PRIVACY POLICY

• Account details: name, email, phone, shipping and billing address
• Vehicle details: VIN, chassis, model and specification (when provided)
• Order history and customer service correspondence
• Wishlist activity and saved vehicles tied to your account
• Site analytics: pages visited, device, referral source
• Technical and advertising data: IP-derived country, browser or user-agent information, cookie or local-storage identifiers, search activity, advertising click IDs and campaign parameters

VCTR Performance (ABN 54 256 697 853) is responsible for this policy. Privacy enquiries and complaints can be sent to sales@vctrperformance.com.

• Processing and dispatching your orders
• Confirming fitment and providing customer support
• Sending order, dispatch and warranty notifications
• Wishlist and back-in-stock notifications you've opted into
• Marketing emails — only with your consent and always with one-click unsubscribe
• Site performance, fraud prevention and security

We disclose data where reasonably necessary to Shopify and payment providers, Supabase hosting and database services, Klaviyo and email delivery providers, analytics and advertising providers where you consent, carriers, professional advisers, and supply-channel partners where they ship directly to you.

We do not sell customer data to third parties.

Some service providers and suppliers may process personal information outside Australia, including in the United States, New Zealand, the United Kingdom, European countries and the country from which an order is dispatched. Provider locations can change; contact us for current details.

Essential browser storage supports the cart, account security, saved preferences and fraud prevention. Advertising and behavioural analytics are activated only when you choose Allow analytics. You can withdraw that choice at any time by selecting Privacy Choices in the website footer.

We use access controls, encrypted transport, restricted administrative credentials and service-provider security controls to protect information. No internet service is risk-free. We retain personal information only for as long as reasonably required for orders, support, fraud prevention, legal and tax obligations, then delete or de-identify it where practicable.

We maintain a process to contain, assess and respond to suspected data breaches and will notify affected people and regulators where legally required.

You can request access to or correction of your personal information, ask for deletion where legally available, withdraw marketing consent, or make a privacy complaint by emailing sales@vctrperformance.com. We aim to acknowledge complaints promptly and respond within 30 days. If you are not satisfied, you may contact the Office of the Australian Information Commissioner.