Slammed Riders, LLC ("Slammed Riders," "we," "us," "our") respects your privacy. This policy explains what we collect, why, who we share it with, and the choices you have.
This policy applies to slammedriders.com. We sell to customers in the continental United States only and do not knowingly offer products or services to individuals in the European Union or the United Kingdom.
1. Information we collect
Information you give us:
- Order information: name, shipping address, billing address, email address, phone number if provided, and the contents of your order.
- Address suggestions: when you type a street address at checkout, the characters you type are sent through our servers to Google to suggest matching US addresses (see Section 6). Your name, email, phone number, IP address, and what you type in the other address fields are not sent with them. Suggestions are optional, and you can always type your full address.
- Contact form and email: your name, email address, phone number if you give one, and anything you choose to write to us, including vehicle details you share so we can help and, for a custom kit request from Build My Kit, the parts you picked.
- Account information, if you create an account: your email address; the parts and quantities in your cart while you are signed in, so your cart follows you between devices; and anything you choose to save: your name, your car, and shipping addresses. If you sign in with Google, we save the name on your Google account as your name; you can change it on your account page. Your order history is linked to your account, and once your email address is confirmed, orders placed as a guest with that address show there too (see Section 4). Accounts are optional, and you can always check out as a guest. Your password is handled by our sign-in provider and is never stored by us (see Section 4).
- Cart reminder consent, only if you tick the box: the email address you give, the parts and quantities in your cart, when you agreed and the wording you agreed to, and, if you confirm your address for news and deals, when you confirmed (see Section 3). We do not store your IP address or browser details with it.
- Cart reminder send history: for each address we send cart reminders or a confirmation request to, when recent reminders went out, when we last emailed it, when we asked the address to confirm news and deals, and when it confirmed. It is stored under a one-way code made from the address, not the address itself (see Sections 3 and 8).
- Our do-not-email list: the email addresses of people who asked us to stop sending reminder emails, stored as a one-way code made from each address rather than the address itself (see Section 3).
- Build submissions, only if you send us your build: the photos, the build details you choose to enter (year, make, model, suspension, air management, wheels, and car club), your Instagram or TikTok handle if you give one, and when you ticked the permission box and the wording you agreed to. The submit form does not ask for your name or email address, and we do not store your IP address or browser details with a submission. If you send it from your account, it is linked to your account (see Section 5).
- My Car, only if you use it on your account page: the photos and build details you save there. They are private to you (see Section 5).
- Build gallery photos you send us another way, such as by email or direct message, and agree to being posted: the photo, a short description of the vehicle (such as its year, make, and model), your social media handle if you asked to be credited, and a private note on where the photo came from, which may include your email address or social media handle (see Section 5).
- Payment information: payments are processed by Stripe, PayPal, Apple Pay, Shop Pay (operated by Shopify), and, if you choose it, Affirm. You submit your payment details to those providers, not to us. We do not receive or store your full payment card number. We receive limited confirmation data such as the last four digits of the card, card type, billing name and address, and whether the transaction succeeded. After you order, Stripe and PayPal also send us updates about your payment, such as whether it cleared, was declined, refunded, reversed, or disputed, and Stripe tells us the results of its fraud checks, such as a high risk rating, a payment sent for review, an early fraud warning from your card issuer, or a card security code or ZIP code that did not match.
- Payment records we start: when you start a PayPal payment, we keep the PayPal order number, the amount, the parts and quantities, and your account id or reminder cart id if you have one, so that we only accept payments our own checkout started. For Shop Pay, we keep the payment id and the amount. We delete these after a few days (see Section 8).
Information collected automatically: each time your browser asks for a page, it sends standard technical information such as your IP address, browser type, device type, operating system, and the page it wants. Our website host receives this to deliver the Site and may keep it in its logs for a limited time for security and troubleshooting. To count requests and stop abuse, our servers turn your network address into a one-way code (see Section 8). When you open checkout, our payment providers' scripts collect information about your device and browser to prevent fraud (see Section 7). Product photos load from our parts supplier's image servers, and gallery photos from Google, which receive the same kind of technical information when they send your browser an image (see Section 6). If something on our pages breaks our security rules, your browser may send us a short report; we record only which rule was involved and the website the item came from, never the page you were on.
