Privacy policy

Effective: 2026-10-22. Last updated: 2026-10-22.

This Privacy Policy explains how TeslaEmblems.com ("we," "us," "our") collects, uses, discloses, and protects personal information in connection with the Site and services. It is written to meet the disclosure requirements of the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 ("CCPA/CPRA"), together with other applicable U.S. state privacy laws.

1. Scope

This policy applies to personal information we collect from visitors, customers, and users of the Site, by email, phone, or any other interaction with us. It does not cover information handled solely by Shopify, our payment processors, or other third parties under their own privacy policies.

2. Who to Contact

For all privacy requests and questions, email privacy@teslaemblems.com. This is the single intake address for CCPA/CPRA requests (access, specific pieces, deletion, correction, opt-out of sale/sharing, limit use of sensitive personal information).

3. Categories of Personal Information We Collect (§ 1798.110 Matrix)

In the past 12 months, we have collected the following categories of personal information. The matrix below meets § 1798.110(c): categories, sources, business purposes, and parties to whom disclosed.

CCPA/CPRA Category (§ 1798.140(v)) Examples Sources Business / Commercial Purpose Disclosed For a Business Purpose To Sold or Shared?
A. Identifiers Name, shipping/billing address, email, phone, order number, IP address, device identifiers, Shopify customer ID Directly from you at checkout, account creation, or support contact; automatically from your browser/device Order fulfillment, shipping, customer support, fraud prevention, account management Shopify (platform), shipping carriers (USPS, UPS, DHL), email provider (Shopify / Klaviyo / Resend as applicable), fraud-screening providers No sale. Sharing for cross-context behavioral advertising: see § 6.
B. Customer-record information (Cal. Civ. Code § 1798.80(e)) Name, address, phone, credit/debit card information (tokenized by Shopify Payments; we do not store PAN data) Directly from you at checkout Payment processing, order fulfillment, record-keeping Shopify Payments, Stripe (where applicable), banks and card networks for payment and chargeback handling No
C. Protected classification characteristics None collected intentionally N/A N/A N/A No
D. Commercial information Products viewed, products purchased, order history, returns, discount codes used Directly from your interactions with the Site Order fulfillment, personalization, analytics, loyalty, fraud screening Shopify, analytics providers, marketing platforms (e.g., Klaviyo) subject to your consent Sharing for cross-context behavioral advertising: see § 6.
E. Biometric information None N/A N/A N/A No
F. Internet or other electronic network activity Browsing history on our Site, search queries, interaction with pages, referral URLs, cookies and similar technologies Automatically from your browser/device via Shopify analytics, Google Analytics, Meta Pixel (when consent given), and similar Site operation, analytics, advertising measurement, security Shopify, Google, Meta (subject to consent), security providers Sharing for cross-context behavioral advertising: see § 6.
G. Geolocation data Approximate location derived from IP address and shipping address Automatically from your browser; directly from you at checkout Shipping, tax calculation, fraud screening, regional content Shopify, shipping carriers, fraud-screening providers No
H. Sensory data Email or chat text, photos you send for damage claims or product fitment Directly from you Customer support, claim handling, product improvement Shopify (helpdesk/email tools), shipping carriers for claims No
I. Professional or employment-related information None (consumer sales only) N/A N/A N/A No
J. Non-public education information None N/A N/A N/A No
K. Inferences drawn from the above Product preferences, propensity to purchase, segment membership Derived internally and by analytics/marketing platforms Marketing personalization, analytics Marketing platforms (subject to consent) Sharing for cross-context behavioral advertising: see § 6.
L. Sensitive personal information (§ 1798.140(ae)) Payment-card information with security code (handled solely by Shopify Payments; we do not retain) Directly from you at checkout Processing the transaction you requested (CPRA § 1798.121(d) exception — not used for inferring characteristics) Shopify Payments, card networks No

We retain personal information only for as long as reasonably necessary to carry out the business purposes listed above and to comply with legal, tax, accounting, and record-keeping obligations. Order records are retained for at least 7 years consistent with California tax and sales record requirements.

4. How We Use Personal Information

We use personal information to: process orders and payments; fulfill shipments and handle returns; provide customer support and respond to claims; prevent fraud and secure the Site; send transactional emails about your order; send marketing emails where you have opted in; comply with legal obligations; measure and improve Site performance; and personalize the Site experience where you have consented.

5. Disclosures to Third Parties

We disclose personal information for the business purposes identified in § 3 to the service providers and contractors listed, each of whom is bound by contract to use the information only for the specified purpose. We also disclose personal information where required by law, legal process, or to protect our rights, your safety, or the safety of others.

6. Sale and Sharing of Personal Information

We do not sell personal information for monetary consideration.

Under CPRA, "sharing" includes disclosing personal information to third parties for cross-context behavioral advertising, even when no money changes hands. When advertising cookies and pixels (such as Meta Pixel, Google Ads tags, or similar) are active on the Site with your consent, those disclosures may constitute "sharing" under CPRA.

You have the right to opt out of this sharing at any time. To exercise this right, use the link below:

➡ Do Not Sell or Share My Personal Information

We also honor the Global Privacy Control (GPC) browser signal as a valid opt-out of sale/sharing under 11 C.C.R. § 7025. When your browser sends a GPC signal, we treat it as an opt-out request for the browser and, where we can reasonably identify you, for your account.

