Trade Will-Call Hours Mon–Fri 7:30–18:00 • Sat 8:00–14:00
+1 (464) 785-0713

Privacy Policy & Data Subject Disclosures

This document outlines the data collected across automotoshop.click, our Consent Mode v2 implementation, advertising attribution parameters, and how to exercise your statutory data access rights. Review each disclosure block below.

19 Audited Disclosures
Effective date and governance timeline for trade inquiries

This privacy policy took effect on October 25, 2026 and governs all active inquiry submissions and website interactions across automotoshop.click.

This disclosure is published by AutoMoto Shop to establish an authoritative record of how data is collected, stored, and verified across automotoshop.click. We update this documentation whenever technical intake routes, advertising campaigns, or statutory privacy frameworks change.

Data controller identity and Charlotte facility registration

AutoMoto Shop operates as the sole data controller for all personal information gathered on this domain.

The registered trade controller is Automotoshop, operating the commercial parts desk at automotoshop.click. Our physical warehouse and trade counter is located at 606 NC Music Factory Boulevard, Charlotte, North Carolina 28206, Charlotte, North Carolina, United States. We operate under active North Carolina commercial business registration established in 2018.

Commercial communications, inquiries, and legal notifications may be directed by telephone to +1 (464) 785-0713 or by written transmission to office@automotoshop.click.

Categories of customer and mechanical information collected

We only collect data that you transmit directly through inquiry forms, live chat interactions, or essential technical logs.

Our infrastructure collects specific categories strictly to fulfill vehicle parts matching:

  • Inquiry Form Data: When posting to vowo1ae.php, we collect your name, phone number, email address, physical delivery address or will-call flag, inquiry kind, vehicle specification (including 17-digit VIN, engine code, and trim), technical notes, and explicit consent checkbox state.
  • Live Support Desk: Conversations initiated through cado73b.php retain the message body, technician name, and a unique local token saved in browser storage so the inquiry thread can be maintained across visits.
  • Automated Telemetry: Every web transmission logs the visitor IP address, user-agent string, referring URL, timestamp of form render, and timestamp of form submission.
  • Advertising Click Identifiers: Paid inbound traffic carries campaign attribution query parameters including gclid, msclkid, and fbclid.

We do not store passwords, user accounts, credit card numbers, or automated checkout tokens. Nothing on this website conducts financial transactions or binding automated purchasing.

Operational purposes for processing vehicle and parts records

Every byte of data we gather is used to decode vehicle compatibility, quote hardware, or prevent automated spam abuse.

We process collected information for four exact operational purposes:

  1. Cross-referencing customer-provided VIN and chassis specifications against factory parts manuals and warehouse stock to quote compatible parts.
  2. Reaching the submitting technician or car owner by phone or email to clarify model trim discrepancies, verify delivery addresses, or confirm will-call staging.
  3. Attributing paid advertising campaigns and measuring traffic acquisition channels across commercial search platforms.
  4. Protecting warehouse communication channels against automated spam and denial-of-service abuse via honeypot fields and submission interval checks.
Lawful grounds and statutory legal bases for processing

Processing is grounded strictly in consent, pre-contractual parts quotation steps, and legitimate trade security interests.

Under international and statutory privacy standards, our processing relies on three legal bases:

  • Consent: Provided actively when you select the required consent checkbox on our inquiry form or accept storage options on our consent dock. You may withdraw consent at any time.
  • Contract & Pre-Contractual Steps: Processing vehicle specifications, delivery locations, and contact records is required to evaluate compatibility and formulate a trade quotation upon your direct request.
  • Legitimate Interest: Maintaining server access logs, detecting security anomalies, and defending web forms against automated bot flooding represents an operational necessity for maintaining trade uptime.
Commercial advertising campaigns and platform click identifiers

Our trade counter actively runs inbound advertising campaigns on major search and commercial networks.

This website receives paid commercial traffic today. We actively manage marketing campaigns on google ads, microsoft advertising, and Meta Ads. When a visitor selects one of our commercial advertisements, the respective network appends a unique click parameter to the URL:

  • Google Ads: Appends the gclid query parameter to evaluate ad placement relevance and click authenticity.
  • Microsoft Advertising: Appends the msclkid click identifier to track conversion inquiries originated on Bing search.
  • Meta Ads: Appends the fbclid parameter when marketing campaigns run across Meta platforms.

Nothing on this site states or implies that any advertising platform has reviewed, endorsed, or verified AutoMoto Shop. All claims regarding component specifications and counter inventory reflect our own trade records.

Google Consent Mode v2 signal defaults and state changes

All four advertising and analytics consent signals remain denied by default until you grant affirmative storage consent.

To respect visitor autonomy and statutory mandates, our site enforces consent mode v2 across all pages. Before you interact with our consent panel, the following four signals are initialized in an explicit denied state:

  • ad_storage: Denied
  • ad_user_data: Denied
  • ad_personalization: Denied
  • analytics_storage: Denied

These four signals are updated to granted only if you click “Accept Storage” in the dock. If you select “Keep Denied” or subsequently clear your preferences, all four signals instantly revert to denied, and persistent advertising identifiers are blocked.

Itemized third-party processors and infrastructure partners

We share data solely with infrastructure hosts, corporate mail servers, and declared advertising networks.

AutoMoto Shop does not sell, rent, or lease personal records. We transmit data to third parties only as necessary to run web hosting and ad measurement services:

  • Google LLC / Google Ireland Ltd: Advertising attribution and conversion measurement through Google Ads.
  • Microsoft Ireland Operations Ltd: Commercial search attribution for Microsoft Advertising campaigns. You can inspect Microsoft data governance at privacy.microsoft.com.
  • Meta Platforms Ireland Ltd: Campaign delivery and social click attribution.
  • Infrastructure & Mail Hosting: Managed cloud servers that store encrypted inquiry submissions and relay notifications directly to office@automotoshop.click.
United States hosting and cross-border transfer protections

Data submitted to our Charlotte facility is hosted and processed on secure servers within the United States.

