Privacy Policy

1. Introduction

Welcome to CHIRON (website: www.chirontruckparts.com, hereinafter referred to as “the Website”). This Privacy Policy (hereinafter referred to as “the Policy”) outlines how CHIRON (hereinafter referred to as “we,” “us,” or “our”) collects, uses, discloses, stores, and protects your personal information when you access the Website, use the services provided thereon, or make purchases through the Website. Please read this Policy carefully before accessing the Website or using our services. If you do not agree to any terms of this Policy, please refrain from accessing the Website or using our services. Your access to the Website or use of our services constitutes your full understanding of and consent to be bound by this Policy.​

This Policy complies with applicable U.S. federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA, Cal. Civ. Code § 1798.100 et seq.), the California Privacy Rights Act (CPRA), and the Children’s Online Privacy Protection Act (COPPA, 15 U.S.C. § 6501 et seq.) .

2. Information We Collect

2.1 Personal Information

To fulfill transactions and provide services, we may collect personally identifiable information, including but not limited to:​

• Full name, company name (if applicable)​

• Shipping address, recipient name, and contact phone number​

• Email address​

• Payment-related information (e.g., last four digits of credit card number, payment account nickname); sensitive payment details are processed directly by third-party payment processors

2.2 Derivative Data

When you access or use the Website, our servers automatically collect non-personally identifiable information to optimize user experience and technical maintenance:​

• Internet Protocol (IP) address​

• Browser type and version, operating system type and version​

• Access time, duration of visit, and browsing path​

• Device identifiers (e.g., mobile phone model, computer hardware information)​

• Network connection type (e.g., Wi-Fi, 4G/5G)

2.3 Financial Data

When you complete purchases, place orders, request returns, exchanges, refunds, or inquire about paid services on the Website, we may collect necessary financial data, including:​

• Order number, transaction amount, and payment time​

• Payment method type (e.g., credit card, Alipay, WeChat Pay)​

• Invoice information (e.g., invoice title, taxpayer identification number), collected only when you actively request an invoice

2.4 Social Media Data

If you choose to log in to the Website via third-party social media accounts (e.g., Facebook, Instagram), we will obtain publicly available user information from such platforms with your authorization:​

• Social media username and nickname​

• Public profile picture and location (only information you set as public)​

• Email address (requires authorization from the social media platform)​

• Public contact data (used solely for convenient sharing functions, not for other purposes)

2.5 Voluntarily Submitted Information

Information you actively provide through contact forms, customer service inquiries, surveys, after-sales feedback, including but not limited to inquiry content, suggestions, complaints, and survey responses.

2.6 Sensitive Personal Information (CPRA Compliance)

Pursuant to the CPRA, we may collect sensitive personal information in limited circumstances, including:​

• Financial information such as full credit card numbers (processed directly by PCI DSS-compliant payment processors)​

• Precise geolocation data (only if you enable location services for delivery purposes)​

• Biometric information (only if you opt-in for identity verification purposes)​

We will not use or disclose sensitive personal information for purposes other than those explicitly stated in this Policy without your separate consent .

3. How We Use Your Information

We use your information only within the scope specified in this Policy and based on the principles of legality, legitimacy, and necessity, including:​

• Process your orders, including order confirmation, product delivery, payment settlement, returns, exchanges, and refunds​

• Provide customer service support, respond to inquiries, complaints, and feedback, and resolve service-related issues​

• Optimize the Website and service quality, including analyzing user behavior data, improving website functions, enhancing loading speed, and adapting to different devices​

• Send administrative notifications, such as order status updates, service term changes, security alerts, and account verification information​

• With your consent, send personalized marketing information, including new product recommendations, promotion notifications, and newsletters. You may withdraw consent at any time through notification settings or by contacting customer service​

• Organize promotional activities, user surveys, and lucky draws for event execution, result announcements, and subsequent service optimization​

• Comply with legal and regulatory requirements, fulfill compliance obligations, or use for internal auditing, data analysis, and business decision-making (data will be anonymized)​

• Protect the legitimate rights and interests of the Website and users, prevent fraud, theft, and other illegal activities, and maintain transaction security