Analytics and advertising tools. We do not currently run third party analytics, advertising, or tracking pixels on the Site. If we add any, including web analytics, a Meta pixel, Google Ads conversion tracking, or a TikTok pixel, this policy will name each of them here before it goes live.
We do not knowingly collect information from anyone under 18. The Site is not directed to children. If you believe a minor has provided us information, contact us and we will delete it.
2. How we use your information
We use your information to:
- Process, fulfill, and ship your order, and communicate with you about it, including order confirmations and shipping updates with tracking
- Suggest matching addresses as you type your street address at checkout
- Run your account if you create one: sign-in, your saved car, addresses, and cart, your order history, and emails about your account, such as confirming your email address
- Send cart reminder emails, and news and deals once you confirm your email address, only if you ticked the box asking for them (see Section 3)
- Review the builds you send us and, once our team approves them, show them in the gallery on the Site and share them on our social media, with permission from the person who sent the photos and the credit they asked for (see Section 5)
- Keep the photos and build details you save under My Car on your account page, private to you
- Provide customer support and answer your questions
- Verify fitment questions and route warranty and damage claims to the right party
- Detect, prevent, and investigate fraud, chargebacks, and abuse, including holding an order for review when a payment looks risky or has not cleared
- Operate, maintain, secure, and improve the Site
- Comply with legal, tax, and accounting obligations
We use your information for the purposes described above and for compatible purposes. We do not use it for automated decision making that produces legal effects about you.
3. Cart reminder emails
Cart reminder emails are optional. At checkout there is an unticked box asking whether we may email you if you leave items in your cart, plus news and deals once you confirm your email address. The same choice is on your account page if you have an account. We only send these emails if you tick that box. If you are not signed in and never tick it, your cart stays in your browser and we keep no copy of it for reminders. If you are signed in, your cart is saved to your account so it follows you between devices, but we still only send reminders if you tick the box.
Confirming your address. Anyone can type an email address at checkout, so news and deals start only once the address is confirmed as yours. If you tick the box without signing in, we send the address one email asking you to confirm, either inside your first cart reminder or on its own, and we ask at most once every 30 days. If you tick the box while signed in to an account whose email address is confirmed, that counts as confirming. If your account's email address is not confirmed yet, news and deals start once you confirm it, and you can ask for a confirmation email from your account page. Until an address is confirmed, we send it no news or deals, only cart reminders (at most one a week) and that request.
What a reminder contains: the parts left in your cart with their current prices, a link that brings back the parts that were in your cart when the reminder was sent, and a link to unsubscribe. We send at most two reminders for a cart, within a few days of your last change to it, and they stop when you place an order. Changing your cart can start them again, but never more than once a week. However many carts or browsers your address was entered on, and however it was written (for example with a tag, or with dots in a Gmail address), we send it at most one cart reminder in any 7 days until the address is confirmed, and at most two after that, and never two of these emails within 20 hours of each other.
Links in our emails. The links in our reminder and confirmation emails that lead back to your cart, unsubscribe you, or confirm your address are encrypted, so they do not show your email address. A reminder's link back to your cart works for 30 days, and stops sooner when the next reminder goes out, when you place an order, or when you unsubscribe. Unsubscribe links work for 60 days, and you can always email us instead. Our unsubscribe and confirmation pages tell your browser not to pass their web address on to other sites.
Unsubscribing: every reminder and every confirmation request has an unsubscribe link, and email apps that offer a one-click unsubscribe button can use it. You can also email contact@slammedriders.com and we will do it for you. If you are signed in and your account's email address is confirmed, unticking the box at checkout or turning emails off on your account page does the same. Each of these puts your email address on our do-not-email list (together with other ways of writing the same inbox, such as with a tag or, for Gmail, with dots), deletes every guest cart saved for it, turns reminders off for any account that uses it, and withdraws any confirmation for news and deals, so we do not send you reminder or marketing emails again. We honor unsubscribes promptly.
