Privacy policy

Last updated: October 24, 2026

Oakbrim Commerce LLC ("Oakbrim", "we", "us" or "our") operates the online store at oakbrimcommerce.com (the "Site"). This Privacy Policy explains how we collect, use, disclose and protect personal information when you visit the Site, make a purchase, contact us, or otherwise interact with us (together, the "Services"). It also describes the privacy rights you may have, including under the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the "CCPA") and other U.S. state privacy laws.

By using the Services, you acknowledge that you have read this Privacy Policy. If you do not agree with it, please do not use the Services.

1. Personal information we collect

"Personal information" means information that identifies, relates to or could reasonably be linked with you or your household. Depending on how you interact with us, we collect the following.

Information you give us

Contact and order details, such as your name, email address, phone number (if you provide one), billing address and shipping address.
Order and payment information, such as the products you buy, order totals and payment confirmation. Payments are processed by Shopify and other payment providers. We do not see or store your full card number.
Account information, if you create an account, such as your sign-in details, saved addresses and order history.
Customer support information, such as the content of your emails, photos or videos you send for a return or damage claim, and vehicle details (make, model and year) you share with us for fitment questions.
Marketing preferences, such as whether you have subscribed to our emails or other communications.

Information collected automatically

Device and usage information, such as IP address, browser and device type, operating system, referring website, pages and products viewed, items added to cart, and the date and time of your visit.
Approximate location, derived from your IP address.
Information collected through cookies, pixels and similar technologies (see section 5).

Information from third parties

Shopify, which hosts our store and provides checkout and payment services.
Payment processors, for payment verification and fraud prevention.
Fulfillment partners and shipping carriers, such as shipment status and tracking updates.
Advertising and analytics partners, such as information about how you interact with our ads and our Site.

2. How we use personal information

To provide our products and Services: process payments, fulfill and ship orders, send order and shipping updates, handle returns, refunds and replacements, and manage your account.
To communicate with you: answer your questions and provide customer support.
Marketing and advertising: send you marketing messages if you have agreed to receive them, and show you ads on our Site and on other websites and platforms. You can unsubscribe from marketing emails at any time using the link in the email.
Security and fraud prevention: detect, investigate and prevent fraudulent transactions, abuse and other harmful activity.
Improving our Services: understand how visitors use the Site, measure ad performance, and improve our products, content and shopping experience.
Legal and compliance: comply with applicable laws, respond to lawful requests, enforce our Terms of Service, and protect our rights and the rights of others.

3. How we disclose personal information

We disclose personal information only as described below.

Shopify. Our store is hosted on Shopify, which provides our online store platform, checkout and payment processing and processes personal information on our behalf. You can learn more in Shopify's Privacy Policy. Some features, such as Shop Pay and the Shop app, are provided by Shopify directly, and Shopify's Consumer Privacy Policy applies when you use them.
Fulfillment partners and suppliers. To fulfill your order, we share your name, shipping address, phone number (if provided) and order details with our order-management and fulfillment partners and with the suppliers that pack and ship your items. Some of these partners are located outside the United States.
Shipping carriers, to deliver your order and provide tracking.
Payment processors, to process payments and prevent fraud.
Other service providers, such as email, customer support, analytics and IT providers, which process personal information on our behalf and are required to protect it.
Advertising and analytics partners, such as social media and search advertising platforms, which may collect information about your activity on our Site through cookies and pixels to measure and personalize ads. Some of this activity may be considered a "sale" or "sharing" of personal information, or "targeted advertising", under certain U.S. state laws. See section 4 and section 9 for how to opt out.
Legal and safety reasons, when required by law, subpoena or other legal process, or when we believe in good faith that disclosure is needed to protect our rights, property or safety, or those of our customers or others.
Business transfers, in connection with a merger, acquisition, financing, reorganization, bankruptcy or sale of all or part of our business.
With your consent or at your direction.

We do not sell personal information for money.

4. Your privacy choices

Opt out of "sale", "sharing" and targeted advertising: visit our Your Privacy Choices page, or turn on the Global Privacy Control (GPC) signal in your browser.
Marketing emails: click "unsubscribe" in any marketing email, or email us. We may still send you messages about your orders.
Cookies: adjust your browser settings or, where shown, our cookie banner (see section 5).
Account information: if you have an account, you can review and update your details by signing in.

5. Cookies and similar technologies

We and our partners use cookies, pixels, web beacons and similar technologies ("cookies") to operate the Site, remember your cart and preferences, keep the Site secure, understand how the Site is used, and measure and personalize advertising. We use:

Strictly necessary cookies, which are required for core functions such as your cart, checkout and security. These cannot be turned off.
Preference cookies, which remember your choices, such as language or region.
Analytics cookies, which help us understand how visitors use the Site so we can improve it.
Marketing cookies, which are used by us and our advertising partners to show you relevant ads and measure how well they work.