4. How We Disclose Your Information

We strictly protect your personal information and will not disclose it to third parties arbitrarily. We may share your information only in the following specific circumstances:

4.1 Compliance with Law or Protection of Rights

We may disclose your information if we reasonably believe it is necessary to:​

• Respond to legal processes from judicial or administrative authorities (e.g., subpoenas, search warrants, court orders)​

• Investigate, prevent, or address potential violations of our Terms of Service or this Policy, or respond to fraud, security vulnerabilities, or other risks​

• Protect the legitimate rights, property, or personal safety of us, you, or third parties (including assisting in protecting personal safety in emergencies)​

Such disclosure will be made within the scope permitted or required by applicable laws, regulations, or rules.

4.2 Third-Party Service Providers

To implement service functions and improve service efficiency, we may share necessary information with third-party service providers (only the minimum information required to complete services), including:​

• Payment processors (e.g., payment gateways, banks): only share transaction-related necessary information; sensitive payment information is encrypted and processed directly by them​

• Logistics providers: only share delivery-related information such as shipping address, recipient name, and contact phone number​

• Data analysis providers: only provide anonymized user behavior data without personally identifiable information​

• Email/SMS notification providers: only share contact information and notification content for sending alerts or marketing messages​

• Website hosting and technical maintenance providers: only provide derivative data required for technical operations​

Pursuant to the CPRA, we enter into written agreements with all service providers restricting them to process data only as instructed, prohibiting them from retaining, using, or disclosing data for unrelated purposes .

4.3 Marketing Communications

With your explicit consent (e.g., actively checking a subscription box, clicking an consent button) or as permitted by law, and providing a convenient channel to withdraw consent (e.g., email unsubscribe link, account settings), we may share your contact information and preference data with cooperating third-party brands or marketing platforms for promoting relevant products or services.

4.4 Sale or Sharing of Personal Information (CCPA/CPRA Compliance)

As defined by the CCPA/CPRA, “sale” means exchanging personal information for monetary or other valuable consideration, and “sharing” means disclosing personal information for cross-context behavioral advertising. If we sell or share your personal information, you have the right to opt out at any time through the “Do Not Sell or Share My Personal Information” link on our homepage .

4.5 Business Transfers

In the event of a merger, acquisition, sale of company assets, restructuring, bankruptcy liquidation, or other business transfers, your personal information may be transferred as part of business assets to the transferee or surviving entity. We will notify you before the transfer (e.g., via website announcement, email) and require the transferee to continue complying with this Policy to protect your personal information.

4.6 Based on Your Authorization or Consent

In other circumstances with your explicit authorization or consent, we will share relevant information as requested (e.g., providing order documents to third parties for after-sales assistance).

5. Security of Your Information

We attach great importance to the security of your personal information and adopt industry-standard administrative, technical, and physical security measures, including but not limited to:​

• Technical safeguards: Implement data encryption (transmission and storage encryption), firewalls, access controls, intrusion detection, and other technical measures to prevent information leakage, tampering, or loss​

• Administrative measures: Establish strict information security management systems, clarify data processing procedures and permissions, and conduct security training and confidentiality assessments for employees accessing personal information​

• Physical safeguards: Implement physical isolation and security protection for servers and devices storing information to prevent unauthorized access​

Pursuant to revised COPPA rules, we have designated staff responsible for coordinating security plans, conducting risk assessments, and implementing, testing, and monitoring security measures . Despite these reasonable and necessary security measures, you should be aware that the Internet inherently carries uncertainties; no security measure is absolutely perfect or impenetrable, and no data transmission method can be guaranteed against interception or misuse. In the event of a personal information breach, we will immediately activate emergency response plans, take remedial measures, and notify you and relevant regulatory authorities within 72 hours as required by California law .

