How we handle your information.

Scope and accountability

This policy applies to the TDI-Delete storefront, customer accounts, checkout, support chat, contact forms, returns, warranty requests, and related communications. It does not govern a third-party website or service that has its own privacy policy.

TDI-Delete, based in Montreal, Quebec, Canada, is responsible for the personal information under its control. The person responsible for privacy at TDI-Delete is the Privacy Officer. Privacy questions, requests, or complaints may be submitted through our contact page with “Privacy request” in the subject line.

Information we collect

Information you provide

• Account information: name, email address, password hash, verification records, and session information.
• Checkout and order information: name, email, phone number, billing and shipping addresses, cart contents, order history, discounts, tax and shipping details, and payment status or payment-provider identifiers.
• Support information: contact-form fields, vehicle and engine details, order number, chat and email messages, photos or documents sent for returns or warranty support, and related correspondence.
• Business-customer information: company name, recipient details, reseller status, and order information when reseller or drop-shipping features are used.
• Communication preferences: saved-cart reminder history and unsubscribe status.

Payment fields are provided by Stripe. Stripe collects and processes the payment credentials entered there. TDI-Delete receives transaction status, payment identifiers, and related billing details, but does not store complete card numbers on its servers.

Information collected automatically

• IP address or derived country, region, and city; browser and device information; user agent; referral page; requested pages and search terms.
• Product views, page views, visit duration, page visibility, cart actions, checkout events, purchases, contact events, and randomly generated session or event identifiers.
• Cookie, local-storage, and session-storage information described below.
• Security and diagnostic information, including request logs, rate-limit records, and error or performance data.

Sources

We collect information directly from you, automatically from your browser or device, and from service providers involved in a transaction, such as Stripe and shipping carriers. A reseller or purchaser may also provide a recipient’s information for delivery. Please provide another person’s information only when authorized to do so.

How we use information

• Provide accounts, checkout, payment, tax, order, delivery, return, warranty, and customer-support services.
• Save and recover an in-progress checkout and, where permitted, send a reminder about a saved cart.
• Confirm identity, link purchases to an account, prevent fraud or abuse, and protect the store and its customers.
• Measure traffic, product interest, advertising performance, and store reliability; troubleshoot problems; and improve products and services.
• Answer support questions with staff or, when enabled, an AI support assistant.
• Maintain business, accounting, inventory, tax, shipping, legal, and compliance records, and establish or defend legal claims.

Where a law requires a legal basis, we process information as needed to perform a transaction or provide a requested service, comply with law, pursue legitimate business and security interests, or with consent. Consent may be withdrawn for future processing, subject to legal or contractual restrictions and reasonable notice.

When we share information

We may disclose relevant information to the following recipients for the purposes described above:

We may also disclose information to professional advisers, insurers, law-enforcement or government authorities when legally required, and to parties to a financing, sale, merger, reorganization, or transfer of all or part of the business, subject to appropriate confidentiality measures.

We do not sell personal information for money. Meta and Google receive online identifiers and activity for advertising purposes; some laws may define this as “sharing,” targeted advertising, or a sale even when no money changes hands.

Cookies and tracking technologies

Cookies are small browser files. The store also uses local storage, session storage, pixels, and similar technologies. These technologies support the following functions:

You can block or delete browser storage through browser settings, but account login, cart, checkout, chat, and payment features may stop working correctly. Meta and Google also provide advertising controls in their services. This site does not currently respond to browser “Do Not Track” signals because there is no consistently applied standard for those signals.

Retention and transfers

We retain personal information only as long as reasonably necessary for the purposes described in this policy, including account and customer service, order fulfilment, warranty support, security, tax, accounting, dispute, and legal obligations. The period varies by record and context. For example, a customer sign-in session expires after 60 days and the support-chat browser cookie after one year, while transaction, order, tax, warranty, and opt-out records may need to be kept longer. When information is no longer required, we delete it or anonymize it where reasonably practicable.

TDI-Delete is based in Quebec, but providers and their systems may be located elsewhere in Canada, the United States, and other countries. Information processed outside Quebec or Canada may be subject to the laws and lawful access rules of those places. We use contractual and other measures appropriate to the sensitivity of the information and applicable law when information is handled by providers.

Security

We use administrative, technical, and organizational safeguards designed for the sensitivity of the information, including encrypted network transport, restricted administrative access, private session cookies, password hashing, request validation, and provider access controls. Payment credentials are handled in Stripe’s payment interface. No method of storage or transmission is completely secure, so absolute security cannot be guaranteed.

Your rights and choices

Subject to applicable law, you may:

• Ask whether we hold personal information about you and request access to it.
• Ask us to correct inaccurate or incomplete information.
• Request deletion or de-indexing where the law provides that right.
• Request a copy of eligible computerized information in a structured, commonly used format.
• Withdraw consent for future processing where processing depends on consent.
• Object to or opt out of certain marketing, profiling, targeted advertising, or disclosures where applicable.

Saved-cart emails include an unsubscribe link. Unsubscribing does not stop transactional messages about an order, account, return, warranty request, or support conversation.

To exercise a right, use the contact page, select a clear privacy-related subject, and identify the account, order, or interaction involved. We may need to verify your identity. Some information cannot be deleted immediately when it is needed to complete a transaction, prevent fraud, preserve another person’s rights, or meet a legal record-keeping duty. We will explain any applicable limitation.

You may also submit a complaint to the Commission d’accès à l’information du Québec or, where applicable, the Office of the Privacy Commissioner of Canada.

Children

The store sells automotive parts and is not directed to children under 14. We do not knowingly collect personal information from a child under 14 without consent from a parent or guardian when consent is required. If you believe a child has provided information improperly, please contact us.

Changes and contact

We may update this policy as the store, providers, or legal requirements change. The revised policy will be posted here with a new effective date, and additional notice will be provided when required by law.