Last updated: January 2025
We collect information you provide directly: name, email address, phone number, shipping address, and payment proof uploads. We also collect order history and usage data (pages visited, search queries) to improve your experience.
Your data is stored securely on MongoDB Atlas with encryption at rest. Passwords are hashed using bcrypt. Payment proof images are stored on Cloudinary with secure access controls. We never store full payment details (card numbers, bank account numbers) — only confirmation screenshots you choose to upload.
We do not sell your personal information. We share data only with: shipping carriers (to deliver your order), cloud service providers (Cloudinary for images, MongoDB Atlas for database), and payment platforms where required to verify transactions. All third parties are bound by confidentiality agreements.
We use essential cookies for authentication (JWT tokens stored in memory and httpOnly cookies). We use localStorage for cart persistence and user preferences (dark mode). We do not use advertising cookies or third-party tracking pixels.
You may request access to, correction of, or deletion of your personal data at any time by contacting us. You may also deactivate your account from your dashboard settings. We will respond to data requests within 30 days.
For privacy-related inquiries, contact us at our contact page or email privacy@shiftautosupply.com.