle your personal information.

Keep in mind that some providers may be located in, or have facilities in, a different jurisdiction than you or us. If you go ahead with a transaction that uses one of these providers, your information may become subject to the laws of the jurisdiction(s) where that provider or its facilities are located. We do not guarantee and are not responsible for the privacy or security of such websites, including the accuracy, completeness, or reliability of information found on these websites.

Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services. Once you leave our store's website or are sent to a third-party website or app, this Privacy Policy and our website's Terms of Service no longer apply.

9Security & retention of personal information

In short: We use reasonable safeguards, including encryption for card data, and keep your information only as long as we need it.

To protect your personal information, we take reasonable administrative, technical, and physical precautions and follow industry best practices to make sure it is not wrongly lost, misused, accessed, disclosed, altered, or destroyed.

Any information you send to us may not be secure while in transit. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.

If you give us your credit card information, it is encrypted using Secure Sockets Layer (SSL) technology and stored with AES-256 encryption. No method of sending data over the internet or storing it electronically is 100% secure, but we follow all PCI-DSS requirements and use additional generally accepted industry standards.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide you with Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.

When information is no longer reasonably necessary, we may delete, anonymize, or securely dispose of it, subject to applicable law and legitimate business requirements.

10Age of consent

In short: You must be an adult where you live to use this site, or have an adult's permission.

By using this website, you confirm that you are at least the age of majority in your state or jurisdiction of residence, or that you are the age of majority and have permitted us for any minor dependents to use this website.

11Children's data privacy

In short: Our site isn't meant for children, and we don't knowingly collect their information where the law prohibits it.

The Services are not intended to be used by children. We do not knowingly collect personal information from children in circumstances where doing so is prohibited by applicable law.

If you believe that a child has provided us with personal information in violation of applicable law, please contact us using the information below. Where required by law, we will take reasonable steps to investigate and delete the information.

As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

12Your privacy rights & choices

In short: Depending on where you live, you may be able to access, correct, delete, or get a copy of your information, and opt out of targeted ads and marketing.

Depending on where you live and subject to applicable law, you may have some or all of the rights listed below in relation to your personal information.

• Right to Know / Access: You may have a right to request confirmation of whether we process your personal information and request access to that information.
• Right to Correct: You may have a right to request that we correct inaccurate personal information we maintain about you.
• Right to Delete: You may have a right to request that we delete personal information we maintain about you, subject to applicable exceptions.
• Right of Data Portability: You may have a right to request a copy of certain personal information in a portable format and, where required, request that it be transferred to a third party, in certain circumstances and with certain exceptions.
• Right to Opt out of Sale or Sharing / Targeted Advertising: Depending on where you reside and applicable law, you may have the right to opt out of the sale or sharing of your personal information or its use for targeted advertising. See Analytics, Advertising, Cookies, and Similar Technologies above for information about our use of analytics and advertising technologies. We will honor applicable opt-out requests in accordance with applicable law.
• Right to Opt Out of Marketing Communications: We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.
• Right to Withdraw Consent: Where we rely on consent to process your personal information, you have the right to withdraw this consent. If you withdraw your consent, this will not affect the lawfulness of any processing based on your consent before its withdrawal.
• Right to Appeal: Where applicable law provides an appeal right, you may request review of our decision regarding your privacy request.

These rights are not absolute and may apply only in certain circumstances. We may deny or limit a request when permitted or required by applicable law.

If you reside in the UK or European Economic Area, and subject to exceptions and limitations provided by local law, you may exercise the following rights in addition to the rights outlined above:

• Objection to Processing and Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information for certain purposes.

Privacy complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority.

How to submit a privacy request

You may exercise any of these rights where indicated on the Services or by contacting us using the contact details provided below. We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request promptly as required under applicable law.

To learn more about how Shopify uses your personal information and any rights you may have, including rights related to data processed by Shopify, you can visit https://privacy.shopify.com/en.

Privacy request appeals

If we deny your privacy request and applicable law provides you with a right to appeal, you may appeal our decision by contacting us using the contact information below.

Please include sufficient information for us to identify your original request and explain why you believe our decision should be reconsidered.

We will review and respond to qualifying appeals within the time required by applicable law.

13International data transfers

In short: Your information may be stored or processed in other countries through Shopify and our service providers.

Because we use Shopify and other service providers, your personal information may be transferred to, stored in, or processed in countries other than the country in which you reside. Those countries may have data-protection laws that differ from the laws in your jurisdiction.

Where required by applicable law, we will use appropriate safeguards for international transfers of personal information.

14Changes to this privacy policy

In short: We may update this policy. When we do, we'll post it here and update the date at the top.

We may update this Privacy Policy from time to time to reflect changes in our business practices, Services, technology, legal requirements, or regulatory requirements. When we make changes, we will post the revised Privacy Policy on this page and update the "Last Updated" date above.

Where required by applicable law, we will provide additional notice or obtain consent for material changes. We encourage you to review this Privacy Policy periodically to remain informed about how we handle personal information.