Home » Privacy policy

Privacy policy

This Privacy Policy explains how Terrawagen LLC (Terrawagen, we, us, or our) collects, uses, discloses, and otherwise processes personal information when you visit or use terrawagen.com (the Site), buy or inquire about our products or services, create an account, request fitment or installation support, apply for a wholesale account, sign up for communications, submit content, or otherwise interact with us (collectively, the Services). It also explains the privacy choices and rights that may be available to you.

For purposes of this Policy, personal information means information that identifies, relates to, describes, is reasonably capable of being associated with, or can reasonably be linked to an individual or household. It does not include information that applicable law treats as public, deidentified, or aggregated.

1. Scope and responsibility

Terrawagen decides why and how personal information is processed for most activities described in this Policy and is the controller or business responsible for that processing. Our online store is powered by Shopify. Depending on the service and setting involved, Shopify may process personal information for us or for its own purposes. Section 7 explains this relationship and links to Shopify's privacy information.

This Policy does not govern the independent privacy practices of a dealer, installer, social network, shared-media provider, or other third party whose site or service you choose to use. It also does not cover workforce or job-applicant information governed by a separate notice, if any.

2. Personal information we collect

The information we collect depends on how you interact with us and may include:

  • Contact, identity, and account information: name, email address, telephone number, billing and shipping address, account identifier, communication preferences, and information used to authenticate you or secure your account. Shopify handles customer-account authentication. Terrawagen does not receive or view the password you submit to Shopify when a password is used.
  • Order, payment, and commercial information: products and variants viewed, placed in a cart, ordered, returned, or exchanged; order number; purchase and service history; discounts; shipping method; transaction status; refunds; warranty records; gift-recipient details if that feature is used; and related communications. Payment-card, bank, or other payment details are submitted to Shopify and the applicable payment provider. We generally receive transaction status and other limited payment details rather than complete payment credentials.
  • Vehicle, fitment, support, and service information: vehicle make, model, model year, chassis or platform, wheelbase, roof height, trim, modifications, condition, photographs or videos, requested work, appointment information, fitment questions, reported issues, and support messages.
  • Wholesale and business-account information: contact name, company name, business email and telephone number, billing and shipping information, tax or resale identifier, wholesale-agreement acknowledgment, electronic signature and date, application status, dealer-account records, and communications concerning the business relationship.
  • Content and media: reviews, feedback, messages, captions, project descriptions, consent records, external sharing links, and the photographs, videos, or other files that a link makes available to us. If you use an external provider such as Google Drive, Dropbox, iCloud, or WeTransfer, that provider also processes information under its own privacy notice and settings.
  • Marketing and availability information: email address, telephone number, marketing and cookie preferences, consent and unsubscribe records, the product or variant associated with a back-in-stock request, and information about interactions with our messages.
  • Device, usage, and network information: IP address, device and browser type, operating system, language, general location inferred from an IP address, cookie or similar identifiers, referring and exit pages, pages and products viewed, searches, cart and checkout activity, dates and times of access, and interactions with Site features or communications.
  • Security, fraud-prevention, and compliance information: account and authentication events, fraud or transaction-risk signals, security logs, suspected violations, records needed to investigate an incident or dispute, and information required to comply with law.
  • Other information you provide: any other personal information you choose to include in a request or communication with us.

Some information may be considered sensitive under certain laws, including account credentials, payment information handled by payment providers, and a tax or resale identifier that identifies an individual. We use this information only for the transaction, account, security, legal, or other permitted purpose for which it is needed. We do not use sensitive personal information to infer characteristics about you. Please do not send complete payment-card numbers, government identification documents, Social Security numbers, medical information, or other unnecessary sensitive information through a general contact field or shared-media link.

3. How we collect personal information

We may collect personal information:

  • Directly from you, including when you buy products, create an account, contact us, request support or service, apply for wholesale access, sign up for marketing or availability alerts, submit a review or gallery item, or communicate with us.
  • Automatically from your device, through cookies, pixels, local storage, logs, and similar technologies when you use the Site or interact with electronic messages.
  • From Shopify and service providers, including payment, fraud-prevention, shipping, communications, analytics, storefront-app, account, and technical providers.
  • From other people or organizations, such as a person acting for a customer, an authorized representative, a wholesale applicant's company, an independent dealer or installer assisting with a product issue, or a social platform through which you interact with us.
  • From records we create or infer, such as transaction status, fitment recommendations, application status, support history, preferences based on your choices, and general location based on IP address.

