Privacy Policy

Information We Collect

When you visit invictatire.com, place an order, create an account, or contact our customer support team, we may collect the following categories of personal information:

Information You Provide Directly

• Identity data: First and last name, username, business name (for dealer accounts).
• Contact data: Billing and shipping addresses, email address, phone number.
• Transaction data: Products ordered, order history, invoice details, and payment method type (card brand and last four digits — we do not store full card numbers).
• Account credentials: Username and hashed password for registered accounts.
• Communications: Messages sent via our contact form, live chat, or customer support email.
• Fitment data: Vehicle year, make, model, and trim when you use the Fitment Finder tool.

Information Collected Automatically

• Usage data: Pages visited, search queries entered, products viewed, time spent on pages, click-through patterns.
• Device & technical data: IP address, browser type and version, operating system, screen resolution, referring URL.
• Location data: Approximate geographic location derived from IP address (city/state level; not GPS-precise).
• Cookie & tracking data: Session identifiers, persistent preference cookies, advertising pixels. See Section 3 for full details.

Information From Third Parties

• Order and address verification data from shipping carriers (FedEx, UPS, USPS).
• Fraud signals from our payment processor.
• Demographic and interest segments from advertising partners, used to show relevant ads on external platforms.

How We Use It

We use the information we collect for the following purposes, each grounded in a lawful basis (legitimate interest, contractual necessity, or your consent):

• Fulfill your orders: Process payments, arrange shipping, generate invoices, and communicate order status updates.
• Operate and improve the site: Diagnose technical issues, analyze usage patterns, test new features, and optimize page performance.
• Personalize your experience: Remember saved vehicles in the Fitment Finder, display recently viewed products, and pre-fill your shipping address at checkout.
• Marketing communications: Send promotional emails, restock alerts, and seasonal offers — only when you have opted in. You may unsubscribe at any time via the link in any email.
• Fraud prevention and security: Identify suspicious transactions, prevent unauthorized account access, and comply with payment card industry requirements.
• Dealer program administration: Verify dealer credentials, manage wholesale pricing tiers, and communicate program updates.
• Legal compliance: Respond to lawful requests from government authorities, enforce our Terms of Service, and meet our tax and record-keeping obligations.

We do not use automated decision-making or profiling in ways that produce legal or similarly significant effects on you without human review.

Cookies & Tracking

We use cookies and similar technologies to keep the site working correctly and to understand how it is used. Here is what we deploy:

Strictly Necessary Cookies

These are required for the site to function and cannot be disabled. They include your shopping cart session, login authentication token, and CSRF security tokens. They are never used for advertising.

Performance & Analytics Cookies

We use Google Analytics 4 (GA4) with IP anonymization enabled to understand aggregate traffic patterns — which pages are popular, how users navigate, and where orders are abandoned. GA4 data is not sold to third parties.

Functional Cookies

These remember your preferences — your saved Fitment Finder vehicles, preferred currency display, and whether you've dismissed certain banners. Disabling them may degrade certain features.

Advertising & Retargeting Pixels

We run Meta (Facebook/Instagram) Pixel, Google Ads conversion tracking, and TikTok Pixel. These allow us to measure the effectiveness of our advertising campaigns and serve relevant ads to users who have visited our site. You may opt out of interest-based advertising through the DAA opt-out tool or by adjusting your browser's cookie settings.

You can manage cookie preferences via your browser settings. Note that blocking all cookies may prevent the cart and checkout from functioning correctly.

Payment Data

Invicta Rubber LLC does not store, process, or transmit full payment card numbers on our servers. All card transactions are handled directly by our PCI-compliant payment processor using hosted payment fields (SAQ-A scope). This means:

PayPal, Apple Pay, and Google Pay transactions are governed by the respective payment provider's privacy policies in addition to this policy. We receive only a transaction identifier and approval status — no raw card data — from these providers.

We retain transaction records (amount, order ID, card last four, payment method type) for seven years to meet our tax, accounting, and chargeback-dispute obligations.

Sharing & Third Parties

We do not sell your personal information to data brokers. We share data only in the following limited circumstances:

Service Providers

We share data with vendors who help us operate the business under contracts that restrict their use of your data to the services they provide us:

• Shipping carriers: FedEx, UPS, USPS — receive your name and delivery address to execute shipments.
• Payment processors: Stripe and PayPal — receive tokenized payment information to authorize transactions.
• Email service provider: Used to send transactional and marketing emails.
• Analytics: Google Analytics 4, with data-sharing to Google Ads disabled unless you have opted into advertising personalization.
• Hosting & security: Our hosting provider and CDN provider to deliver website content reliably.

