Privacy Policy

This Privacy Policy explains how The Offroad Link ("The Offroad Link," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use our website, create an account, purchase products, request fitment or installation help, communicate with our support team, or apply to join our installer network.

This policy applies to our custom storefront and related services. Shopify checkout and certain third-party services may also present their own privacy notices.

Depending on how you use our services, we may collect:

• Account information: name, email address, authentication identifiers, account role, membership tier, and purchase history or lifetime-spend information. Supabase handles authentication credentials; we do not receive your password in readable form.
• Order and transaction information: products, quantities, prices, cart identifiers, order identifiers, shipping and billing details, contact information, fulfillment status, and tracking information. Shopify and its payment providers process checkout and payment information. We do not store complete payment-card numbers on our servers.
• Vehicle and fitment information: vehicle year, make, model, trim or submodel, saved-vehicle nickname, selected products and SKUs, and questions or notes about your build.
• Installation-request information: name, email, phone number, contact preference, ZIP code, requested services, selected shop, project description, timing, and budget range.
• Installer-network information: business and legal names, representative names and titles, business contact details, address and service area, website, experience, specialties, certifications, insurance and warranty representations, labor rates and estimated hours, availability, parts-delivery instructions, and agreement acceptances.
• Support information: chat messages, emails, attachments, customer-support history, and the vehicle, product, SKU, or page context included when you ask for fitment or order help.
• Device and usage information: IP address, browser and device type, referring and requested pages, timestamps, security events, error information, and interactions with our storefront or support widget.

Please do not submit payment-card numbers, Social Security numbers, medical information, or other unnecessary sensitive data through chat, project notes, or application forms.

We collect information:

• Directly from you when you create an account or submit information
• Automatically from your browser, device, and interactions with the website
• From Shopify in connection with carts, checkout, orders, payments, fraud prevention, and fulfillment
• From an installer, supplier, carrier, or manufacturer when needed for installation, delivery, returns, or warranty support

We may use personal information to:

• Operate, secure, troubleshoot, and improve the website
• Create and manage accounts, saved vehicles, and membership tiers
• Display products and provide initial vehicle-fitment results
• Review fitment questions and provide human product guidance
• Process orders, payments, delivery, returns, and warranties
• Match customers with approved installers and coordinate parts delivery or installation requests
• Review, approve, and operate the installer network
• Respond through chat, email, phone, or text based on your request and communication preference
• Prevent fraud, abuse, security incidents, and unlawful activity
• Comply with tax, accounting, legal, and regulatory obligations
• Send marketing messages where permitted and provide a way to unsubscribe

Our account system may use linked Shopify purchase history and lifetime spend to assign a membership tier and related discount. We use that information to operate the program, display progress, apply eligible benefits, and prevent misuse. Requesting deletion of an account or purchase-history link may end participation or remove benefits that depend on that history.

Before a public loyalty or financial-incentive program is launched, we will provide any additional program terms or notices required by applicable law.

We may disclose personal information to the following recipients when reasonably necessary:

• Shopify: product catalog, carts, checkout, payments, customer and order management, fraud prevention, and fulfillment. Review the Shopify Consumer Privacy Policy.
• Supabase: authentication, database, and related backend infrastructure. Review the Supabase Privacy Policy.
• Cloudflare: website hosting, content delivery, request processing, security, and operational logging. Review the Cloudflare Privacy Policy.
• Gorgias: live chat, offline messages, support tickets, and storefront support interactions. Review the Gorgias Privacy Notice.
• Approved installers: project, contact, vehicle, delivery, and order information needed to evaluate or perform an installation you request. We do not ask installers to independently approve catalog fitment.
• Suppliers, manufacturers, carriers, and professional advisers: information needed to fulfill orders, deliver products, handle returns or warranty claims, obtain professional services, or protect legal rights.
• Legal and business events: information when required by law, valid legal process, fraud or safety needs, or a merger, financing, acquisition, reorganization, or sale of business assets.

Installer business-directory information marked for public use may be published after approval. Private application contacts, internal notes, delivery instructions, and agreement records are not intended for public display.

Our storefront uses browser storage and similar technologies to keep you signed in, preserve your cart, remember a selected vehicle, operate chat, prevent abuse, and maintain website functionality. Gorgias support and campaign scripts may remember chat or storefront interactions. Shopify checkout may use its own cookies and privacy controls.

The custom storefront does not currently include Google Analytics, Meta Pixel, or similar third-party advertising pixels. Clearing or blocking browser storage may sign you out, empty the locally remembered cart or vehicle, or prevent chat from working as expected.

We do not sell personal information for money. Some privacy laws define "sale," "sharing," or "targeted advertising" broadly. Depending on your location and the Shopify or support features in use, you may have the right to opt out of certain processing. You may contact us to exercise an applicable opt-out right, and you may also review Shopify’s privacy controls.

We retain personal information only for as long as reasonably necessary for the purposes described in this policy. Retention depends on factors such as whether your account or installer relationship remains active, whether an order, installation, support, return, or warranty matter is open, and whether records are needed for tax, accounting, fraud-prevention, dispute, or legal obligations. We may retain de-identified or aggregated information that no longer reasonably identifies you.

We use administrative, technical, and organizational safeguards designed to protect personal information. These include limited administrative access, service-provider access controls, encrypted network connections, and database access policies. However, no online service or storage system can guarantee absolute security.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information; to opt out of certain sales, sharing, targeted advertising, or marketing; to limit certain processing; or to appeal a denied request.

You may update some account information through the website and unsubscribe using the link in a marketing email. To submit another request, contact us using the information below. We may verify your identity and authority before fulfilling a request, and legal exceptions may apply. We will not discriminate against you for exercising an applicable privacy right.

Our services are intended for adults and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, please contact us so we can review and delete it where appropriate.

Our providers may process information in the United States and other countries. Those locations may have privacy laws different from the laws where you live. Where required, providers use contractual or other safeguards for international transfers.

We may update this policy as our services, providers, or legal obligations change. We will post the revised policy with a new last-updated date and provide additional notice when required by law.

For questions or privacy requests, contact The Offroad Link through our contact page. The operating entity and mailing address must be added before public launch.