In the past 12 months, we have not sold personal information. In the past 12 months, we have shared the categories identified in § 3 as "Sharing for cross-context behavioral advertising" with the advertising and analytics vendors listed, in each case only to the extent you had enabled or consented to advertising cookies.

7. Minors

TeslaEmblems.com does not knowingly collect personal information from consumers under the age of 16. Consistent with CPRA § 1798.120(c), we do not sell or share the personal information of consumers under 16 without affirmative authorization (opt-in from the consumer if 13–15; from a parent/guardian if under 13). If we learn that we have collected personal information from a child under 16 without the required authorization, we will delete it.

8. Your CCPA/CPRA Rights

If you are a California resident, you have the following rights, each exercisable twice in any 12-month period at no charge:

  1. Right to Know (§ 1798.110): the categories and specific pieces of personal information we have collected about you, the sources, the business/commercial purposes, and the categories of third parties to whom we disclosed or with whom we shared it, over the preceding 12 months (and, upon request, beyond 12 months to the extent we have retained the information from on or after January 1, 2022, except where it would be impossible or disproportionate).
  2. Right to Delete (§ 1798.105): deletion of personal information we have collected from you, subject to statutory exceptions (e.g., completing a transaction, security, legal compliance).
  3. Right to Correct (§ 1798.106): correction of inaccurate personal information we maintain about you.
  4. Right to Opt Out of Sale/Sharing (§ 1798.120): see § 6 and the Do Not Sell or Share My Personal Information link.
  5. Right to Limit Use of Sensitive Personal Information (§ 1798.121): we only use sensitive personal information (payment-card data) for the transaction you requested, within the § 1798.121(d) exception, so no limit-use link is required; you may still submit a limit-use request to the contact in § 2.
  6. Right to Non-Retaliation (§ 1798.125): we will not deny goods, charge different prices, or provide different service for exercising these rights.

9. How to Request the Specific Pieces of PI We Have Collected About You

To request the specific pieces of personal information we have collected about you (§ 1798.110(a)(5)):

  1. Email privacy@teslaemblems.com with the subject line "CCPA Specific Pieces Request."
  2. Include the email address, name, and (if available) order numbers associated with your account.
  3. We will verify your identity by confirming at least two data points that match our records (e.g., email + order number + billing ZIP), or by sending a verification email to the address on file. For sensitive data categories we may require additional verification.
  4. Within 45 days of a verifiable request (extendable by up to another 45 days with notice to you), we will deliver the specific pieces of personal information in a readily usable, portable format via a secure download or encrypted email.
  5. Data will cover the 12-month lookback window required by § 1798.130(a)(2). You may request information covering the period from January 1, 2022 forward; we will provide it unless doing so would be impossible or require disproportionate effort, in which case we will tell you.

10. Right to Delete — Process

  1. Email privacy@teslaemblems.com with the subject line "CCPA Deletion Request."
  2. We will verify your identity as described in § 9.
  3. We will confirm receipt within 10 business days and respond within 45 days (extendable by 45 days with notice).
  4. We will delete personal information from our systems and direct our service providers and contractors to do the same, except where a statutory exception applies (e.g., completing the transaction, detecting security incidents, complying with legal obligations, exercising free speech, or using the information internally in a lawful manner compatible with the context in which you provided it).
  5. We will tell you which categories, if any, we have retained under an exception and why.

11. Right to Correct — Process

  1. Email privacy@teslaemblems.com with the subject line "CCPA Correction Request." Describe the inaccurate information and provide the correct value.
  2. We will verify your identity as described in § 9.
  3. We will consider the totality of the circumstances in determining accuracy, may request documentation to support the correction, and will respond within 45 days (extendable by 45 days with notice).
  4. If we correct the information, we will instruct our service providers and contractors to do the same. If we deny the request, we will provide our reasons.

12. Authorized Agent Requests

You may designate an authorized agent to submit a request on your behalf. We will require (a) written permission signed by you authorizing the agent to act, (b) verification of your identity directly with us, and (c) in the case of a request to opt out of sale/sharing, a signed written permission from you is sufficient. Businesses acting as authorized agents must be registered with the California Secretary of State.

13. Cookies and Similar Technologies

We use cookies and similar technologies for Site operation, analytics, and (where you consent) advertising measurement. You can control cookies through our cookie preference tool and your browser settings. Essential cookies required for the Site to function cannot be disabled. GPC browser signals are honored as an opt-out of sale/sharing per § 6.

14. Payment Information

Payment card information is collected and handled by Shopify Payments and the applicable card networks. We do not store full payment card numbers or security codes on our systems. Shopify Payments is PCI-DSS compliant.

15. Email

Transactional emails (order confirmations, shipping notices, support replies) are sent via Shopify and/or Resend. Marketing emails are sent only to customers who have opted in and may be unsubscribed from at any time via the unsubscribe link in each email.

16. Security

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information. No system is perfectly secure; please notify us at privacy@teslaemblems.com if you suspect a security issue.

17. Other U.S. State Privacy Laws

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have substantially similar rights (access, deletion, correction, portability, opt-out of targeted advertising/sale of personal data, appeal). To exercise these rights, use the same contact in § 2. We will apply the comparable state process.

18. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent change. Material changes will be announced at the Site's homepage and, for registered customers, by email.