Business Transfers

If Invicta Rubber LLC is acquired, merged with, or sells substantially all of its assets to another company, your personal information may be transferred as part of that transaction. We will notify you of such a change via email and/or a prominent notice on our website prior to the transfer taking effect.

Legal Requirements

We may disclose personal information when required to do so by law, court order, or in response to a valid governmental request, or when we believe disclosure is necessary to protect our rights, prevent fraud, or protect the safety of our customers and staff.

With Your Consent

We will share personal information with third parties not listed here only with your explicit consent, which you may withdraw at any time.

Your Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with the following rights regarding your personal information. We honor these rights for all customers regardless of state of residence:

• Right to Know: You have the right to request that we disclose what personal information we have collected about you, the categories of sources, the purposes for which it is used, and the categories of third parties with whom it is shared.
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions (e.g., information needed to complete a transaction, maintain security, or comply with legal obligations).
• Right to Correct: You may request correction of inaccurate personal information we hold about you.
• Right to Data Portability: You may request a copy of the personal information you have provided to us in a structured, machine-readable format.
• Right to Opt Out of Sale or Sharing: You have the right to direct us not to sell or share your personal information with third parties for cross-context behavioral advertising. See Section 7 below.
• Right to Limit Sensitive Data Use: You may direct us to limit our use and disclosure of sensitive personal information to what is necessary for providing services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights — you will receive the same prices, service quality, and product availability regardless.

To exercise any of these rights, please use the contact methods in Section 11 or submit a verifiable consumer request at This email address is being protected from spambots. You need JavaScript enabled to view it.. We will respond within 45 days. We may request additional verification to confirm your identity before processing the request. You may designate an authorized agent to submit requests on your behalf.

Nevada and Virginia residents may also have similar rights under their respective state privacy laws. We will honor requests from residents of those states on the same terms described above.

Do Not Sell or Share My Personal Information

Under the CCPA/CPRA, "sharing" personal information includes disclosing it to advertising platforms for the purpose of cross-context behavioral advertising — even without direct monetary payment. We use advertising pixels (Meta, Google, TikTok) that may constitute "sharing" under this definition.

If you reside in California and use the Global Privacy Control (GPC) browser signal, our site will treat that signal as a valid opt-out request upon detection. GPC support is automatically honored without requiring a separate form submission.

We do not sell personal information in exchange for money and have not done so in the preceding 12 months. Our disclosure of data to advertising platforms for retargeting purposes may qualify as "sharing" under CPRA, and the opt-out above covers both.

Data Security

We implement reasonable and appropriate technical and organizational measures to protect your personal information against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.2 or higher encryption for all data transmitted between your browser and our servers.
• Encryption at rest for databases containing personal information.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing of our web application and infrastructure.
• Multi-factor authentication required for all administrative system access.
• Payment card data handled entirely off our servers via hosted payment fields (see Section 4).

Despite these precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that creates a reasonable risk of harm to you, we will notify affected individuals as required by applicable law.

If you believe your account has been compromised, please contact us immediately at This email address is being protected from spambots. You need JavaScript enabled to view it..

Children's Privacy

Our website and services are not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If you are under 13, please do not use this site or provide any personal information to us.

If we learn that we have inadvertently collected personal information from a child under 13, we will delete it promptly. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at This email address is being protected from spambots. You need JavaScript enabled to view it. and we will take immediate steps to remove the information.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or site functionality. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Post a notice on our website home page for at least 30 days.
• Send an email notification to registered account holders if the changes are significant and affect their rights.

Your continued use of the site after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with the changes, you should stop using the site and may request deletion of your account and personal information.

Prior versions of this Privacy Policy are available upon request by emailing This email address is being protected from spambots. You need JavaScript enabled to view it..

Contact

If you have questions, concerns, or requests related to this Privacy Policy or your personal information, please reach out through any of the following channels:

• Privacy requests & inquiries: This email address is being protected from spambots. You need JavaScript enabled to view it.
• Security concerns: This email address is being protected from spambots. You need JavaScript enabled to view it.
• Phone: 1-800-555-0000 (Mon – Fri: 8:00 AM – 6:00 PM CT)
• Mailing address: Invicta Rubber LLC, Attn: Privacy Officer, Palm Springs, CA

For formal data subject access requests under CCPA/CPRA, please use the email address above and include your name, email address on file, and a description of your request. We will respond within 45 days and may request additional verification to confirm your identity.

If you are not satisfied with our response to your privacy request, you may contact the California Privacy Protection Agency at cppa.ca.gov or your applicable state privacy authority.