Privacy Policy

1.1. Scope of Policy. This Privacy Policy and Data Governance Standards (the "Policy") describes how Petrol Head Motor Company LLC, based in Fort Lauderdale, Florida (the "Company," "we," "us," or "our") collects, uses, and protects the personal and financial information of its users.

1.2. Intermediary Marketplace. As an intermediary marketplace facilitating transactions for cars, motorcycles, and man cave collectibles, we are committed to maintaining the highest standards of data integrity and transparency. This Policy is designed to comply with applicable Florida laws and federal regulations regarding the collection and storage of consumer data.

1.3. Integrated Legal Framework. This document is functionally integrated with our Terms of Service and Transaction Policies, forming the comprehensive legal framework for your use of the Platform.

2.1. Under-13 Prohibition. The Platform is not intended for children. In strict accordance with the Children's Online Privacy Protection Act (COPPA), users under the age of thirteen (13) are strictly prohibited from creating an account or accessing the Platform. We do not knowingly collect or maintain personal information from children under 13. If we discover that a user under 13 has provided personal information, we will take immediate steps to delete such data and terminate the account without notice.

2.2. Minimum Age Requirement (18+). Access to the Platform—including all social features and marketplace participation—is strictly limited to individuals who are at least eighteen (18) years of age. All previous social-only access tiers for individuals aged 16-17 have been removed to ensure a consistent safety and liability standard across the ecosystem.

2.3. Transactional Users. For users participating in the marketplace, we collect additional verification and financial data, including full legal name, residential address, verified contact information, and credit card and payment authorization data handled via Stripe.

3.1. Marketplace Activity Data. We collect and store all data related to listed items, including VIN numbers, title status, damage history, and odometer readings.

3.2. Cookies and Tracking Technologies. We utilize both session and persistent cookies, web beacons, and similar tracking technologies to enhance user experience, remember preferences, and manage paid media campaigns. This includes tracking for performance analytics and targeted advertising across external platforms. If you disable cookies in your browser settings, core marketplace features—such as active bidding and account management—may be significantly impaired.

3.3. Targeted Advertising and Third-Party Sharing. We may share data with advertising networks and analytics providers (such as Google Analytics) to deliver behavioral advertising and analyze platform traffic. This data is used to improve our service and provide more relevant content to our community.

3.4. Metadata. When you upload images to the Platform, you expressly acknowledge that metadata (such as EXIF data, timestamps, and location data) may be attached to the files and accessible to other users. It is the user's sole responsibility to strip such metadata prior to upload if they wish to keep this information private.

3.5. Winning Bidder Data Sharing. Upon the close of an auction, the Platform will automatically share the winning bidder's name and contact information with the seller solely for the purpose of facilitating and completing the transaction. This sharing is operationally necessary to fulfill the contract of sale formed on the Platform.

3.6. Florida Department of Revenue and Regulatory Disclosure. In accordance with our marketplace facilitator obligations under Florida Statutes, we may share transaction data—including sale prices and buyer locations—with the Florida Department of Revenue for sales tax collection and remittance purposes.

4.1. Payment Processing and IRS Obligations. We do not store full credit card numbers on our local servers. All payment data is handled exclusively by Stripe, our PCI-DSS compliant third-party payment processor. In accordance with federal law, we collect W-9 information and other tax identifiers from sellers who meet or exceed applicable annual payment thresholds to satisfy 1099-K reporting obligations.

4.2. Hold and Charge Mechanics. Our system is authorized to place a flat-amount hold on your card via Stripe at the time of bidding. For unsuccessful bidders, our records trigger the release of these funds. For winners, the buyer premium is charged immediately.

4.3. Identity and Dealer Screening. We may use third-party services to verify seller identities and conduct background screenings for licensed dealers. This process is conducted to maintain marketplace integrity and ensure compliance with the Fair Credit Reporting Act (FCRA) where applicable.

5.2. FIPA Breach Notification and Security Disclaimer. In accordance with the Florida Information Protection Act (FIPA), the Company will notify affected users of any breach compromising personal information within thirty (30) days of discovery. While we use reasonable administrative and technical measures to protect your data, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5.3. Data Portability Right. Upon written request to privacy@petrolheadmotor.com, the Company will provide a summary of the transactional and personal data held on your account within thirty (30) days in a commonly used electronic format.

6.1. United States Data Storage. All personal data collected by the Platform is stored and processed exclusively on servers located in the United States. By using the Platform, you acknowledge that your data will be subject to the laws of the State of Florida and U.S. federal law.

6.2. Binding Arbitration. Any dispute regarding data privacy or security that cannot be resolved through internal review shall be settled by binding arbitration in Fort Lauderdale, Florida.

6.3. Class Action Waiver. To the maximum extent permitted by Florida law, all users agree that any dispute resolution proceedings regarding data privacy will be conducted only on an individual basis and not in a class or representative action.

6.4. Third-Party Links. The Platform may contain links to third-party services (such as Carfax or KeySavvy). This Privacy Policy does not apply to the practices of those third-party websites, and we encourage you to review their respective privacy policies.

6.5. Corporate Transactions. In the event of a merger, acquisition, sale of assets, or change of control, user data may be transferred to the successor entity. Users will be notified of any such change in ownership via the email address on file.

6.6. Marketing Communications and Opt-Out. To comply with the CAN-SPAM Act, all marketing emails include an unsubscribe mechanism. Users may also opt out of marketing communications at any time by emailing privacy@petrolheadmotor.com.

7.1. General User Rights. Regardless of your location, you have the right to: (a) access the personal data we hold about you; (b) request the correction of inaccurate data; and (c) request the deletion of your data, subject to our seven-year legal retention obligations for financial records.

7.2. California and Other State Rights. Residents of certain states, including California, may have additional rights regarding their personal information under local laws. If you are a resident of such a state and wish to exercise these rights, please contact us at privacy@petrolheadmotor.com.

7.3. Nevada Residents. Nevada law allows residents to opt out of the "sale" of certain personal information. Petrol Head Motor Company LLC does not sell your personal data to third parties for monetary consideration.

7.4. Do Not Track (DNT). The Platform does not currently respond to "Do Not Track" browser signals or similar Global Privacy Control mechanisms at this time.

8.1. Notification of Changes. We reserve the right to modify this Policy at any time. Significant changes to data handling or retention will be communicated via the email on file. Changes to core transactional or data rights will be provided with at least thirty (30) days' notice.