Privacy policy
Autofiber / Super Detail, Inc.
Effective Date: 4/22/2026
Overview
This Privacy Policy describes how Super Detail, Inc. ("Autofiber," "we," "us," or "our") collects, uses, and discloses your personal information when you visit autofiber.com, make a purchase, or otherwise interact with us. Our store is hosted on Shopify, which enables us to provide you with the Services.
If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
1. Notice at Collection (California)
As required by the California Privacy Rights Act (CPRA), here is a summary of the personal information we collect and how we use it:
| Category | Examples | Purpose | Retention |
|---|---|---|---|
| Identifiers | Name, email, IP address, phone | Order fulfillment, fraud prevention, marketing | Up to 7 years (orders); until opt-out (marketing) |
| Commercial data | Order history, transaction data | Order processing, analytics | Up to 7 years |
| Internet activity | Browsing behavior, page interactions | Site improvement, advertising | Up to 2 years |
| Approximate geolocation | City/region level | Shipping, targeted advertising | Up to 2 years |
| Device data | Device identifiers, browser type, OS | Security, analytics | Up to 2 years |
| Account information | Username, password, preferences | Account management | Until deletion request |
We do not knowingly collect sensitive personal information as defined under the CPRA — including precise geolocation, government ID numbers, financial account credentials beyond transaction purpose, biometric data, health data, race, religious beliefs, union membership, or information about sex life or sexual orientation — beyond what is necessary to complete transactions.
Under California and similar state privacy laws, allowing third parties to collect personal information on our website for cross-context behavioral advertising purposes may be considered a "sale" or "sharing" of personal information, even when no money changes hands. You may opt out of this activity — see Section 7.
2. Information We Collect
When you make a purchase, we collect the information you provide: name, billing and shipping address, email address, phone number, and payment information. Payment card data is processed by Shopify and our payment processors — we do not store full card numbers or security codes.
When you browse our site, we automatically collect your IP address, browser type, operating system, referring URLs, and behavioral data such as pages viewed and time on site.
When you sign up for marketing, we collect your email and/or phone number for email and SMS communications.
When you contact us, we collect the content of your communication, your name, email, and any other information you choose to provide.
3. Sources of Information
We collect personal information from the following sources:
- Directly from you when you create an account, make a purchase, contact us, or otherwise provide information through our site
- Automatically through your device when you use our site, including through cookies and similar technologies
- From our service providers, including Shopify, payment processors, and shipping carriers
- From our business and marketing partners, including advertising and analytics partners
4. How We Use Your Information
We use your personal information to:
- Process and fulfill orders
- Communicate with you about your orders and account
- Prevent fraud and secure our site
- Improve our website and product offerings
- Send marketing communications (with your consent where required)
- Personalize your shopping experience
- Comply with legal obligations and enforce our policies
5. How We Disclose Your Information
We share personal information with the following categories of third parties:
- Shopify — our ecommerce platform, for order processing, store operations, and Shopify-provided features
- Payment processors — for secure transaction processing
- Klaviyo — for email and SMS marketing
- TikTok Shop — for marketplace transactions, analytics, and advertising (including order history, behavioral data, device identifiers, and approximate geolocation)
- Google and Meta (Facebook/Instagram) — for analytics and targeted advertising
- Shipping carriers — for order fulfillment
- Legal and regulatory authorities — when required by law, subpoena, or to protect our rights
- Business successors — in connection with a merger, acquisition, or sale of assets
6. Our Relationship with Shopify
Our store is hosted by Shopify, which processes personal information about your use of autofiber.com in order to provide and improve the Services. Information submitted through our site will be transmitted to and shared with Shopify as well as certain third parties, some of which may be located outside your country of residence. Shopify uses this information to help deliver the Services and, in some cases, to power certain enhanced features using data from our store alongside data from other merchants and from Shopify itself. In these circumstances, Shopify is responsible for its own processing of your personal information.
For information on how Shopify processes personal data and any rights you may have, see Shopify's Consumer Privacy Policy at https://www.shopify.com/legal/privacy. You may exercise certain rights directly through the Shopify Privacy Portal at https://privacy.shopify.com/en.
7. Your Privacy Rights
California Residents (CPRA)
Under the California Privacy Rights Act, you have the right to:
- Know what personal information we collect and how it is used
- Access a copy of your personal information
- Delete your personal information (subject to certain exceptions)
- Correct inaccurate personal information
- Opt out of sale or sharing of your personal information for advertising purposes
- Limit use of sensitive personal information
- Non-discrimination — we will not discriminate against you for exercising these rights
To exercise these rights, contact us at sales@autofiber.com or by mail at the address in Section 17. We will verify your identity before processing requests. We respond within 45 days; we may extend this by an additional 45 days where reasonably necessary, and will notify you of any extension.