4. How we use personal information

We may use personal information to:

  • provide, operate, maintain, and improve the Site and Services;
  • create and manage customer or wholesale accounts and authenticate users;
  • display products, preserve a cart, process and fulfill orders, accept payments, arrange pickup or shipping, provide tracking, and handle returns, refunds, exchanges, warranties, and recalls;
  • answer product, fitment, order, installation, and service questions; prepare quotes; schedule work; and keep related service records;
  • evaluate wholesale applications, administer dealer relationships, apply approved pricing or terms, and maintain contract, tax, and business records;
  • provide requested back-in-stock or product-availability alerts and other service communications;
  • send marketing communications where permitted, manage preferences, measure message performance, and maintain suppression records;
  • display a review or customer-gallery submission when you intentionally submit it for that purpose and give the required permission;
  • personalize the Site, remember choices, understand how the Site and our messages are used, measure performance, and improve products, content, and customer service;
  • conduct advertising or measure campaigns when those tools are enabled, subject to applicable consent and opt-out rights;
  • protect customers, staff, the public, and the Services; secure accounts and transactions; detect and prevent fraud, abuse, malware, or other harmful activity; and enforce our agreements;
  • comply with tax, accounting, consumer-protection, product-safety, privacy, court, law-enforcement, and other legal obligations; establish, exercise, or defend legal claims; and respond to lawful requests; and
  • complete a financing, sale, merger, restructuring, or other business transaction, subject to appropriate protections.

We may use information that has been deidentified or aggregated for lawful business purposes, and we will not attempt to reidentify it except as permitted by law to test whether our deidentification process is effective.

5. Legal bases for processing

If privacy law in the European Economic Area, United Kingdom, Switzerland, or another jurisdiction requires us to identify a legal basis, our bases depend on the activity:

  • Contract and steps requested before a contract: to provide a cart or account, process and fulfill an order, answer a pre-purchase or fitment request, schedule requested work, administer a wholesale application, or provide customer support.
  • Legitimate interests: to operate, secure, analyze, and improve our business and Services; prevent fraud; keep appropriate records; communicate with customers; and protect or exercise our rights. We consider the impact on your rights before relying on this basis.
  • Consent: for non-essential cookies where required, certain marketing, a customer-gallery submission, and other activities for which we ask permission. You may withdraw consent as described in this Policy and at the point of collection.
  • Legal obligation: to maintain required tax or transaction records, respond to valid legal process, address product-safety obligations, and comply with applicable law.
  • Vital interests: in a rare emergency where processing is necessary to protect someone's life or physical safety.

Withdrawing consent does not affect processing already performed while the consent was valid. We may continue processing when another lawful basis applies, such as completing an order or retaining records required by law.

Information identified as required at a collection point is needed to provide the requested transaction, account, application, communication, or service. If you do not provide it, we might not be able to complete the request. Optional information can help us tailor our response—for example, vehicle details can help us answer a fitment question—but you can leave an optional field blank.

6. How we disclose personal information

We may disclose personal information to the following categories of recipients for the purposes described below. The data disclosed depends on the service and is limited to what is reasonably necessary for that purpose.

