Privacy Policy

1. Scope

This policy explains what DAG AUTO LLC, trading as Snowshop, does with personal information collected through this website, our contact form and our order processing. It does not cover other sites we link to, or what a manufacturer or carrier does with data under its own policy.

2. What we collect

What you give us when you order: your name, email address, phone number, shipping address, city and ZIP code, any note you add to the order, and the contents and total of the order itself.

What you give us through the contact form: your name, email, phone if you enter it, the year, make and model of your machine, a part number if you know it, the topic you picked and the message you wrote.

What we receive from our payment processor: whether the payment succeeded, the payment reference, and the card brand and last four digits. Nothing more.

What is collected automatically: a session cookie so your cart survives page loads, plus standard server log entries — IP address, date and time, the page requested, the referring page and your browser's user-agent string. Logs are used for security and troubleshooting.

3. What we do not collect

We do not have a customer accounts system, so there are no passwords or stored profiles on the shop side. We do not collect card numbers, CVC codes or bank credentials — those are entered into Stripe's payment form and never reach our server or our database. We run no advertising pixels, no behavioural tracking and no analytics scripts, and we do not build marketing profiles.

4. Why we use it

• To fill your order — take payment, reserve stock, print a label, ship the parcel and deal with returns, refunds and warranty claims.
• To talk to you — answer a fitment question, confirm an order, send a shipping notice, or check an address that looks wrong.
• To keep the shop running — prevent fraud and abuse, secure the site, diagnose faults and improve our listings.
• To meet our obligations — tax, accounting and consumer-protection records.

We do not use your information for automated decision-making that produces legal effects, and we do not sell or rent it.

5. Who we share it with

Only the parties needed to complete the job, and only the data each one needs:

• Stripe, Inc. — card processing. Receives your name, email, billing details, order amount and line items. Stripe acts as an independent controller for payment data under its own privacy policy.
• Shipping carriers — receive your name, address, phone and parcel details so they can deliver.
• Our hosting provider and email delivery — store and transmit the data that runs the site and the order emails.
• Google Fonts — our pages load typefaces from Google's font service, which means your IP address and browser details reach Google when a page renders.
• Partner storefronts — if you started your order on another shop's site and were sent here to pay, we exchange the order details and payment result with that shop so it can fulfil the order.
• Professional advisers and authorities — our accountant, or law enforcement and courts where we are legally required or where we need to protect our rights, safety or property.

If the business is ever sold or reorganised, customer records may transfer to the buyer, who would remain bound by this policy for information collected before the transfer.

6. Cookies

We use one cookie, snowshop_sess. It holds a random session identifier so your shopping cart and the security token on our forms work. It is HTTP-only, sent over HTTPS, restricted to this site, and expires when you close your browser. It is strictly necessary for the shop to function, so there is no consent banner to click.

We set no advertising, analytics or third-party tracking cookies. Blocking cookies in your browser will break the cart and checkout. Because we do not track you across sites, we take no action on «Do Not Track» or Global Privacy Control signals beyond what we already do — which is nothing.

7. How long we keep it

• Orders and payment records — kept for at least 7 years, because tax and accounting rules require it and because warranty questions surface years later.
• Contact-form messages — kept while the question is open and for up to 24 months afterwards, so we can pick up a thread you started last season.
• Server logs — rotated out on our host's normal schedule, typically within a few months.
• Session cookie — gone when you close your browser.

8. How we protect it

The site is served over HTTPS. Passwords for staff accounts are stored as salted hashes, form submissions carry anti-forgery tokens, payment webhooks are verified by cryptographic signature, and administrative access is limited to the people who pack and ship. No system is perfectly secure, and we cannot guarantee against every attack — but if a breach affects your personal information, we will notify you and the relevant authorities as the law requires.

9. Your choices and rights

Whatever state or country you are in, you can email parts@snowshop.com and ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct anything that is wrong;
• delete information we no longer need to keep — note that completed order records must stay for the retention periods above;
• stop sending you non-essential email.

We answer within 45 days and will not treat you differently for asking. We may need to verify your identity by matching your request against an order.

California residents. Under the CCPA/CPRA you have the rights above plus the right to know the categories of information collected, the sources, the business purpose and the categories of recipients — all set out in sections 2, 4 and 5. We do not sell personal information, and we do not share it for cross-context behavioural advertising, including that of anyone under 16. You may use an authorised agent to make a request.

EEA and UK visitors. We process your data to perform the contract you entered into (orders), to comply with legal obligations (tax records), and for our legitimate interests in running a secure shop and answering enquiries. You have the rights of access, rectification, erasure, restriction, portability and objection, and you may complain to your local supervisory authority. Data you send us is processed in the United States, where the protections differ from those in your country.

10. Children

This is a shop for machine owners, not a site for children. We do not knowingly collect information from anyone under 16. If you believe a child has sent us personal information, write to parts@snowshop.com and we will delete it.

11. Changes to this policy

When we change how we handle data, we update this page and the date at the top. Material changes will also be noted on the site. Checking the date on a policy you already read is enough to know whether anything moved.

12. Contact us

Questions about this policy, or a request about your data:

DAG AUTO LLC
1309 Coffeen Ave, Ste 14548
Sheridan, WY 82801
parts@snowshop.com · +1 (412) 583-0086
Mon–Sat 8:00–18:00, Sun 10:00–15:00 MT

See also our Terms of Sale & Use.