Privacy policy

Scope of policy. This Privacy Policy and Data Governance Standards (the "Policy") describes how Petrol Head Motor Company LLC, based in Fort Lauderdale, Florida (the "Company," "we," "us," or "our"), collects, uses, and protects personal information. This Policy applies to our website, platform, and related services.

Platform overview. We operate a platform that enables users to discover, list, and engage with cars, motorcycles, and related collectibles. We are committed to maintaining data integrity and transparency in how user information is handled.

Integrated legal framework. This Policy forms part of the overall legal framework governing your use of the Platform and should be read together with our Terms of Service and Transaction Policies.

By accessing or using our website or services, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, you should not use our website or submit your information.

Children under 13. The Platform is not intended for children under the age of thirteen (13). We do not knowingly collect or maintain personal information from children under 13 in accordance with the Children's Online Privacy Protection Act (COPPA). If we become aware that personal information has been collected from a child under 13, we will take reasonable steps to delete such information.

Minimum age requirement (18+). Access to the Platform, including its features and services, is intended for individuals who are at least eighteen (18) years of age. By using the Platform, you confirm that you meet this requirement.

Additional information for platform use. Certain features of the Platform may require users to provide additional information, including identity verification details, contact information, and payment-related data processed through third-party providers.

Information we collect. We collect personal information that users provide when interacting with the Platform, including when creating an account, signing up for updates, submitting inquiries, or engaging with Platform features. We also collect information related to user activity on the Platform, including listings, interactions, and general usage. In addition, certain information may be collected automatically, including IP address, device type, browser information, and usage data.

Information from third parties. We may receive information about users from third-party services, including advertising platforms, analytics providers, and business partners, in connection with our marketing and platform operations.

Cookies, advertising, and analytics. We use cookies, web beacons, and similar technologies to support functionality, analyze performance, and improve user experience. These technologies may also be used in connection with advertising and analytics tools, including Meta Pixel and related tracking technologies, to measure engagement and deliver relevant content. Users may control or disable cookies through their browser settings, although this may affect certain features of the Platform.

How we use and share information. We use personal information to operate and improve the Platform, communicate with users, support account management and platform functionality, deliver marketing and promotional content, and comply with applicable legal and regulatory obligations. We may share information with third-party service providers that support our operations, including customer relationship management, email communications, analytics, advertising, and payment processing, such as MailerLite, Meta Pixel, Meta Conversions API, Meta Lead Ads, Stripe, Pipedrive, and PostHog. These providers process information on our behalf in accordance with applicable agreements and legal requirements.

User content and metadata. Content uploaded to the Platform may include embedded metadata, such as timestamps or location data. Users should be aware that such information may be accessible and are responsible for managing the data they choose to upload.

Legal and regulatory disclosures. We may disclose information where required to comply with applicable laws, regulations, or governmental requests.

Payment processing. We do not store full credit card information on our servers. Payment-related data is processed by third-party payment providers, including Stripe, which operate in accordance with applicable security standards.

Financial and tax information. We may collect and process certain financial or tax-related information where necessary to support platform functionality and comply with applicable legal and reporting obligations.

Identity verification. We may collect and process personal information to verify user identity and support the integrity of the Platform. This may include information provided directly by users or obtained through third-party verification services.

Fraud prevention and risk management. We may use information collected through the Platform to detect, prevent, and address fraud, unauthorized activity, or other risks to the Platform and its users.

Data retention. We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including operational, legal, and regulatory requirements. Certain categories of data, including transaction-related records, may be retained for longer periods where required by applicable laws or internal business needs.

Retention practices. The duration for which we retain information may vary depending on the nature of the data, the purpose for which it was collected, and applicable legal or compliance requirements. We periodically review retained data to ensure it remains necessary and appropriate.

Security measures. We implement reasonable administrative, technical, and organizational measures to protect personal information from unauthorized access, disclosure, or misuse.

Breach response. In the event of a data breach, we will take appropriate steps in accordance with applicable laws, including notifying affected users where required.

Access to information. Users may request access to personal information associated with their account by contacting us. We will respond to such requests in accordance with applicable legal requirements and internal procedures.

Data storage and processing. Personal information collected through the Platform is primarily stored and processed in the United States. However, we may use service providers located in other jurisdictions, and your information may be processed in those locations in accordance with applicable laws.

Third-party links. The Platform may contain links to third-party services. This Policy does not apply to those services, and users are encouraged to review the privacy policies of any third-party websites they access.

Corporate transactions. In the event of a merger, acquisition, sale of assets, or other corporate transaction, personal information may be transferred as part of that transaction. Where appropriate, we will provide notice of such changes.

Marketing communications. We may use contact information to send updates, promotional materials, and other communications. Users may opt out of marketing communications at any time.

Contact information. Questions or requests relating to this Policy may be directed to us at privacy@petrolheadmotor.com.

General user rights. Depending on your location and applicable law, you may have certain rights in relation to your personal information. These may include the right to access the personal information we hold about you, request correction of inaccurate or incomplete information, request deletion of your information, and obtain a copy of your data in a commonly used format.

You may also have the right to object to or restrict certain processing activities, or to opt out of specific uses of your information, including certain advertising-related activities where applicable. These rights are subject to legal and operational limitations, including situations where we are required to retain information to comply with applicable laws or legitimate business purposes.

Exercising your rights. Requests relating to your personal information may be submitted by contacting us. We may take reasonable steps to verify your identity before processing any request and may decline or limit requests where permitted by law.

State-specific rights. Residents of certain states, including California, may have additional rights under applicable privacy laws. These may include rights to request information about the categories of data collected, the purposes for which it is used, and the categories of third parties with whom it is shared, as well as rights to request deletion or correction of personal information.

We do not sell personal information for monetary consideration. Where applicable, users may have the right to opt out of certain forms of data sharing or targeted advertising.

Do Not Track (DNT). The Platform does not currently respond to "Do Not Track" signals or similar browser-based mechanisms.

Notification of changes. We reserve the right to modify this Policy at any time. Significant changes to data handling or retention will be communicated via the email on file. Changes to core transactional or data rights will be provided with at least thirty (30) days' notice.