Unticking the box in other cases. If you are not signed in, unticking the box deletes only the sign-up saved on that browser. It does not put the address on our do-not-email list, because we cannot tell whether the address is yours, so sign-ups for the same address made on other browsers continue until you unsubscribe with the link in any of our emails or by emailing us. If you are signed in but your account's email address is not confirmed yet, unticking the box or turning emails off stops emails for that account only.
To turn reminders back on after unsubscribing, sign in to an account with that email address, confirm the address, and tick the box or turn emails on from your account page.
If you are not signed in when you tick the box, we store the email address you gave, the parts and quantities in your cart, when you ticked the box and the wording shown, and when you confirmed your address if you do, linked to a cookie in your browser. We do not store prices, payment details, your IP address, or browser details with it. Each browser where you tick the box keeps its own saved cart. If you later sign in on that browser, your account's saved cart takes its place, and your choice carries over if it was for your account's email address. Otherwise a guest cart is deleted after 90 days without changes, or 30 days after it becomes an order, or sooner as described above.
Send history. To keep to these limits, we keep a short send history for each address we email: when recent reminders went out, when we last emailed it, when we asked it to confirm, and when it confirmed. It is stored under a one-way code made from the address, never the address itself, and deleted 100 days after it last changed (see Section 8).
No open or click tracking. Our emails do not contain tracking pixels, and we keep our email providers' open and click tracking switched off, so we do not know whether you open our emails or which links you click. The product photos in a reminder load from our parts supplier's image servers when your email app shows images. They are the same photos everyone sees, so they do not tell us whether you opened the email.
4. Accounts and sign-in
Accounts are optional, and prices are the same with or without one.
- Sign-in: handled by Google Firebase Authentication. Your password goes to Firebase, not to us, and we never see or store it. If you sign in with Google, we save the name on your Google account as your name. We use the first name on your account to greet you in cart reminders. You can change your name on your account page.
- Account emails: Firebase sends password reset emails and the first email asking you to confirm your email address. If you ask for another confirmation email from your account page, we send it from our own mailbox. Once your account's email address is confirmed, orders placed as a guest with that address also show in your order history, including their shipping addresses, and we email the address once to say so.
- Storage: your account profile, saved car, My Car details, saved addresses, saved cart, and order records are stored in Google Cloud Firestore, and My Car photos in Cloud Storage for Firebase, without any public link.
- Staying signed in: a secure cookie keeps you signed in on that browser for up to 14 days (see Section 7).
- Deleting your account: you can delete your account from the Privacy and data link at the bottom of your account page. For your security, we ask you to sign in again first if you last signed in more than 10 minutes earlier. Deleting your account deletes your profile, saved car, My Car details and photos, any build you sent from your account that is still waiting for review, saved addresses, email preferences, and saved cart, and removes your sign-in from Firebase. Photos already in the gallery stay until you ask us to take them down (see Section 5). If your email address is confirmed, it also deletes any open cart reminder sign-up you made with that address while signed out, on any device, so its reminders stop. Records of orders you placed are kept for our business and tax records, no longer linked to an account (see Section 8). If your address is on our do-not-email list, it stays there so we keep honoring your request.
5. Build gallery photos
The gallery on the Site shows cars on air suspension, including builds our customers and other enthusiasts share with us. It may also include sample photos that are not customer builds. You can send us your build through our Submit your build page, without an account, or from My Car on your account page. You can also send photos by email or direct message, and our team adds one only after its sender says we may post it.
- Review first: nothing you send through the Site is public until a member of our team approves it. Until then your photos are private: they are stored without any public link, and only our team can see them. We may feature some of your photos and not others, and may correct the vehicle and build details you entered.
- What is public once approved: the photos we approve, the vehicle and its make (for example, "2004 Honda S2000" under "Honda"), the build details you entered (suspension, air management, wheels, and car club), and your Instagram or TikTok handle with a link to your profile if you gave one. Anyone who visits the Site can see a posted photo, and we cannot control copies that others save or share. We may also share approved photos on our social media accounts and tag your handle (for a photo that was in our gallery before September 30, 2026, only after asking its sender).
