[ Trust / California Privacy Policy ]
Privacy Policy.
Effective July 6, 2026. This policy describes how TruckStep™ collects, uses, discloses, and protects your personal information in compliance with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
[ 01 / Who We Are ]
TruckStep™ ("we," "us," or "our") operates the website truckstep.com (the "Site") and sells truck step products and merchandise. This Privacy Policy applies to all visitors and customers of the Site.
For any privacy question or to exercise your rights under California law, contact us at info@truckstep.com or write to us at TruckStep™, Attn: Privacy, USA.
[ 02 / Personal Information We Collect ]
Categories We Collect.
In the last 12 months we have collected the following categories of personal information from California residents:
Identifiers
Name, email address, postal address, phone number, order number.
Commercial Information
Products purchased, order history, purchase amounts, shipping preferences.
Internet & Network Activity
Pages viewed, referring URLs, device type, IP address, browser type.
Payment & Financial Data
Billing name and address as needed to process a transaction. Full card numbers are handled by our PCI-compliant payment processor and are never stored on our servers.
Communications
Messages you send us via our contact form or by email (e.g. fitment questions, warranty claims).
[ Where We Get It ]
- —Directly from you when you place an order, create an account, or contact us.
- —Automatically from your device when you visit our site (cookies, log data, analytics).
- —From our service providers (payment processor, shipping carriers, email provider) in the course of fulfilling your order.
[ 03 / How We Use Your Information ]
Business Purposes.
We use your personal information for the business and commercial purposes described below, each of which is necessary to provide you with our products and services.
Process & Fulfill Orders
Charging your card, shipping your TruckStep™, sending order confirmations and tracking updates, and handling returns and warranty claims.
Customer Support
Responding to fitment questions, order inquiries, and dealer or warranty requests.
Site Operation & Security
Operating the website, preventing fraud, and securing our systems against abuse.
Marketing (With Consent)
Sending product news or promotions — only when you opt in. You can unsubscribe at any time.
Legal Compliance
Keeping records required by tax, accounting, or other applicable laws.
[ 04 / How We Disclose Your Information ]
Categories of Third Parties.
We disclose your personal information only to the following categories of third parties, for the purposes stated, and only as necessary to provide our services:
We require our service providers to process personal information only on our behalf and in compliance with applicable privacy laws. They do not sell or share the information we provide them.
[ 05 / Sale or Sharing of Personal Information ]
We Do Not Sell Your Data.
We do not sell your personal information to third parties for monetary or other valuable consideration. We also do not share your personal information for cross-context behavioral advertising.
Because we do not sell or share your personal information, you do not need to opt out. If our practices change, we will update this policy and provide a clear "Do Not Sell or Share My Personal Information" link as required by California law.
[ 06 / Data Retention ]
How Long We Keep It.
We retain personal information only as long as necessary to fulfill the purposes described in this policy, including to provide our services, maintain records for legal compliance (such as tax and accounting requirements), resolve disputes, and enforce our agreements. After the retention period, we securely delete or anonymize the data.
[ 07 / Your California Privacy Rights ]
Your Rights Under CCPA/CPRA.
If you are a California resident, you have the following rights regarding your personal information. You may exercise any of these rights at any time, and we will not discriminate against you for doing so.
Know / Access
Request the categories and specific pieces of personal information we have collected about you, where we got it, and who we share it with.
Delete
Request that we delete the personal information we have collected from you, subject to legal retention requirements.
Correct
Request that we correct inaccurate personal information about you.
Opt-Out of Sale or Sharing
Direct us not to sell or share your personal information for cross-context behavioral advertising. We do not sell your personal information, and we do not share it for targeted advertising.
Limit Use of Sensitive PI
Limit the use of your sensitive personal information to what is necessary to perform the services or provide the goods you requested.
Non-Discrimination
Receive equal service and pricing even if you exercise any of these privacy rights.
[ 08 / How To Exercise Your Rights ]
Making a Request.
To exercise any of your rights, email us at info@truckstep.com with the subject line "California Privacy Request" and a description of the right you wish to exercise. We will respond within 45 days, as required by California law.
Verification. To protect your privacy, we verify your identity before disclosing or deleting personal information. We may ask you to confirm information we already have about you (such as your email or order number). For delete requests, we may require additional verification matching the information on file.
Authorized Agents. You may designate an authorized agent to submit a request on your behalf. The agent must provide written permission from you to act on your behalf, and we may still require that you verify your own identity directly with us.
[ 09 / Data Security ]
How We Protect Your Data.
All payment transactions are encrypted using industry-standard TLS (Transport Layer Security).
Sensitive payment data is tokenized and handled entirely by our PCI-compliant payment processor.
Access to customer data is restricted to authorized personnel and logged for auditing.
We retain order records only for the period required by tax and accounting law, then securely purge personal data no longer needed.
[ 10 / Children's Privacy ]
Under 16.
[ 11 / Changes To This Policy ]