PRIVACY POLICY

Last updated: 28 August 2026

This policy explains how CORE 4X4, LLC collects, uses, and shares information when you visit core4x4.com, create an account, or place an order.

1. Information we collect

You provide: name, email, phone, billing and shipping address, order details, vehicle year/make/model (your Garage), account credentials, and messages you send us.

Warranty transfers: if you buy a vehicle with CORE 4X4 parts on it and register the warranty transfer, we collect your name, email, and phone along with the original order number, so we know who holds the warranty. See our warranty.

Payment data: processed by our payment providers — Authorize.net and PayPal — and, for financing, by Affirm or PayTomorrow. We do not store full card numbers on our servers. Affirm's use of your data is governed by Affirm's privacy policy; PayTomorrow's by their own privacy policy.

Collected automatically: IP address, device and browser info, pages viewed, products viewed, cart activity, and referral source — via cookies and similar technologies described in section 4.

2. How we use it

• Build, ship, and support your orders
• Show you parts that fit your vehicle (Garage and fitment features)
• Send order updates and, if you opt in, marketing email
• Measure and improve the site, our products, and our advertising
• Prevent fraud and enforce our Terms
• Comply with law

3. Who we share it with

We do not sell your personal information for money. We share it with service providers and partners who help us run the business:

Some analytics and advertising sharing may be considered a “sale” or “sharing” of personal information under certain state laws, including California's. You can opt out — see sections 5 and 6.

We may also disclose information if required by law, to protect our rights, or as part of a business transfer.

4. Cookies and tracking

We use cookies, pixels, and server-side tracking to run the site and measure our marketing:

• Essential — cart, login, checkout. The store doesn't work without these.
• Analytics — Google Analytics and Microsoft Clarity help us understand how the site is used and where it breaks.
• Advertising — Google Ads, Meta, and TikTok pixels, including server-side events, measure our ads and may be used to show you relevant ads on other platforms.

These technologies load when you visit the site. You can control cookies through your browser settings, and you can opt out of interest-based advertising through the industry tools at aboutads.info and optout.networkadvertising.org.

5. Your choices

• Marketing email: unsubscribe link in every message, or email support@core4x4.com
• Ad tracking opt-out: your browser settings, or the industry tools above
• Account data: view and edit in your account, or contact us

6. State privacy rights

Depending on where you live (including California, Colorado, Connecticut, Texas, Utah, Virginia, and other states with consumer-privacy laws), you may have the right to:

• Know or access the personal information we hold about you
• Correct inaccurate information
• Delete your information
• Opt out of targeted advertising and any “sale” or “sharing” of personal information
• Not be discriminated against for exercising these rights

To exercise any right, email support@core4x4.com or call 385-375-2104 with “Privacy Request” and your name and email. We will verify your identity and respond within the time required by your state's law. You may appeal a denial by replying to our decision.

7. Data retention

We keep order and account records as long as needed for warranty service, tax, and legal requirements. Because our product warranty runs for as long as the parts are in service — and can be transferred to a subsequent owner — core order records are retained accordingly. Analytics data is retained per each provider's settings. You can request deletion of data we are not legally required to keep (section 6).

8. Security

We use SSL/TLS encryption, restricted access, and vulnerability scanning. Payments are handled by PCI-compliant processors and are not stored on our servers. No system is perfect; if a breach affects your data, we will notify you without unreasonable delay and as required by law.

9. Children

The site is not directed to children under 13 and we do not knowingly collect their information.

10. Email practices

We identify marketing messages honestly, include our physical address, and honor unsubscribes promptly.

11. Changes

We will update the “Last updated” date when this policy changes and, for material changes, note it on the site.