6. Children’s Privacy Protection (COPPA Compliance)

We strictly comply with applicable laws and will not knowingly collect, use, or disclose personal information from children under 13 years of age (hereinafter referred to as “children”) or conduct marketing activities targeting children.​

• If you are a child, please do not provide any personal information or use our services​

• If a parent or guardian discovers that we have collected a child’s personal information without verifiable parental consent, please contact us immediately. Upon verification, we will delete such information from all systems within a reasonable time and take measures to prevent recurrence​

Pursuant to revised COPPA rules:​

• We obtain separate verifiable parental consent before disclosing children’s personal information to third parties for targeted advertising or non-core service purposes​

• Approved consent methods include SMS verification and knowledge-based authentication​

• We do not retain children’s personal information indefinitely and will delete it once the collection purpose is fulfilled

7. Your Rights (CCPA/CPRA Compliance)

Under applicable U.S. laws (e.g., CCPA/CPRA), you have the following rights regarding your personal information. You may exercise these rights through the contact methods provided in Section 11:​

• Right to Know: You have the right to request copies of your personal information and understand how it has been collected, used, and disclosed​

• Right to Correct: You have the right to request correction of inaccurate or incomplete personal information to ensure its authenticity​

• Right to Delete: You have the right to request deletion of your personal information in circumstances permitted by law (e.g., information is no longer necessary, you withdraw consent)​

• Right to Limit Use: You have the right to request limitation of processing your personal information (e.g., if its accuracy is disputed or processing is unlawful)​

• Right to Data Portability: You have the right to request your personal information in a structured, machine-readable format or direct transmission to another data processor (if permitted by law)​

• Right to Opt-Out: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising​

• Right to Object: You have the right to object to processing of your personal information for marketing or data analysis purposes; we will cease such processing upon receipt of your objection (unless otherwise required by law)​

• Right to Withdraw Consent: You may withdraw previously given consent (e.g., for marketing subscriptions, social media account linkage) at any time; withdrawal does not affect the legality of processing before withdrawal​

• Right to Non-Discrimination: We will not discriminate against you for exercising any of these privacy rights (e.g., charging higher prices, providing lower-quality services)​

• Right to Complain: You have the right to file a complaint with relevant regulatory authorities if you believe our data processing violates laws or this Policy​

To protect your information security, we may require identity verification to confirm your eligibility to exercise these rights. We reserve the right to refuse unreasonable repetitive requests, requests exceeding legal scope, or requests that may harm others’ legitimate rights or violate public order.

8. Data Retention

We retain your personal information for the shortest period necessary to achieve the purposes stated in this Policy or as required by law:​

• When retention period expires or information is no longer necessary for its collection purpose, we will properly dispose of your personal information through deletion or anonymization (rendering it incapable of identifying individuals)​

• If retention needs to be extended for compliance, dispute resolution, litigation, or arbitration purposes, we will dispose of the information promptly after such matters are resolved​

Specific retention periods:​

• Transaction information: Retained for 7 years after transaction completion (per IRS recordkeeping requirements)​

• Customer service records: Retained for 3 years after last interaction​

• Children’s personal information: Retained only for the specific purpose stated at collection

9. Third-Party Links and Services

The Website may contain links to third-party websites, applications, or services (e.g., social media sharing links, third-party payment portals, advertising redirect links):​

• This Policy applies only to information we collect and does not apply to any third-party data processing​

• We are not responsible for third parties’ privacy policies, terms of service, or information security, nor can we control their data processing practices​

• When accessing third-party links or using third-party services, you should read their privacy policies and terms of service carefully and assume corresponding risks yourself

10. Updates to This Policy

We may revise this Policy due to changes in laws and regulations, business adjustments, or service optimizations:​

• For material changes (e.g., substantive changes to information collection scope, use purposes, or disclosure methods), we will notify you through prominent means (e.g., homepage pop-up, email, account message) at least 12 months in advance and indicate the effective date of the updated Policy​

• Your continued access to the Website or use of our services after the updated Policy takes effect constitutes acceptance of the updated Policy; if you disagree, you should immediately cease using the Website and related services

11. Contact Us

If you have any questions, comments, or suggestions regarding this Policy, or need to exercise your rights or report information security issues, please contact us through the following channels:​

• Official Website: www.chirontruckparts.com​

• Email: info@chirontruckparts.com​​​

We will respond to or process your request within a reasonable time (generally within 45 days; may extend once with prior notice) .