VAU0 LLC is committed to protecting your privacy. This policy applies to vau0.com/tires and the VAU0 Tire Direct preorder program.
This Privacy Policy describes how VAU0 LLC, a New Mexico limited liability company (“VAU0,” “we,” “us,” or “our”), collects, uses, and discloses information about individuals who visit vau0.com/tires or participate in the VAU0 Tire Direct preorder program.
Section 01
1. Information We Collect
1.1 Information You Provide Directly
- Identity Information: Full name, email address, phone number, and the name of any authorized pickup representative.
- Account Credentials: Password (stored as a one-way cryptographic hash; we cannot recover your password).
- Order Information: Tire types, quantities, pricing phase at time of order, order number, deposit and balance amounts.
- Pickup Information: Scheduled appointment date and time, authorized recipient name, vehicle information (if provided), company name (if provided).
- Tax Documents: Resale certificates or tax exemption documentation voluntarily uploaded to your account.
- Communications: Emails, support requests, or other communications you send to office@vau0.com.
1.2 Information Collected Automatically
- Log Data: IP address, browser type and version, operating system, referring URL, pages viewed, and timestamp of access.
- Cookies: We use essential cookies for site functionality and analytics cookies to understand usage patterns. See Section 7 for details.
- Payment Data: We do not collect or store payment card numbers, CVV codes, or bank account information. Payment data is collected directly by Stripe, Inc. and subject to Stripe's Privacy Policy.
Section 02
2. How We Use Your Information
We use the information we collect for the following purposes:
- Order Fulfillment: To process preorders, collect deposits, communicate balance due dates, and coordinate pickup appointments.
- Account Management: To create and maintain your account, authenticate your identity, and enable order tracking.
- Communications: To send order confirmations, payment reminders, status updates, pickup notifications, and responses to your inquiries.
- Tax Compliance: To collect and remit Federal Excise Tax (FET) under IRC §4071 and process resale certificate exemptions.
- Legal Compliance: To comply with applicable federal and state laws, respond to legal process, and enforce our Terms.
- Security and Fraud Prevention: To detect and prevent fraudulent transactions and unauthorized access.
- Site Improvement: To analyze usage patterns and improve site functionality.
Section 03
3. How We Share Your Information
3.1 We do not sell your personal information to third parties.
3.2 We share information with the following categories of third parties:
- Stripe, Inc.: We share order and customer information with Stripe solely for payment processing. Stripe is an independent data controller. See stripe.com/privacy.
- Email Service Provider: We use Postfix mail infrastructure to deliver transactional emails. Email content is not shared with third-party marketing providers.
- Legal and Regulatory Authorities: We may disclose information to law enforcement, the IRS (in connection with FET remittance), or courts when required by law.
- Business Transfers: In the event of a merger or acquisition, your information may be transferred to the acquiring entity with the same privacy protections.
3.3 We do not share your information with advertising networks or use your information for targeted advertising purposes.
Section 04
4. Data Retention
We retain your personal information as long as necessary to fulfill the purposes described:
- Order Records: Minimum seven (7) years following the transaction, as required for federal tax compliance (IRC §6001).
- Account Data: Until you request deletion, provided all order obligations have been fulfilled and applicable retention periods have expired.
- Communication Records: Two (2) years from the date of communication.
- Log Data: Ninety (90) days.
Section 05
5. Data Security
5.1 We implement industry-standard technical and organizational measures to protect your personal information:
- Passwords stored using bcrypt hashing with a cost factor of 12.
- HTTPS encryption for all data transmitted between your browser and our servers.
- Database access restricted to localhost application-level connections only.
- Payment card data never stored on VAU0 servers.
5.2 No method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
Section 06
6. Your Rights
6.1 All Users. You have the right to:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to our legal retention obligations.
- Portability: Request your information in a machine-readable format.
6.2 California Residents (CCPA/CPRA). If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete, the right to opt out of the sale of personal information (VAU0 does not sell personal information), and the right to non-discrimination for exercising your privacy rights. To exercise California privacy rights, email office@vau0.com with subject line “CCPA Privacy Request.”
6.3 To exercise any of the rights described above, email office@vau0.com. We will respond within thirty (30) days. We may require identity verification before processing your request.
Section 07
7. Cookie Policy
7.1 We use the following categories of cookies:
- Strictly Necessary Cookies: Required for the Site to function. These include session cookies for authentication and security. These cookies cannot be disabled.
- Analytics Cookies: We use analytics tools to understand how visitors interact with our Site. Data is aggregated and does not identify individual users. You may opt out via the cookie consent banner.
7.2 We do not use advertising cookies, tracking pixels, or third-party behavioral advertising technologies.
7.3 You may manage cookie preferences through the cookie consent banner displayed on your first visit, or through your browser settings.
7.4 Cookie Duration:
- Session cookies: Expire when you close your browser.
- Authentication cookies: Expire 30 days from last login.
- Analytics cookies: Expire 12 months from last visit.
Section 08
8. Children's Privacy
Our Site and services are directed to commercial buyers and are not intended for individuals under the age of eighteen (18). We do not knowingly collect personal information from minors. If you believe we have collected information from a minor, contact us immediately at office@vau0.com.
Section 09
9. Third-Party Links
Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of such websites. We encourage you to review the privacy policies of any third-party sites you visit.
Section 10
10. Changes to This Policy
We may update this Policy from time to time. Material changes will be communicated via email to your registered address and by posting the updated Policy with a new effective date. Continued use of the Site after posting constitutes acceptance.