Privacy policy

# Privacy Policy

**Last Revised: May 14, 2026**

Welcome to dongar.tech (the "Site"), operated by Dongar Technologies LLC ("Dongar," "we," "us," or "our"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what we collect, how we use it, who we share it with, and the rights and choices you have. Please read it carefully.

**By visiting the Site, you accept the practices described in this Privacy Policy.**

We act as the "data controller" or "business" responsible for your personal information under applicable law. Our contact for privacy matters is Kevin Sayo, reachable at **privacy@dongar.tech**.

This Policy is prepared to comply with the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), other US state privacy laws (including in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and similar jurisdictions), the EU General Data Protection Regulation ("GDPR") and the UK GDPR where applicable, and Canadian privacy law (PIPEDA). Provisions that apply only to residents of specific jurisdictions are flagged.

---

## 1. What Personal Information We Collect

### Information you give us
When you place an order, register an account, contact support, leave a review, sign up for our email or SMS list, or interact with the Site, you may provide:

- Name, shipping and billing address, phone number, and email address
- Payment information (processed by our payment processors — we do not store full card numbers)
- Account credentials and order history
- Vehicle information (year, make, model) used to recommend compatible products
- Communications you send to us, including support requests and product reviews
- Marketing preferences

### Information collected automatically
When you visit the Site, we and our service providers and advertising partners automatically collect:

- IP address, device identifiers, browser type and language, operating system
- Pages viewed, links clicked, referring URL, time on page, scroll and click behavior
- Approximate geolocation derived from IP address
- Cookies, pixels, web beacons, local storage, and similar tracking technologies

### Information from third parties and online data partners
We may receive information about you from:

- Shipping carriers (delivery updates and address corrections)
- Payment processors and fraud-prevention services
- Advertising and analytics partners
- **Online data partners and identity-resolution vendors** that may match your activity on our Site to contact information they already have about you (see Section 3 below)
- Public sources and co-marketing partners

We do not knowingly collect sensitive personal information (such as Social Security numbers, precise geolocation, government IDs, biometric data, health information, racial or ethnic origin, religious beliefs, union membership, sexual orientation, or the contents of private communications) and we ask that you not submit it to us.

---

## 2. How We Use Cookies and Similar Technologies

We and our partners use cookies, pixels, web beacons, software development kits (SDKs), and similar technologies to:

- Operate the Site, remember your cart, and keep you signed in
- Measure traffic, performance, and how visitors use the Site
- Personalize content and product recommendations
- Deliver and measure advertising on the Site and across other websites and apps
- Detect and prevent fraud

You can manage cookies through your browser settings or our cookie banner. Disabling cookies may limit some Site features. For interest-based advertising opt-outs, see Section 4 and the Digital Advertising Alliance at https://www.aboutads.info/choices/ and the Network Advertising Initiative at https://thenai.org/opt-out/.

---

## 3. Third-Party Pixels, Cookies, and Identity Resolution

**When you visit our website, log in, register, or open an email, cookies, ad beacons, and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or home address. We (or service providers on our behalf) may then send communications and marketing to these email or home addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.**

We also work with advertising platforms including Meta (Facebook/Instagram) and Google to deliver targeted advertising. These platforms may set cookies and pixels on the Site and may receive limited information about your interactions to:

- Show you Dongar ads on their platforms and across the web
- Build lookalike or similar audiences
- Measure ad performance

You can manage these specifically at:
- **Meta:** https://www.facebook.com/adpreferences
- **Google:** https://adssettings.google.com

---

## 4. How We Use Information

We use your personal information to:

- Process orders, payments, returns, and warranty claims
- Provide customer support and respond to inquiries (handled through our CX platform, currently Gladly)
- Send transactional messages (order confirmations, shipping updates, account notices)
- Send marketing emails and SMS (where you've consented or as permitted by law), including via our email service provider Klaviyo
- Personalize Site content and product recommendations, including vehicle-compatibility suggestions
- Run, measure, and optimize advertising campaigns across our owned channels and third-party platforms
- Conduct analytics, research, and product development
- Detect, investigate, and prevent fraud, abuse, and security incidents
- Comply with legal obligations and enforce our terms

**Legal bases (for EU/UK residents):** We rely on your consent (for marketing and non-essential cookies), performance of a contract (to fulfill orders), our legitimate interests (to operate, secure, and improve our business), and compliance with legal obligations.

---

## 5. How We Share Information

We do not sell your personal information for money. We share personal information in the following ways:

**Service providers and processors** that perform functions on our behalf under contract, including:
- Shopify (e-commerce platform and order processing)
- Klaviyo (email and SMS marketing)
- Gladly (customer support)
- Payment processors (e.g., Shopify Payments, PayPal)
- Shipping and logistics providers
- Hosting, analytics, fraud-prevention, and IT vendors

**Advertising partners and online data partners,** including Meta, Google, Retention.com, and similar identity-resolution and ad-tech providers. Under CPRA, some of these disclosures may be considered "sharing" or "selling" of personal information for cross-context behavioral advertising. You can opt out as described in Section 8.