Many cookies on our Site are set by Shopify. You can learn more on Shopify's cookie page. You can control or delete cookies through your browser settings and, where available, through our cookie banner. Blocking some cookies may affect how the Site works; for example, your cart may not be saved.

Global Privacy Control. If your browser sends a GPC signal, we treat it as a request to opt out of the "sale" or "sharing" of personal information and targeted advertising for that browser and device, as described on our Your Privacy Choices page.

Do Not Track. Because there is no common industry standard for "Do Not Track" signals, we do not respond to them, other than honoring GPC as described above.

6. How long we keep personal information

We keep personal information for as long as we need it for the purposes described in this policy. For example, we keep order records for as long as needed for tax, accounting and legal purposes, and support messages for as long as needed to resolve your request and keep a record of it. When we no longer need personal information, we delete it or de-identify it.

7. Security

We use reasonable administrative, technical and physical safeguards to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send sensitive information, such as full card numbers, by email.

8. International processing

We are based in the United States. Our service providers, including Shopify and our fulfillment partners, may process personal information in countries outside the United States, where data protection laws may differ from those in your state. When we transfer personal information, we take reasonable steps to protect it as described in this policy.

9. Your U.S. state privacy rights, including California (CCPA/CPRA)

Depending on where you live, including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with comprehensive privacy laws, you may have the following rights, subject to certain exceptions:

Right to know and access: to request the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collecting it, and the categories of third parties to whom we disclose it.
Right to delete: to request that we delete personal information we collected from you.
Right to correct: to request that we correct inaccurate personal information.
Right to data portability: to receive a copy of your personal information in a portable format.
Right to opt out of "sale", "sharing" and targeted advertising: use our Your Privacy Choices page or a GPC signal.
Right to opt out of profiling: we do not use personal information for profiling that produces legal or similarly significant effects.
Right to limit the use of sensitive personal information: we use sensitive personal information (such as account sign-in details, or payment card details handled by our payment providers) only for purposes permitted by the CCPA, such as completing transactions and keeping accounts secure, and not to infer characteristics about you.
Right to non-discrimination: we will not discriminate against you for exercising any of these rights.

Categories of personal information we collected in the past 12 months (CCPA disclosure)

Identifiers (name, email address, postal address, phone number, IP address, online and device identifiers, account name). Disclosed for business purposes to Shopify, payment processors, fulfillment partners, shipping carriers and other service providers. Online identifiers and IP address may be "shared" with advertising partners.
Customer records described in Cal. Civ. Code § 1798.80(e) (name, address, phone number, and payment card information processed by our payment providers). Disclosed for business purposes to Shopify, payment processors, fulfillment partners and shipping carriers. Not sold or shared.
Commercial information (products purchased or considered, order history). Disclosed for business purposes to service providers; browsing and purchase activity may be "shared" with advertising partners.
Internet or other electronic network activity (browsing history on our Site, interactions with our Site and ads). Disclosed to analytics providers and may be "shared" with advertising partners.
Approximate geolocation (derived from IP address). Disclosed to service providers and may be "shared" with advertising partners.
Audio, electronic or visual information (photos or videos you send to customer support). Disclosed only to service providers that help us provide support. Not sold or shared.
Inferences (shopping preferences drawn from your activity). May be "shared" with advertising partners.
Sensitive personal information (account sign-in details; payment card details handled by our payment providers). Disclosed only to service providers for the purposes described above. Not sold or shared.

We collect these categories from the sources and use them for the purposes described in sections 1 and 2. We do not knowingly sell or share the personal information of consumers under 16 years of age.

How to submit a request

To opt out of the "sale" or "sharing" of personal information or targeted advertising, use our Your Privacy Choices page or enable GPC in your browser. To exercise any other right, email support@oakbrimcommerce.com with the subject line "Privacy Request", the right you want to exercise and your state of residence.

To protect your information, we will verify your identity before completing a request, usually by matching information you provide (such as your email address and an order number) with information we already have. You may use an authorized agent to submit a request on your behalf; we will ask for proof of the agent's authority and may ask you to verify your identity directly. We will respond within 45 days. If we need more time (up to another 45 days), we will tell you why.

Appeals. If we decline your request, you may appeal by replying to our decision email with the word "Appeal". We will respond to your appeal within the time required by applicable law. If you are not satisfied with the outcome, you may contact your state Attorney General.

California "Shine the Light". California residents may ask us for information about our disclosure of certain categories of personal information to third parties for their own direct marketing purposes during the previous calendar year. To make this request, email us at the address below.

10. Children's privacy

Our Services are intended for adults and are not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, please contact us and we will delete it.

11. Third-party websites and links

Our Site may contain links to websites, apps or services operated by others. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in our practices or in the law. When we do, we will post the updated policy on this page and change the "Last updated" date above.