  • Shopify and its affiliates: contact, account, order, payment, commercial, device, usage, security, marketing-preference, and support information needed to host and operate the store, accounts, checkout, payments, analytics, fraud prevention, customer privacy features, and other Shopify services. Section 7 provides more detail.
  • Payment and transaction providers: contact, order, transaction, device, and payment information needed to authorize, process, settle, refund, secure, and document a payment. These providers may independently process information to comply with financial, fraud-prevention, identity-verification, and legal obligations.
  • Fulfillment, shipping, pickup, installation, and service providers: name, contact details, delivery or service location, order contents, delivery instructions, vehicle or appointment details, and related records needed to provide the requested service.
  • Storefront and business-service providers: information needed by services that support hosting, customer accounts, reviews, customer communications, forms, site search, accessibility, security, fraud prevention, technical support, and other business operations. Current storefront integrations also include Rapi Bundles for product-bundle features, SW/CWILL for back-in-stock alerts, and Instafeed for Instagram content. Depending on how you use those features, the providers may receive product and variant selections, cart or order events, email address or mobile number, notification preferences, device and usage information, or requests needed to display social content.
  • Analytics, advertising, and social-media providers: device and usage information, cookie identifiers, general location, and commercial interactions used to measure performance, understand audiences, prevent fraud, or provide and measure advertising. These disclosures depend on which services are enabled and your applicable privacy choices.
  • Google services: the Site currently uses Google Analytics, Google Ads, and the Google & YouTube channel integration. Depending on our configuration and your privacy choices, Google may receive device and browser information, cookie or similar identifiers, general location, referral and page activity, searches, product views, cart and checkout events, and purchase or transaction events. We use these services for analytics, conversion measurement, campaign attribution, product feeds, and advertising. Google's processing is described in the Google Privacy Policy, and advertising preferences can be managed through My Ad Center.
  • Professional advisers and insurers: information reasonably needed by lawyers, accountants, auditors, insurers, and other professional advisers to provide services, manage risk, or establish and defend claims.
  • Authorities and parties involved in legal or safety matters: information reasonably necessary to comply with law or valid legal process; protect rights, property, or safety; investigate fraud, abuse, or security issues; enforce agreements; or address a product-safety concern.
  • Parties to a business transaction: information subject to appropriate confidentiality and use restrictions in connection with a potential or completed financing, acquisition, merger, reorganization, sale of assets, or similar transaction.
  • Recipients you direct or authorize: information disclosed at your request, including content that you intentionally submit for public display. A public review, caption, name or display name, and customer-gallery material can be seen and copied by others.

The potentially sensitive categories described in Section 2 may be disclosed as follows: account-authentication information to Shopify and account or security providers; payment information to Shopify and applicable payment providers; and a tax or resale identifier submitted with a wholesale application to Shopify, authorized Terrawagen personnel, and accounting, tax, or legal providers when needed for the application, relationship, or legal compliance.

We do not exchange personal information for money. However, some laws define sale, sharing, or targeted advertising broadly enough to include certain disclosures through advertising, analytics, social-media, or cross-context services even when no money changes hands. Depending on the Shopify features and third-party tools enabled for the Site, the categories involved may include identifiers, commercial information, device and internet activity, general location, and inferences, and the recipients may include Shopify and advertising, analytics, or social-media providers. Section 8 explains how to opt out where this right applies. We do not knowingly sell or share the personal information of anyone under 16 or knowingly use it for targeted advertising.

We do not use personal information to profile people in furtherance of decisions that produce legal or similarly significant effects. Shopify, payment providers, and fraud-prevention services may use automated tools to assess transaction or security risk under their own notices. You may contact us if you believe an order or account decision was made in error.

7. Shopify

The Site is hosted and powered by Shopify. Shopify processes personal information when you visit the Site, create or use an account, use checkout or a Shopify consumer feature, or make a purchase. This processing helps provide storefront, infrastructure, checkout, payment, security, fraud-prevention, analytics, personalization, and related services. Information is disclosed to Shopify and may be processed by Shopify and its providers in countries other than the country where you live.

We have enabled Shopify Network Intelligence. Shopify also processes information as an independent controller or business to provide Enhanced Services. Those services use information about your interactions with Terrawagen, other Shopify merchants, and Shopify to improve analytics, product customization, store performance, fraud prevention, personalization, or advertising.

Shopify's own use of personal information is described in the Shopify Consumer Privacy Policy. You can use the Shopify Privacy Portal to learn about and exercise rights concerning Shopify's independent processing. Requests concerning Terrawagen's own records should be sent to us as described in Section 12.

