Privacy Policyd

At ridechico.com (operated by Lin & Co., LLC), we prioritize the privacy and security of your personal information. This comprehensive policy outlines how we collect, use, store, and protect your data when you browse our Shopify store, purchase bicycles, or interact with our services. We comply with the California Consumer Privacy Act (CCPA), General Data Protection Regulation (GDPR) (for international visitors), and Shopify’s data protection standards to ensure transparency and compliance.

1. Information We Collect

We gather only data necessary to provide and improve our services, tailored to your bicycle shopping experience. Your information is collected through Shopify’s secure platform and direct interactions with our team:

a. Personal Identification Information (PII)

• Contact Details: Full name, email address (e.g., vabivivi30@gmail.com), phone number, and shipping/billing address (our facility: 41 Magnolia Ave E, Mc Henry, MS 39561, is for business use only—not customer delivery).
• Account Information: If you create an account, we store your username, password (encrypted via Shopify’s secure hashing), and preferences (e.g., favorite bike categories, size preferences).

b. Transaction & Order Data

• Purchase Details: Order number, bicycle model (e.g., mountain bike, commuter bike), quantity, price, payment method (processed securely by Shopify Payments—we never store credit card numbers), and billing information.
• Order History: Past purchases, returns, exchanges, and delivery status (used to track orders, resolve issues, and provide personalized recommendations).

c. Usage & Behavioral Data

• Shopify-Powered Analytics: IP address, browser type, device information (mobile/desktop), operating system, and browsing activity (e.g., pages visited, bike models viewed, time spent on site, search queries). This data is collected via Shopify’s cookies and analytics tools (e.g., Shopify Analytics, Google Analytics) to improve site performance, optimize product listings, and tailor user experiences.
• Cookie Data: Essential cookies (required for checkout, order processing, and site functionality) and non-essential cookies (for personalized recommendations, marketing, and site improvement). You can manage cookie preferences in your browser settings or our store’s cookie banner.

d. Voluntary Information

• Customer Feedback: Surveys, reviews, or messages you send (e.g., questions about bike assembly, maintenance tips) to help us enhance our products and services.
• Marketing Opt-Ins: Information you provide when subscribing to our newsletter, following our social media, or participating in promotions (e.g., bike giveaways, seasonal sales).

2. How We Use Your Information

Your data is used to deliver a seamless, secure, and personalized experience—never for purposes unrelated to your bicycle purchase or our services:

• Fulfill Orders: Process, pack, and ship your bicycle; send order confirmations, tracking updates, and delivery alerts (via email or SMS, if opted in).
• Customer Support: Respond to inquiries (e.g., bike fit questions, delivery delays), resolve issues (e.g., damaged shipments, returns), and provide technical assistance (e.g., assembly guides).
• Personalize Your Experience: Recommend bikes based on your browsing history (e.g., if you viewed mountain bikes, we may suggest related accessories), remember your size preferences, and tailor marketing content to your interests.
• Prevent Fraud & Ensure Security: Verify transactions, detect unusual activity (e.g., suspicious login attempts, bulk orders), and protect against unauthorized access (using Shopify’s fraud detection tools and encryption).
• Improve Our Services: Analyze usage data to optimize site navigation, update product offerings (e.g., adding popular bike models), and enhance customer support processes.
• Marketing Communications: Send newsletters, promotions, and updates (e.g., new bike launches, maintenance tips) only if you opt in during checkout or via our newsletter sign-up. You can unsubscribe anytime via email links or by contacting us.

3. Data Sharing & Disclosure

We never sell, rent, or trade your personal information to third parties for marketing purposes. We may share your data only in the following limited circumstances:

• Shopify & Service Providers: We share necessary data with Shopify (for platform operations, payment processing, and analytics) and trusted third-party partners:
  • Logistics Partners: Shipping carriers (UPS, FedEx) receive your name, address, and order details to deliver your bicycle.
  • Payment Processors: Shopify Payments, PayPal, or other payment gateways process your payment securely (they adhere to PCI DSS standards).
  • Analytics Tools: Google Analytics (anonymized data only) to track site performance—you can opt out via Google’s Ads Settings.
• Legal Compliance: We may disclose data if required by law (e.g., subpoenas, court orders) or to protect our rights, property, or safety (e.g., investigating fraud or unauthorized activity).
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity (we will notify you via email or site notice and ensure compliance with this policy).

4. Data Protection & Security

We use industry-leading measures to safeguard your information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your browser and our store is encrypted via Shopify’s SSL (Secure Sockets Layer) technology (look for “https://” and the padlock icon in your address bar).
• Secure Storage: Your data is stored on Shopify’s secure servers, protected by firewalls, access controls, and regular security audits. Passwords are encrypted using bcrypt hashing (unreadable to third parties).
• Access Controls: Only authorized staff (order processing, customer support) have access to your data, and they are required to sign confidentiality agreements.
• Data Minimization: We retain only the data needed to fulfill the purposes outlined in this policy. Transaction data is kept for 7 years for tax and legal compliance; other data is deleted once no longer necessary.

5. Your Rights (CCPA & GDPR Compliant)

You have the right to control your personal information, and we make it easy to exercise these rights:

• Access & Disclosure: Request a copy of the personal data we hold about you (e.g., order history, contact details) by emailing vabivivi30@gmail.com.
• Correction: Update inaccurate or incomplete information (e.g., change your shipping address) via your ridechico.com account or by contacting us.
• Deletion (“Right to Be Forgotten”): Request the deletion of your personal data (exceptions apply for legal/tax compliance, fraud prevention, or essential business purposes).
• Data Portability: Receive your data in a structured, machine-readable format (e.g., CSV file) to transfer to another service provider.
• Opt-Out of Marketing: Unsubscribe from newsletters or promotional emails by clicking “Unsubscribe” in the email or contacting us. You can also opt out of non-essential cookies via your browser settings.
• Withdraw Consent: Revoke consent for data use (e.g., marketing, cookies) at any time—this will not affect data used for essential purposes (e.g., processing existing orders).

To exercise these rights, email us at vabivivi30@gmail.com with your full name, email address, and a detailed request. We will process your request within 30 days (GDPR) or 45 days (CCPA) and notify you of the outcome.

6. Cookies & Tracking Technologies

Cookies are small text files stored on your device to enhance your browsing experience. We use two types of cookies:

• Essential Cookies: Required for site functionality (e.g., remembering your cart, enabling checkout). These cannot be disabled.
• Non-Essential Cookies: Used for analytics (tracking site usage), marketing (targeted ads), and personalization (recommendations). You can disable these in your browser settings (e.g., Chrome, Safari, Firefox) or via our store’s cookie banner.

Third-party cookies (e.g., Google Analytics) are subject to their own privacy policies. You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-on.

7. Children’s Privacy

Our store is not intended for children under 13. We do not knowingly collect personal information from minors. If you believe a child has provided us with data, please contact us immediately, and we will delete it.

8. Policy Updates

We may update this privacy policy periodically to reflect changes in laws, technology, or our services. Updates will be posted on this page with a revised “Last Updated” date. By continuing to use ridechico.com, you agree to the updated policy. We recommend reviewing this page regularly for changes.