When an international visitor accesses automotoshop.click or submits a parts verification request, their information is transferred to and stored in the United States. Where personal data origin falls under European data protection laws, transfers to cloud infrastructure providers are governed by Standard Contractual Clauses (SCCs) and Data Privacy Framework compliance to guarantee equivalent safeguards.

Definite retention schedules for parts inquiries and server logs

We retain records only for definite, scheduled timeframes rather than indefinite periods.

Our warehouse parts desk adheres to strict data retention schedules:

  • Parts Inquiry Submissions & Email Records: Retained for exactly 24 months to support warranty claims, part supercession inquiries, and vehicle order history.
  • Counter Desk Chat Transcripts: Retained for exactly 12 months from the date of the last message in the thread.
  • Server & Access Log Files: Retained for exactly 30 days before automatic cyclical purge.
  • Consent Choice Records: Stored locally under the site_consent_v2 cookie key for exactly 12 months.
  • Statutory Data Requests (DSAR): Intake records and fulfillment verifications are answered within 7 days and retained for 24 months.
Encryption standards and physical trade counter terminal safeguards

We protect transmitted parts records with TLS encryption, strict access controls, and honeypot validation.

All data exchanged between your browser and our servers is secured with TLS 1.3 encryption. Counter terminal access at 606 NC Music Factory Boulevard is password-protected and restricted to authorized parts personnel. Our server architecture implements perimeter firewalls, automated brute-force mitigation, and isolated database storage to prevent unauthorized external access.

Full statutory rights for European visitors under GDPR

Visitors from the European Economic Area retain full statutory rights under the gdpr framework.

If you access this website from the European Union or United Kingdom, you are entitled to the following statutory rights under the gdpr:

  • Right of Access: Obtain confirmation of whether your personal data is processed and receive a structured copy.
  • Right to Rectification: Request correction of inaccurate vehicle or contact records.
  • Right to Erasure: Request deletion of your inquiry details when retention is no longer necessary.
  • Right to Restriction: Request suspension of processing while a data challenge is evaluated.
  • Right to Data Portability: Receive your inquiry data in a standard machine-readable format.
  • Right to Object: Object to data processing based on legitimate commercial interests.
  • Right to Withdraw Consent: Revoke previously granted consent without affecting past lawful processing.
United States state privacy protections and CCPA opt-out guarantees

We comply with US state privacy regulations including California ccpa mandates and do not sell personal data.

Residents of California, North Carolina, and other states with active consumer data privacy frameworks retain explicit protections. Under the California Consumer Privacy Act (ccpa) and CPRA:

  • You have the right to know what personal categories we collect and whether they are disclosed to third parties.
  • You have the right to request deletion of personal information held in our records.
  • You have the right to non-discrimination for exercising your statutory privacy choices.
  • Zero Sale Pledge: AutoMoto Shop has never sold, leased, or rented personal consumer information to third parties, and will not sell your data in the future.
Automated recognition of Global Privacy Control (GPC) signals

We automatically recognize and honor global privacy control signals emitted by your browser.

If your browser transmits the global privacy control header (Sec-GPC=1), our server and client scripts automatically treat this as a universal opt-out request. In response, advertising and analytics storage are set to denied immediately without requiring manual interaction with our consent banner.

Age restrictions and commercial trade focus excluding minors

automotoshop.click is a commercial automotive trade portal and does not collect data from minors under 16.

Our services and parts inventory are directed exclusively at licensed drivers, certified mechanics, and commercial fleet managers. We do not knowingly solicit or collect personal records from children under the age of 16. If we become aware that an inquiry was submitted by a minor, the record is immediately purged from our storage databases.

Supervisory authorities and dispute submission pathways

You have the legal right to submit complaints directly to relevant supervisory data protection authorities.

If you believe our data handling practices violate applicable privacy statutes, you may lodge a formal complaint with regulatory bodies:

  • North Carolina Residents: North Carolina Department of Justice, Consumer Protection Division, Attorney General’s Office.
  • California Residents: California Privacy Protection Agency (CPPA) or California Attorney General.
  • European Visitors: The relevant national Data Protection Authority (DPA) in your EU member state of residence.
Data Subject Access Request procedures and 7-day turnaround

Submit formal privacy requests to our counter desk for fulfillment within 7 business days.

To request access, correction, or deletion of your personal records, submit a written inquiry to office@automotoshop.click or submit our dedicated Data Request Form. Include your full name, the email address or phone number used on previous inquiries, and the specific action requested.

We verify the identity of the requester against prior inquiry records to prevent unauthorized disclosures. All statutory data requests are processed and answered within 7 days without fees.

Notification procedures for material policy amendments

Material updates are posted directly to this URL with an updated effective date header.

We review this privacy disclosure periodically to ensure continuous alignment with ad platform policies, technical intake procedures, and state regulations. When material modifications occur, we update the prominent effective date banner at the top of this document. Continued use of automotoshop.click indicates acknowledgment of the amended terms.

Direct human parts desk contact coordinates in Charlotte

Reach our Charlotte trade desk for direct human assistance regarding your personal data records.

For questions regarding this policy, Consent Mode v2 signals, or specific data retention details, contact our Parts Desk Privacy Representative:

AutoMoto Shop Parts Counter
606 NC Music Factory Boulevard
Charlotte, North Carolina 28206
United States
Telephone Desk: +1 (464) 785-0713
Email Desk: office@automotoshop.click