- What we keep privately: for a build sent through the Site, when the permission box was ticked and the wording shown, and whether it was sent from an account (and which one). For a photo sent another way, which team member added it and confirmed permission, when they added it, and a short note on where the photo came from, which may include your email address or social media handle. Only our team can see this. It is never shown in the gallery, and it is deleted along with the photo.
- Location data removed: photos taken on phones often carry hidden details, such as the GPS location where the photo was taken and the camera or phone model. When you send photos through the Site, your browser makes a smaller copy that leaves these details out before anything is sent, and our servers remove anything left before storing it. We remove them from the copy we post of a photo sent another way too, and we do not use them. A photo you emailed or messaged us stays in that email or message, like any other message to us.
- What we do not remove: anything you can see in the photo itself, such as faces, license plates, or house numbers. We do not blur or edit photos. If you would rather something not be shown, tell us and we will take the photo down, or post a different photo you send us.
- Children: you must be 18 or older to send us a build. We do not post photos sent by anyone under 18, or photos in which a child can be recognized.
- How long we keep builds that are not posted: an upload you start but do not finish is deleted within 2 days. A build our team has not reviewed is deleted 60 days after you sent it. When we decline a build, its photos and details are deleted right away. When we approve one, the photos we did not choose and every private copy are deleted right away, and the approved photos become gallery photos (see Section 8). If our storage service fails at that moment, our daily clean-up finishes the deletion. If you sent it from your account, you can take it back from My Car while it is waiting for review (until our team starts adding it to the gallery), which deletes it.
- My Car: photos and build details you save under My Car on your account page are private to you. They are stored without any public link and shown only to you while you are signed in. Our team does not see them unless you choose "Submit to the gallery," which sends a copy for review as described above. They are kept until you remove them or delete your account.
- Where it is stored: photos are stored in Cloud Storage for Firebase, and gallery, submission, and My Car details in Google Cloud Firestore. Visitors' browsers load posted photos from Google's servers and may keep a copy for up to a day. Private photos are never cached by browsers.
- Taking a photo down: email contact@slammedriders.com or use our support page. Within 2 business days of your request, we will take the photo off the Site, delete it, with its details, permission record, and private note, from our gallery storage, and remove our own social media posts of it. As soon as we hide or delete a photo, the links to its image files that the Site had shown stop working (if our storage service fails at that moment, the Site retries every day until they do). You can also ask us to take down a photo that shows you, your car, or your property, even if someone else sent it to us, or to delete a build you sent that is still waiting for review.
8. Data retention and security
We keep order and transaction records as long as necessary to fulfill the purposes described here and to meet our legal, tax, and accounting obligations, which for sales records is generally several years. Messages sent through our contact forms are emailed to our shop mailbox and are not stored on the Site. We keep contact messages and emails as long as needed to resolve your inquiry and for reasonable business records.
- Order records (your name, email address, phone number if you gave one, ship-to address, the items and part numbers you ordered, the amounts, the payment status, a link to Stripe's receipt if you paid through Stripe, and notes about the payment such as fraud-check results, refunds, or disputes) are kept for our business and tax records, including after you delete an account.
- Account data (your profile, saved car, saved addresses, and saved cart) is kept until you delete your account.
- Guest carts saved for cart reminders are deleted after 90 days without changes, or 30 days after they become an order. Unticking the box deletes the one saved on that browser right away, and signing in on that browser replaces it with your account's cart. Unsubscribing deletes every guest cart saved for your address right away, whether it is still open, emptied, or already became an order.
- Cart reminder send history (see Section 3) is stored under a one-way code made from your email address, never the address itself, and is deleted 100 days after it last changed. Unsubscribing removes any confirmation for news and deals, but the send dates stay until then so the limits in Section 3 keep working.
- Payment records we start (see Section 1) are deleted 3 days after a PayPal payment starts, or 2 days after a Shop Pay payment starts.
- Abuse-prevention counters (how many requests or messages recently came from a network address, an email address, or an account) hold only a one-way code made from that address or account id with a secret key, never the address or id itself, and expire within 2 days. The address suggestions shown for a search at checkout are kept the same way, as one-way codes, for 10 minutes, so only an address the Site suggested can be looked up.
