Privacy Policy

Last updated: 11 May 2026

RepairKitHub (“we,” “us,” or “our”) operates https://repairkithub.com (the “Service”). This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and what rights you have.

By using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

• Order information: name, shipping address, billing address, email address, phone number, and payment details. Payment card numbers are processed directly by our payment processor (Stripe) and are not stored on our servers.
• Customer account: email address and password (hashed and salted) if you create an account.
• Email subscriptions: email address, date and IP of consent, and the product or category of interest when you sign up for marketing communications or a “back-in-stock” alert.
• Communications: the content of any message you send us via email or the contact form.

1.2 Information Collected Automatically

• Device and browser data: IP address, browser type and version, operating system, device type, screen resolution, language preference.
• Usage data: pages viewed, links clicked, search queries on the site, add-to-cart events, referrer URL, time spent on pages.
• Cookies and similar technologies: session identifiers, persistent preferences cookies, analytics identifiers, and marketing pixels (see Section 9 for details).

1.3 Order History

If you create a customer account, your order history is stored and accessible to you via the account dashboard.

2. How We Use Your Information

• Process, fulfill, and confirm your orders (contractual necessity).
• Communicate with you about your purchase, return requests, or support inquiries.
• Detect and prevent fraud, abuse, and security incidents (legitimate interest).
• Improve the Service — analyze which pages are visited, what searches return no results, and how the checkout flow performs (legitimate interest).
• Send marketing emails and promotional offers — only with your prior, freely-given consent, and only until you withdraw that consent.
• Comply with legal obligations (tax records, accounting, regulatory requests).
• Enforce our Terms of Service.

3. Third-Party Sharing

We share personal information only with service providers that directly support the operation of the Service. We do not sell or rent your personal information to any third party.

• Shopify, Inc. — e-commerce platform provider (US/Canada). Shopify stores and processes order data on our behalf and is bound by its Privacy Policy.
• Stripe, Inc. — payment processing. Stripe operates under its own PCI-DSS-compliant infrastructure and Privacy Policy. We do not store full card numbers.
• Amazon Associates / Amazon Services LLC — affiliate program. When you click an affiliate link and visit Amazon, Amazon sets its own cookies under its independent Privacy Notice.
• Cloudflare, Inc. — CDN, DDoS protection, and DNS. Cloudflare may process your IP address and request metadata for security and performance purposes per its Privacy Policy.
• Google LLC — Google Analytics 4 and Google Search Console. These services receive pseudonymized browsing data after you consent to analytics cookies. Google operates under its Privacy Policy.
• Email service provider — when our marketing email platform is active, your email address and preferences are shared with it solely for sending communications you have opted into.
• US fulfillment partners / distributors — receive only the shipping information necessary to deliver your order.
• Law enforcement and government authorities — when required by applicable law, court order, or to protect the rights and safety of our customers or the public.

4. California Consumer Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) gives you the following rights:

• Right to Know: request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, our business purposes, and the categories of third parties with whom we share it.
• Right to Delete: request deletion of your personal information, subject to certain exceptions (e.g., completing a transaction, security, legal obligations).
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: we currently do not sell or share your personal information for cross-context behavioral advertising. If this changes, we will provide a prominent “Do Not Sell or Share My Personal Information” link and update this section.
• Right to Non-Discrimination: we will not deny you goods or services, charge different prices, or provide a different level of service because you exercised your privacy rights.
• Right to Limit Use of Sensitive Personal Information: we do not use sensitive personal information for purposes other than those permitted under CPRA.

To submit a verifiable consumer request, email support@repairkithub.com with the subject line “CCPA Rights Request” and describe your request. We will respond within 45 days. We may need to verify your identity before fulfilling a deletion or access request.

5. EU/UK Rights (GDPR / UK GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation and UK GDPR give you the following rights:

• Right of Access (Art. 15): obtain a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): correct inaccurate or incomplete personal data.
• Right to Erasure (Art. 17): request deletion of your personal data (“right to be forgotten”), subject to legal retention requirements.
• Right to Data Portability (Art. 20): receive your data in a structured, commonly-used, machine-readable format.
• Right to Object (Art. 21): object to processing based on legitimate interests or for direct marketing purposes.
• Right to Restriction of Processing (Art. 18): request that we limit how we use your data while a dispute is pending.
• Right to Withdraw Consent: at any time, without affecting the lawfulness of processing performed before withdrawal.

5.1 Lawful Basis for Processing

• Contract performance (Art. 6(1)(b)): processing necessary to fulfill your order.
• Legal obligation (Art. 6(1)(c)): tax and accounting record retention.
• Legitimate interests (Art. 6(1)(f)): fraud prevention, site security, service analytics.
• Consent (Art. 6(1)(a)): marketing emails and non-essential analytics/marketing cookies.

5.2 International Data Transfers

Our service providers (Shopify, Google, Cloudflare, Stripe) may transfer data outside the EEA. Such transfers rely on Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms under the GDPR, as documented in each provider’s data processing agreement.

5.3 Data Protection Contact

To exercise any GDPR rights or submit a data subject request, email support@repairkithub.com with the subject line “GDPR Data Request.” We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

6. Other US State Privacy Rights

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Utah (UCPA) have rights to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising and profiling. Submit requests to support@repairkithub.com. We will respond within 45 days (extendable to 90 days with notice).

7. Children’s Privacy (COPPA)

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us at support@repairkithub.com and we will delete it promptly. Parents or guardians may also contact us to request deletion of a child’s information.

8. Data Retention

• Order records: retained for 7 years as required by US federal and Wyoming state tax and accounting law.
• Customer account data: retained until you request deletion of your account.
• Marketing email addresses: retained until you unsubscribe or request deletion.
• Analytics data (Google Analytics): automatically deleted after 14 months per our Google Analytics retention settings.
• Support communications: retained for up to 3 years for quality assurance and dispute resolution.

9. Cookies and Tracking Technologies

We use the following categories of cookies and similar technologies:

• Strictly necessary cookies: required for the Service to function — shopping cart, login session, checkout flow, CSRF protection. These cannot be disabled.
• Functional cookies: remember your preferences (language, region, currency). Disabled without materially breaking the Service, but some features may not work as intended.
• Analytics cookies: collect pseudonymized data about how visitors use the site (Google Analytics 4). Only active after you consent via the cookie banner.
• Marketing cookies: track visits from affiliate and ad networks to measure campaign effectiveness. Only active after you consent.

You can manage or withdraw cookie consent at any time via the cookie preference banner shown on your first visit, or via your browser settings. Withdrawing consent does not affect the lawfulness of prior processing.

We disclose that Amazon Associates cookies are set by Amazon’s domain when you click affiliate links; these are governed by Amazon’s own cookie policy.

10. Security

The Service is served over HTTPS/TLS. We rely on Shopify’s platform security (SOC 2 Type II certified, PCI DSS Level 1 compliant) for payment processing and data storage. We employ access controls, encrypted storage, and regular security reviews. No data transmission over the Internet is 100% secure; you transmit information at your own risk.

11. Updates to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will update the “Last updated” date at the top of this page and, where feasible, notify you by email or by a prominent notice on the Service. Your continued use of the Service after the effective date of changes constitutes your acknowledgment of the revised policy.

12. Contact Us

For any questions, concerns, or data rights requests regarding this Privacy Policy, please contact:

Canamax Corp
30 N Gould St Ste R, Sheridan, WY 82801, USA

Email: support@repairkithub.com