PRIVACY POLICY

Last Updated: June 25, 2026

This Privacy Policy describes how your personal information is collected, used, and disclosed when you visit, interact with, or make a purchase from our platform. Our business is located and operated in Washington, Utah, and we are committed to protecting your data privacy in accordance with applicable state and federal regulations.

1. PERSONAL INFORMATION WE COLLECT

We collect specific information depending on how you interact with our platform. This information falls into two main categories:

A. Device and Automated Information:

When you visit our site, we automatically collect certain information about your device, including:

• Web browser details, IP address, and time zone.
• Cookies and tracking pixel data installed on your device.
• The specific web pages or products you view, and the search terms that referred you to our site.

B. Order and Account Information:

When you make a purchase or attempt to make a purchase, we collect the following data directly from you:

• Name, billing address, and shipping address.
• Payment information (processed securely via encrypted third-party gateways).
• Email address and telephone number.

2. HOW WE USE YOUR PERSONAL INFORMATION

We utilize your personal data to fulfill our standard business operations, including:

• Fulfilling and shipping transactions (processing payments, arranging shipping freight, and providing invoices/order confirmations).
• Communicating directly with you regarding updates, support, or account status.
• Screening our orders for potential risk, unauthorized access, or transactional fraud.
• Optimizing and improving our website performance and consumer user flows.

3. SHARING AND DISCLOSING YOUR PERSONAL INFORMATION

We share your personal information with trusted third-party service providers (Processors) who assist us in operating our platform. For example:

• Fulfilling Shipments: We share your delivery addresses with warehouse logistics and carrier services.
• Compliance with the Law: We may disclose your personal information to comply with applicable laws, respond to a subpoena, or protect our legal rights.

4. REGIONAL PRIVACY RIGHTS

FOR UTAH RESIDENTS (UTAH CONSUMER PRIVACY ACT - UCPA)

If you are a resident of Utah, the UCPA grants you specific controls over how a business processes your personal data. Subject to specific legal criteria, you possess the right to:

1. Confirm and Access: Confirm whether we are processing your data and obtain a usable copy of the personal information you provided to us.
2. Request Deletion: Request the deletion of personal data that you have directly provided to our platform.
3. Opt-Out of Sales and Targeted Advertising: Opt-out of the processing of your personal data for targeted advertising or monetary sales data streams.

To exercise any of these rights, please contact our privacy compliance team using the information listed at the bottom of this page. We will verify your identity and respond within 45 days.

FOR CALIFORNIA RESIDENTS (CCPA / CPRA NOTICE)

If you are a California resident, California law provides you with comprehensive privacy protections regarding your Personal Information (PI) and Sensitive Personal Information (SPI).

A. Your Rights Under California Law:

• Right to Know and Access: You have the right to request disclosure of the specific pieces of personal information we have collected about you going back to January 1, 2022.
• Right to Delete: You have the right to request the deletion of your personal information collected or maintained by us.
• Right to Correct: You have the right to request that we correct inaccuracies in the personal data we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to direct a business to stop "selling" or "sharing" your personal information (including data shared for cross-context behavioral advertising).
• Right to Limit Sensitive Personal Information: You have the right to limit our use of Sensitive Personal Information (such as precise geolocation, account login combinations, or financial details) if utilized outside standard operational purposes.

B. Opt-Out Preference Transparency:

• We recognize and honor browser-based Global Privacy Control (GPC) opt-out preference signals. If our system detects a GPC signal from your browser, it will automatically process it as a valid request to opt-out of data sale or sharing.
• Processing Confirmation: When you submit an opt-out preference signal or use our privacy settings toggle, our site will explicitly display a clear "Opt-Out Request Honored" status indicator in your user dashboard or privacy interface.
• Symmetry of Choice: We ensure that opting out of data sharing is as simple, direct, and symmetrical as opting in, requiring an equal number of user steps.
• Youth Protection: We do not knowingly collect, sell, or share the personal data or tracking metrics of consumers under 16 years of age without affirmative opt-in consent.

5. DATA RETENTION

When you place an order or create an account through our site, we will maintain your personal information for our records to fulfill legal, tax, and accounting requirements, unless and until you request the deletion of this information under your state privacy frameworks.

6. CHANGES TO THIS PRIVACY POLICY

We may update this privacy policy from time to time in order to reflect changes to our internal operations or to comply with evolving state and federal legal benchmarks. All revisions will be marked with a new "Last Updated" date at the top of this document.

7. CONTACT US & EXERCISING YOUR PRIVACY RIGHTS

To exercise your right to access, delete, correct, or opt-out under the UCPA or CCPA, please submit a verifiable consumer request to us at:

• By Email: sales@hitchparts.com
• By Mail: 875 W Red Cliffs Dr Ste 9-100, Washington, UT 84780
• Privacy Toggle: You may also manage your data preferences via the "Do Not Sell or Share My Personal Information" toggle link available in our website footer or settings interface.