Privacy Policy

We collect information you provide directly and data generated automatically when you use our website.

Information You Provide

• Account & order details — name, email, phone, shipping and billing addresses when you create an account or place an order
• Payment information — credit card details are processed securely by Stripe and are never stored on our servers
• Communications — messages you send through our contact form, email, or phone calls
• Contractor applications — business name, trade license, and references submitted for contractor pricing

Information Collected Automatically

• Device & browser data — IP address, browser type, operating system, and screen resolution
• Usage data — pages visited, products viewed, time spent on site, and referral source
• Cookies & similar technologies — see the Cookies section below for details

We use your information to operate and improve BuyRailParts. Specifically:

• Process orders — fulfill purchases, calculate shipping and taxes, send order confirmations and tracking updates
• Customer support — respond to inquiries, resolve issues, and process returns
• Improve our store — analyze browsing patterns and product interest to enhance the shopping experience
• Marketing — send newsletters, promotions, and product updates (only with your consent; you can unsubscribe at any time)
• Fraud prevention — detect and prevent unauthorized transactions and abuse
• Legal compliance — meet tax, accounting, and regulatory obligations

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We use cookies and similar technologies to keep our site running smoothly and to understand how you interact with it.

Essential Cookies

Required for basic site functionality — shopping cart, checkout, account login, and session management. These cannot be disabled.

Analytics Cookies

We use Google Analytics to understand traffic patterns and improve our site. These cookies collect anonymized usage data such as page views, session duration, and referral sources.

Managing Cookies

You can control cookies through your browser settings. Blocking essential cookies may prevent parts of the site from working correctly. Most browsers allow you to:

• View and delete existing cookies
• Block cookies from specific or all sites
• Set preferences for first-party vs. third-party cookies

We share limited data with trusted service providers who help us run our business:

Service	Purpose	Data Shared
Stripe	Payment processing	Payment details, billing address
Vercel	Website hosting	IP address, usage data
Google Analytics	Site analytics	Anonymized browsing data
Shipping carriers	Order delivery	Name, shipping address, phone
WooCommerce	Order management	Order and account details

Each provider is bound by their own privacy policies and data processing agreements. We do not authorize them to use your information for purposes beyond what is needed to provide their services to us.

Protecting your data is a priority. Our security measures include:

• Encryption — all data transmitted between your browser and our site is encrypted via TLS/SSL (HTTPS)
• PCI compliance — payment processing is handled entirely by Stripe, a Level 1 PCI-DSS compliant provider. We never store card numbers on our servers
• Access controls — employee access to customer data is limited to those who need it to fulfill their role
• Secure infrastructure — our website runs on Vercel's enterprise-grade platform with automatic security patches and DDoS protection

While no system is 100% secure, we take reasonable and industry-standard precautions to protect your personal information.

We retain your personal data only as long as necessary for the purposes described in this policy:

• Order records — retained for 7 years to meet tax and accounting requirements
• Account data — kept until you request deletion of your account
• Analytics data — anonymized data is retained for up to 26 months
• Communication records — customer support correspondence is retained for up to 3 years

When data is no longer needed, it is securely deleted or anonymized.

You have control over your personal information. You may:

• Access your data — request a copy of the personal information we hold about you
• Correct your data — update inaccurate or incomplete information through your account settings or by contacting us
• Delete your data — request deletion of your account and associated personal data (subject to legal retention requirements)
• Opt out of marketing — unsubscribe from promotional emails using the link in any email, or contact us directly
• Manage cookies — adjust cookie preferences in your browser settings

To exercise any of these rights, email us at support@buyrailparts.com or call (610) 443-2250. We will respond within 30 days.

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, request its deletion, and opt out of its sale. As stated above, we do not sell personal information.

BuyRailParts is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at support@buyrailparts.com and we will promptly delete it.

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will:

• Update the "Last updated" date at the top of this page
• Post a notice on our website for material changes

We encourage you to review this page periodically. Your continued use of BuyRailParts after changes are posted constitutes acceptance of the updated policy.

Questions or concerns about this privacy policy? We're here to help.