Global Privacy Control (GPC)
We honor the Global Privacy Control (GPC) browser signal. If you visit our site with GPC enabled, we will treat this as a valid request to opt out of the sale or sharing of your personal information for the device and browser you are using. To learn more, visit https://globalprivacycontrol.org. We do not recognize traditional "Do Not Track" browser signals.
Authorized Agents
You may designate an authorized agent to submit privacy requests on your behalf. Before acting on an agent's request, we will require (a) written authorization signed by you, and (b) verification of your identity.
Other U.S. States
Residents of Virginia, Colorado, Connecticut, Utah, and certain other states may have similar rights to access, delete, correct, or opt out of certain uses of their personal information. To exercise these rights, contact us at sales@autofiber.com.
EEA / UK Residents (GDPR)
If you are located in the European Economic Area or United Kingdom, we process your personal data under the following legal bases: contract performance, legitimate interest, and consent. You have the right to:
- Access, correct, or delete your data
- Restrict or object to certain processing
- Withdraw consent at any time (where we rely on consent); this will not affect the lawfulness of processing before withdrawal
- Data portability
- Lodge a complaint with your local data protection authority
We respond to GDPR requests within the timeframes required by applicable law. Contact us at sales@autofiber.com to exercise these rights.
8. Shine the Light (California Civil Code § 1798.83)
California residents may request, once per calendar year, information about the personal information we have shared with third parties for their own direct marketing purposes in the preceding calendar year. To request this information, email sales@autofiber.com with the subject "Shine the Light Request." We will respond within 30 days.
9. Cookies & Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience, measure traffic, and enable targeted advertising on platforms including TikTok, Google, and Meta. By using our site, you consent to this use, subject to applicable law. You may:
- Manage cookie preferences through your browser settings
- Use the GPC browser signal to opt out of sharing for targeted advertising
- Disable specific advertising cookies through industry opt-out tools such as https://optout.aboutads.info
10. SMS & Email Marketing (TCPA / CAN-SPAM)
By providing your phone number or email address for marketing, you expressly consent to receive promotional communications from Autofiber, including through automated dialing systems. Consent is not a condition of purchase. Message and data rates may apply for SMS. Message frequency varies.
You may opt out at any time by:
- Replying STOP to any SMS message
- Clicking "unsubscribe" in any marketing email
Opting out of marketing will not affect transactional communications related to your orders.
11. Data Retention
We retain personal information only as long as necessary to fulfill the purposes described in this policy, or as required by law. Order and transaction records are typically retained for up to 7 years for legal, tax, and accounting purposes. Marketing data is retained until you opt out or request deletion. Browsing and device data is generally retained for up to 2 years.
12. Security
We implement industry-standard security measures, including SSL/TLS encryption and Shopify's PCI-DSS compliant payment infrastructure, to protect your personal information from unauthorized access, disclosure, or misuse. No system is completely secure. We recommend you do not send sensitive information through unsecured channels (including unencrypted email). If you believe your information has been compromised, contact us immediately.
13. International Data Transfers
We are based in the United States, and your information will be transferred to, stored, and processed in the U.S. If you are located in the EEA or UK, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses (and UK equivalents) when transferring personal data outside those regions, unless the destination country has been determined to provide an adequate level of protection.
14. Age of Consent
This site is intended for users who are the age of majority in their jurisdiction. We do not knowingly collect personal information from minors. If you are the parent or guardian of a child who has provided us with personal information, please contact us at sales@autofiber.com to request its deletion.
As of the effective date of this policy, we do not have actual knowledge that we "sell" or "share" (as those terms are defined in applicable law) the personal information of individuals under 16 years of age.
15. Complaints
If you have concerns about how we process your personal information, please contact us first using the details in Section 17. Depending on where you reside, you may also have the right to lodge a complaint with your local data protection authority. A list of EEA authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en.
16. Changes to This Policy
We may update this Privacy Policy at any time. When we do, we will revise the "Effective Date" at the top. For material changes, we will provide notice via email to registered users or through a prominent notice on our website. Continued use of the site after changes are posted constitutes acceptance.
17. Contact
For privacy questions, data requests, or complaints, contact us at:
Super Detail, Inc. / Autofiber
Attn: Privacy Compliance
7880 Airway Road, Suite B-10
San Diego, California 92154
sales@autofiber.com