- Order email records (the order or payment reference number of each order confirmation, alert, or follow-up already sent, never your name, email address, or ship-to address) are kept with Upstash for up to 45 days, so the same email is never sent twice.
- Gallery photos are kept until we delete them, including photos we have added but are not showing on the Site. As soon as we hide or delete a photo, the links to its image files that the Site had shown stop working (if our storage service fails at that moment, the Site retries every day until they do), though a browser that already showed it may keep its own copy for up to a day. A deleted photo comes off the Site right away, and its files and all of its details, including the permission record and private note, are erased 7 to 8 days later so we can undo a mistake. When you ask us to take a photo down, we skip that wait (see Section 5). After a file is erased, our storage provider may keep it in a recovery area for up to 7 days, where it cannot be viewed.
- Build submissions that are not posted: an unfinished upload is deleted within 2 days, a build our team has not reviewed 60 days after it was sent, and a declined or withdrawn build right away (see Section 5). Approved photos are kept as gallery photos, as described above.
- My Car photos and details are kept until you remove them or delete your account.
- Our do-not-email list keeps, as one-way codes made from each address and from the inbox it delivers to, the email addresses of people who unsubscribed, turned emails off while signed in with a confirmed email address, or asked us to stop emailing them, so we can keep honoring the request.
The deletions on a schedule in this section are made by an automatic job that runs once a day, so each one happens on the first run after its date.
We use commercially reasonable administrative, technical, and physical safeguards to protect your information, including keeping payment card data out of our systems entirely. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Your California privacy rights
If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended, including the right to:
- Know what personal information we have collected about you, the categories of sources, the purposes, and the categories of third parties we disclose it to
- Access a copy of the personal information we hold about you
- Delete personal information we have collected, subject to exceptions such as completing a transaction, security, fraud prevention, and legal compliance
- Correct inaccurate personal information
- Opt out of the sale or sharing of your personal information, including sharing for cross context behavioral advertising
- Limit the use of sensitive personal information. We do not collect sensitive personal information as that term is defined by the CCPA.
- Not be discriminated against for exercising these rights. We will not deny you products, charge you a different price, or provide a lesser quality of service because you exercised a privacy right.
We do not sell your personal information for money, and the Site runs no advertising or analytics tools that would share it for cross-context behavioral advertising (see Section 1). If we add advertising cookies or pixels, their use may constitute "sharing" under the CCPA, and we will update this policy first. You can opt out at any time by emailing us at contact@slammedriders.com with the subject line "Do Not Sell or Share My Personal Information."
Global Privacy Control. The Site does not currently read Global Privacy Control (GPC) signals, because it has no sale or sharing of personal information for the signal to switch off. Shopify's Shop Pay script does not act on Global Privacy Control, and we have no way to pass your choice to it, so it loads only if you press the Shop Pay button. Once it loads, it sends Shopify its own analytics and consent information under Shopify's privacy policy (see Section 7).
To exercise any right, email contact@slammedriders.com with the subject line "Privacy Request" and tell us which right you are exercising. We will verify your identity, typically by matching the email address and order details on file, before we act. For a request about a gallery photo or a build you sent us, we may instead check that you control the email address, social media account, or Slammed Riders account the photo came from, or that the car in the photo is yours. We respond within the time required by law. An authorized agent may submit a request on your behalf with proof of authorization.
Residents of other states with comparable privacy laws may have similar rights. Contact us using the same address and we will honor rights available to you under your state law.
10. Do Not Track
Browsers may offer a "Do Not Track" signal. There is no common industry standard for responding to it, and we do not currently respond to Do Not Track signals. See Section 9 for Global Privacy Control.
11. Third party sites
The Site may link to third party sites, including manufacturer resources and payment provider pages. This policy does not apply to them. Review their privacy policies before providing information.
12. Changes to this policy
We may update this policy. The "Last updated" date at the top reflects the current version. Material changes will be posted on this page. Continued use of the Site after an update constitutes acceptance.
13. Contact us
Questions, requests, or complaints about privacy:
contact@slammedriders.com
Slammed Riders, LLC 115-25 Merrick Blvd Rochdale, NY 11434