**Affiliates** within the Dongar Technologies corporate family.

**Legal and safety disclosures** in response to lawful requests (subpoenas, court orders, government investigations) or to protect our rights, your safety, or the safety of others.

**Business transfers.** If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.

**With your consent or at your direction.**

We also share aggregated or de-identified information that cannot reasonably be used to identify you.

---

## 6. Email and SMS Communications

We send order-related (transactional) messages to all customers. With your consent (or as otherwise permitted by law), we also send marketing email and SMS. You can:

- Use the "unsubscribe" link in any marketing email
- Reply STOP to any marketing SMS
- Email **privacy@dongar.tech** to opt out of all marketing

We may use web beacons or tracking pixels in HTML emails to measure opens and clicks. You can disable image loading in your email client to limit this.

---

## 7. Data Retention

We retain personal information for as long as needed to provide our products and services, comply with legal obligations (including tax, accounting, and warranty recordkeeping), resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it.

---

## 8. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

- **Right to know** what categories of personal information we have collected, the sources, purposes, and categories of third parties to whom we have disclosed or shared it
- **Right to access** the specific pieces of personal information we have about you
- **Right to delete** personal information we have collected from you, subject to legal exceptions
- **Right to correct** inaccurate personal information
- **Right to opt out of sale or sharing** of personal information for cross-context behavioral advertising
- **Right to limit use of sensitive personal information** (we do not use or disclose sensitive PI for purposes that trigger this right)
- **Right to non-discrimination** for exercising your rights

### Categories collected in the past 12 months

| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Name, address, email, phone, IP, account ID | Yes |
| B. Customer records | Name, address, phone, payment info | Yes |
| C. Protected classifications | Age, gender (only if voluntarily provided) | Limited |
| D. Commercial information | Purchase history, products viewed | Yes |
| E. Biometric | — | No |
| F. Internet activity | Browsing, search, ad interaction | Yes |
| G. Geolocation | Approximate (from IP) | Yes (non-precise) |
| H. Sensory | — | No |
| I. Professional/employment | — | No |
| J. Education records | — | No |
| K. Inferences | Preferences, vehicle compatibility, audience segments | Yes |
| L. Sensitive personal information | — | No |

### Sale and Sharing

We do **not sell** personal information for monetary consideration. We **do "share"** personal information for cross-context behavioral advertising as those terms are defined under CPRA — specifically, through advertising pixels and identity-resolution partners described in Section 3.

### How to exercise your rights

- **To opt out of sharing for advertising:** Use our cookie banner's "Do Not Sell or Share My Personal Information" / "Your Privacy Choices" link, opt out via Retention.com at **https://app.retention.com/optout**, and adjust ad-platform settings at the links in Section 3. We also honor Global Privacy Control (GPC) browser signals.
- **For all other rights** (access, deletion, correction, portability): email **privacy@dongar.tech** with the subject line "California Privacy Request." We will verify your identity before responding and aim to respond within 45 days.

You may designate an authorized agent to make a request on your behalf. We may require written authorization and identity verification.

---

## 9. Other US State Privacy Rights

If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another US state with a comprehensive consumer privacy law, you may have similar rights to access, delete, correct, and obtain a portable copy of your personal information, and to opt out of targeted advertising, sale of personal information, and certain profiling. To exercise these rights, email **privacy@dongar.tech**. If we deny your request, you may appeal by replying to our response.

---

## 10. EU, UK, and Canadian Residents

If you are based in the EU, UK, or Canada, you have rights under GDPR, UK GDPR, or PIPEDA, including:

- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent at any time (without affecting prior processing)
- Right to lodge a complaint with your local data protection authority

To exercise these rights, email **privacy@dongar.tech**.

**International transfers:** Our servers and many of our service providers are located in the United States. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

---

## 11. Links to Other Sites

The Site may link to third-party websites. We are not responsible for the privacy practices of those sites. Please review their privacy policies before providing personal information.

---

## 12. How We Protect Information

We use commercially reasonable physical, technical, and administrative safeguards to protect personal information, including encryption in transit, access controls, and vendor due diligence. No method of transmission or storage is 100% secure. Please use a strong, unique password for your account.

---

## 13. Do Not Track

There is no industry-standard response to Do Not Track signals, and we do not currently respond to them. We do honor Global Privacy Control (GPC) signals for California residents as described in Section 8.

---

## 14. Children's Privacy

The Site is intended for adults. We do not knowingly collect personal information from children under 13 (or under 16 in the EU/UK). If we learn we have collected such information without verified parental consent, we will delete it. Parents or guardians may contact us at **privacy@dongar.tech**.

---

## 15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last Revised" date. If a change materially affects your rights, we will provide additional notice (such as by email or a Site banner) where required by law.

---

## 16. Contact Us

**Dongar Technologies LLC**
25509 Industrial Blvd Unit E13
Hayward, CA 94545
Email: **privacy@dongar.tech**

© Dongar Technologies LLC. All rights reserved.