Privacy Policy

1. Introduction

Gearshift Auto Gallery ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you visit our website or use our services.

This policy applies to all visitors, users, and customers of Gearshift Auto Gallery. By using our website, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Contact Information: Name, email address, phone number, mailing address
• Identity Information: Driver's license number (for test drives and vehicle purchases)
• Financial Information: Credit/debit card details, financing information (processed securely through third-party payment processors)
• Vehicle Preferences: Information about vehicles you're interested in, search history, saved vehicles
• Communication Data: Records of your communications with us, including emails, phone calls, and chat messages

2.2 Automatically Collected Information

When you visit our website, we automatically collect:

• Technical Data: IP address, browser type and version, device type, operating system
• Usage Data: Pages visited, time spent on pages, click patterns, referring URLs
• Location Data: General geographic location based on IP address
• Cookie Data: Information collected through cookies and similar technologies

3. How We Use Your Information

We use your personal information for the following purposes:

• Service Delivery: To process vehicle sales, schedule test drives, and provide customer service
• Communication: To respond to inquiries, send confirmation emails, and provide updates about your transactions
• Marketing: To send promotional materials, special offers, and newsletters (with your consent)
• Website Improvement: To analyze website usage and improve user experience
• Legal Compliance: To comply with legal obligations and enforce our terms and conditions
• Security: To protect against fraud, unauthorized access, and other security issues
• Personalization: To customize your experience and show relevant vehicle inventory

4. Cookies and Tracking Technologies

4.1 What Are Cookies

Cookies are small text files placed on your device when you visit our website. They help us provide a better user experience and analyze website traffic.

4.2 Types of Cookies We Use

• Essential Cookies: Required for website functionality, such as shopping cart and login features
• Performance Cookies: Collect anonymous information about how visitors use our website
• Functionality Cookies: Remember your preferences and personalize your experience
• Marketing Cookies: Track your browsing to deliver relevant advertisements

4.3 Managing Cookies

You can control cookies through your browser settings. However, disabling cookies may affect website functionality. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block all cookies
• Delete cookies when you close your browser

5. Third-Party Services

We work with trusted third-party service providers who may process your data on our behalf:

• Payment Processors: Secure processing of credit card and financial transactions
• Analytics Services: Google Analytics and similar tools to understand website usage
• Marketing Platforms: Email marketing services, advertising networks, and social media platforms
• CRM Systems: Customer relationship management tools to manage customer interactions
• Cloud Services: Hosting and data storage providers
• Vehicle History Services: Third-party vehicle history report providers

These third parties are contractually obligated to protect your data and use it only for specified purposes. We do not sell your personal information to third parties.

6. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With vendors who perform services on our behalf
• Legal Requirements: When required by law, court order, or legal process
• Business Transfers: In connection with a merger, sale, or acquisition of our business
• Protection of Rights: To protect our rights, property, safety, or that of our customers
• With Consent: When you explicitly consent to sharing your information

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data:

• SSL/TLS encryption for data transmission
• Secure servers and databases with restricted access
• Regular security assessments and updates
• Employee training on data protection
• Access controls and authentication procedures

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but continuously work to maintain the highest security standards.

8. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy:

• Customer Records: Maintained for the duration of our business relationship plus applicable legal retention periods
• Transaction Data: Retained for accounting and legal compliance purposes (typically 7 years)
• Marketing Data: Retained until you unsubscribe or request deletion
• Website Analytics: Typically retained for 26-38 months

After the retention period expires, we securely delete or anonymize your personal data.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

9.1 Access and Portability

• Request access to your personal data
• Receive a copy of your data in a structured, commonly used format

9.2 Correction and Updates

• Request correction of inaccurate or incomplete data
• Update your contact information and preferences

9.3 Deletion

• Request deletion of your personal data (subject to legal obligations)
• Exercise your "right to be forgotten"

9.4 Objection and Restriction

• Object to processing of your data for marketing purposes
• Request restriction of processing in certain circumstances

9.5 Withdraw Consent

• Withdraw consent for data processing where consent was the basis
• Opt-out of marketing communications at any time

To exercise any of these rights, please contact us using the information provided in Section 13.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information from our systems.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure that such transfers comply with applicable laws and that your data receives adequate protection through:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions recognizing equivalent data protection
• Other legally approved transfer mechanisms

12. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending email notifications for material changes (if we have your email)
• Displaying a prominent notice on our website

Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

We will respond to your inquiries within 30 days of receipt.

14. Additional Information

14.1 Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature. Our website does not currently respond to DNT signals, but you can manage cookies through your browser settings.

14.2 California Privacy Rights

California residents have specific rights under the California Consumer Privacy Act (CCPA). You may request information about the categories of personal information we collect and how we share it. Contact us to exercise these rights.

14.3 EU/EEA Users

Users in the European Union and European Economic Area have rights under the General Data Protection Regulation (GDPR), including those outlined in Section 9 of this policy.