Privacy Policy
This policy explains what personal information ERAFAV collects when you shop at erafav.com, why we collect it, who we share it with, and the choices you have. The short version: we collect only what we need to take your payment, ship your order and support you afterwards — and we never sell your personal information to anyone.
Last updated: July 21, 2026
Who we are
ERAFAV is an independent U.S. online retailer of brand-new automotive parts, tools and accessories. We are the “data controller” for the personal information described in this policy.
- Business address: 12122 Western Ave, Garden Grove, CA 92841-2915, United States
- Privacy contact: support@erafav.com (phone and email — we operate a phone line and email support). We answer every email within 1 business day, Monday–Friday, 9:00am–5:00pm Pacific Time.
What we collect
1. Contact information
When you place an order or email us, we collect your name, email address, shipping address, and billing address. If you email support@erafav.com — for example to check fitment for your vehicle, request a return label, or make a warranty claim — we also keep the content of that correspondence.
2. Order information
We keep a record of what you bought, the price paid (including the 10% sales tax added at checkout), the order date, the shipping carrier (USPS or UPS) and tracking number, and the delivery status. Because listings are fitment-specific, your order history may indicate a vehicle year/model/trim — for instance, if you bought floor mats or headlights listed for a particular vehicle.
3. Payment information — handled by our processor, not by us
Payments by Visa, Mastercard, American Express, Discover or PayPal are processed through an encrypted, PCI-compliant checkout operated by our payment processor. ERAFAV never sees or stores your full card number. We receive only a confirmation that payment succeeded, the payment method type, and a transaction reference we need for refunds — for example, when we return your money to the original payment method within 5–7 business days of receiving a return.
4. Browsing data and cookies
Like almost every online store, our site automatically records basic technical data when you visit: IP address, browser and device type, the pages you view, and the date and time of the visit. Cookies are covered in detail in the Cookies section below.
How we use your information
- Fulfilling your order: processing payment, dispatching within 1–2 business days, emailing your order confirmation and tracking number, and getting the parcel to you within the usual 3–8 business days in the contiguous U.S.
- Customer support: answering fitment questions before you order, handling 7-day defect-protection, resolving damaged/wrong/non-delivered orders, and administering the 7-day defect-protection.
- Transactional email: the emails we send are about your order or your enquiry — order confirmation, shipping and tracking updates, return labels, refund confirmations, and replies to your messages.
- Legal and tax obligations: keeping accurate sales, sales-tax and refund records as required by U.S. federal and Colorado law.
- Fraud prevention and security: our payment processor screens transactions for fraud, and we may use order and technical data to investigate suspected fraudulent activity.
- Improving the store: aggregated, non-identifying browsing data (e.g. which product pages are most visited) helps us fix problems and decide what to stock.
We do not use your information for anything else. We do not build advertising profiles, and we do not send marketing emails you haven’t asked for.
Who we share your information with
We never sell, rent or trade your personal information. We share it only with the service providers below, and only the minimum each one needs to do its job.
- Shipping carriers (USPS / UPS): your name, shipping address and, where useful for delivery, your email — so they can deliver your order and provide tracking.
- Payment processor: your payment details go directly to the processor through the encrypted checkout. The processor handles card and PayPal data under its own PCI-compliant systems and privacy policy.
- Website hosting and email providers: the technical services that run erafav.com and our support inbox necessarily process the data that passes through them, under contracts that restrict use to providing the service.
- Legal requirements: we will disclose information if genuinely required by law — for example a valid subpoena, court order or tax audit — and only to the extent required.
Cookies
Our site uses two kinds of cookies:
- Essential cookies keep the store working — they remember what’s in your cart, keep your checkout session secure, and remember choices during a single visit. The site cannot function without them.
- Analytics cookies tell us, in aggregate, how the site is used — which pages are visited and where errors occur. We use this to improve the store, not to identify you personally.
You can block or delete cookies at any time in your browser settings. If you block essential cookies, the cart and checkout will not work, but you can still browse products and contact us by email.
How long we keep your data
- Order and transaction records: 7 years from the order date, to meet U.S. tax and accounting requirements and to administer refunds and the 7-day defect-protection.
- Support correspondence: 2 years from our last exchange, so we have context if an issue resurfaces.
- Technical logs and analytics data: up to 12 months, after which they are deleted or anonymised.
When a retention period ends, the data is deleted or irreversibly anonymised.
Your rights
Wherever you live in the United States, we honour the following requests:
- Access: ask for a copy of the personal information we hold about you.
- Correction: ask us to fix inaccurate information — for example, a mistyped shipping address.
- Deletion: ask us to delete your personal information. We will do so, except for the order and tax records we are legally required to keep for the periods above.
- Opt out of sale or sharing for advertising: nothing to opt out of — we do not sell personal information or share it for cross-context behavioural advertising, and never have.
To exercise any of these rights, email support@erafav.com with the subject line “Privacy request” and the email address you used to order. We confirm receipt within 1 business day and complete every request within 30 days. We never charge for a privacy request, and we will never treat you differently for making one. If you have rights under your state’s privacy law (such as the California Consumer Privacy Act), those rights apply in addition to the above.
Security
All traffic to erafav.com is encrypted (HTTPS). Payment is taken through an encrypted, PCI-compliant checkout, and full card numbers never touch our systems. Access to order data is limited to the people who need it to fulfil orders and answer support emails. No online system can be guaranteed 100% secure, but if a breach ever affects your personal information, we will notify you promptly at the email address on your order.
Children
erafav.com sells automotive parts and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, email support@erafav.com and we will delete it.
Changes to this policy
If we change this policy, we will post the updated version here with a new “Last updated” date at the top. Changes apply from the date they are posted; we will not retroactively reduce your rights over information collected under an earlier version.
Governing law
This policy, and any dispute arising from it, is governed by the laws of the State of Colorado, USA.
Contact us about privacy
For any question, concern or request about your personal information:
- Email: support@erafav.com — answered within 1 business day
- Support hours: Monday–Friday, 9:00am–5:00pm Pacific Time
- Mail: ERAFAV, 12122 Western Ave, Garden Grove, CA 92841-2915, United States