8. Cookies, tracking, and privacy choices

We and our providers, including Shopify, use cookies, pixels, local storage, and similar technologies. The technologies active on the Site can change as our services and settings change. They generally fall into these categories:

  • Strictly necessary: operate the Site, cart, checkout, accounts, security, fraud prevention, load balancing, and privacy-choice features. The Site may not work correctly without them.
  • Preferences and functionality: remember choices such as language, country, currency, account state, and interface preferences.
  • Analytics and performance: understand traffic, navigation, searches, transactions, errors, and campaign or Site performance so that we can improve the Services.
  • Marketing, advertising, and social media: measure campaigns, connect activity across services or devices, personalize content or advertising, and provide social or embedded features where these tools are enabled.

Where required by law, we ask for consent before using non-essential technologies. If the Site displays a cookie banner or Cookie preferences link, you can use it to accept, reject, or change available choices. You can also use browser or device controls to block or delete cookies, but doing so may affect Site functions. Strictly necessary technologies cannot be disabled through a consent tool because they are required to provide the service you request.

You may use our Your Privacy Choices page to opt out of processing treated as a sale, sharing, or targeted advertising under applicable U.S. state law.

You may also submit an opt-out request using the contact method in Section 12. We honor a qualifying Global Privacy Control (GPC) signal as an opt-out request where required by law. The signal applies to the browser or device that sends it, so you may need to make the choice again on another browser or device and identify yourself separately if you want the request applied to information not linked to that browser or device.

Some browsers offer a legacy Do Not Track (DNT) signal. Because there is no generally accepted standard that defines how websites must respond to DNT, the Site does not respond to DNT signals unless applicable law requires otherwise. This does not change how we respond to GPC or other legally recognized opt-out signals. Shopify and third-party analytics, advertising, or social-media providers may collect information about your online activities over time and across different websites or services when their technologies are enabled and permitted by your choices.

For more information about Shopify technologies, see Shopify's Cookie Policy. A provider's cookie and privacy notices govern its independent practices.

9. Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide the Services, maintain the business relationship, comply with law, resolve disputes, enforce agreements, and protect the Services. Retention depends on the type of record:

  • account and profile information is generally kept while the account is active and afterward as needed to close the account, prevent fraud, honor requests, or maintain related transaction records;
  • order, payment, tax, return, warranty, wholesale, and service records are kept for the applicable accounting, tax, contract, product-support, chargeback, dispute, and legal periods;
  • contact, fitment, and support records are kept while we address the request and afterward when reasonably needed for follow-up, warranty, product-safety, quality, product improvement, or dispute purposes;
  • customer-gallery content and related permissions are kept while we display or otherwise use the content as authorized, and then for a reasonable period in archives and backups;
  • marketing information is kept until you unsubscribe or we no longer need it, while limited suppression records may be retained to honor your choice;
  • cookie, analytics, and device information is kept according to the lifespan of the technology and the provider's settings; and
  • security and fraud-prevention records are kept for a period appropriate to the risk and may be retained longer when connected to an incident, dispute, or legal obligation.

In deciding a retention period, we consider the amount, nature, and sensitivity of the information; the risk of harm from unauthorized use or disclosure; the purposes for processing; whether those purposes can be achieved another way; and applicable legal requirements. At the end of the applicable period, we delete, deidentify, or securely dispose of information. Copies may remain temporarily in restricted backups until those backups are overwritten in the ordinary course.

10. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, taking account of its nature and the risks involved. We also rely on Shopify and other providers to protect information they process for the Services. No security measure or method of transmitting or storing information is completely secure, so we cannot guarantee absolute security.

Protect your account credentials and do not reuse a password from another service. If you believe your account or interaction with us has been compromised, contact us promptly at info@terrawagen.com.

11. International processing

Terrawagen is based in the United States. We and our providers, including Shopify, may process personal information in the United States, Canada, and other countries where we or they operate. Privacy laws in those countries may differ from the laws where you live, and information may be available to courts, law-enforcement agencies, or regulators under local law.

Where an international transfer requires a specific safeguard, we will use a transfer mechanism or other protection required by applicable law. You may contact us for more information about safeguards relevant to your personal information.

12. Your privacy rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

  • confirm whether we process your personal information and access or receive a copy of it;
  • learn the categories of personal information we collect, the sources and purposes, and the categories or specific identities of third parties to which it was disclosed;
  • correct inaccurate personal information;
  • delete personal information;
  • receive certain information in a portable format;
  • opt out of processing for sale, sharing, targeted advertising, or certain profiling;
  • limit certain uses or disclosures of sensitive personal information;
  • object to or restrict certain processing;
  • withdraw consent;
  • appeal a refusal to act on a request;
  • receive equal service and not be discriminated against for exercising a privacy right; and
  • complain to the privacy or data-protection authority where you live, work, or believe a violation occurred.

To make a request concerning Terrawagen's processing, email info@terrawagen.com with the subject line Privacy Request, or write to the address in Section 18. Tell us the right you want to exercise and provide enough information for us to locate the relevant records. Please do not send identity documents or other sensitive information unless we specifically request them through an appropriate method.

We may take reasonable steps to verify your identity and authority based on the nature of the request and the information involved. If we cannot verify a request, we may ask for additional information or deny the request as permitted by law. An authorized agent may submit a request where permitted; we may require proof of authorization and, when allowed, confirmation from the person concerned. We will respond within the period required by applicable law and will not charge a fee except where the law permits one.

If we deny a request and your law provides an appeal right, email info@terrawagen.com with the subject line Privacy Appeal and explain why you believe the decision should be reconsidered. We will review and respond within the legally required period. If an Oregon appeal is denied, our response will explain how to contact the Oregon Attorney General. You may also complain directly to the regulator with authority where you live.

You can exercise choices concerning cookies, sale, sharing, targeted advertising, marketing, and Shopify's independent processing through the methods described in Sections 7, 8, and 13.

13. Email, SMS, and availability alerts

You may unsubscribe from marketing email by using the unsubscribe link in a message or contacting us. For marketing or promotional text messages, follow the opt-out instructions in the message, such as replying STOP, where available. We may send one confirmation of an opt-out and retain limited information on a suppression list so that we can honor the choice.

Opting out of marketing does not stop non-promotional communications needed for an order, account, service appointment, safety notice, privacy request, or other transaction. A back-in-stock alert is associated with the product or variant selected when you sign up, does not reserve inventory, and can be stopped using the instructions in the alert or by contacting us. Message and data rates may apply to SMS, and message frequency varies. Consent to marketing is not a condition of purchase.

14. Reviews, support media, and customer-gallery submissions

If you send a link, photo, video, or other material for private support, fitment, order, or service help, we use it to address that request and for related records. We do not treat a private support submission as permission to publish it.

If you intentionally choose a customer-gallery submission option or otherwise give separate permission, we may display the submitted material, caption, project description, and the name or display name you authorize. The license governing that use is described in our Terms of Service. You may ask us to stop future display by contacting us, and we will make reasonable efforts to remove the material from places we control. Copies may remain temporarily in backups or where another person has independently copied public material.

Before sharing content, remove unnecessary personal information and obtain permission from identifiable people shown or heard. If you created or control an external sharing link, you can usually manage or disable its permissions through the external provider, but doing so may prevent us from completing your request.

15. Children

The Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information online from a child under 13. A person must be at least 18 and legally able to enter a contract to create an account or place an order under our Terms of Service.

If we learn that we collected personal information from a child under 13 without legally valid authorization, we will take reasonable steps to delete it. A parent or guardian who believes a child provided personal information may contact us using Section 18.

16. Third-party sites and services

The Site may link to or integrate services operated by third parties, including payment providers, shipping carriers, social networks, review tools, shared-media providers, dealers, installers, and other websites or applications. Depending on the service and contract, a provider may process information only for Terrawagen, may independently decide how to process information, or may do both for different activities. Review the provider's privacy notice and settings before using an independent service. A link or integration does not make Terrawagen responsible for an independent third party's privacy or security practices.

17. Changes to this Policy

We may update this Policy to reflect changes in our Services, practices, providers, or legal obligations. We will post the revised Policy and update the date at the top. If a change is material, we will provide additional notice when required, such as a notice on the Site or a message to an account or email address. Prior versions may be retained as required for our records.

18. Contact us

Questions, requests, appeals, or complaints about this Policy or Terrawagen's privacy practices may be sent to:

Terrawagen LLC
Attn: Privacy
4865 North Lagoon Avenue
Portland, OR 97217
United States
info@terrawagen.com