Privacy Policy
Privacy Policy
Privacy Policy
Last updated: August 31, 2026
This Privacy Policy describes how Parts Universe (“we,” “us,” or “our”) collects, uses, and discloses personal information when you visit or shop at https://mypartsuniverse.com (the “Site”), contact us, or buy from us on Amazon, Walmart, or eBay.
This policy is written for California customers and visitors. It is also our notice at collection: it explains, at or before we collect personal information, the categories we collect, why we collect them, whether we sell or share them as those terms are used in California privacy law, and how long we keep them.
The Site is powered by Shopify. Shopify’s own consumer privacy materials are at https://privacy.shopify.com. Marketplace orders are also subject to Amazon, Walmart, and/or eBay privacy policies.
If you do not agree with this policy, please do not use the Site.
1. Who we are
Parts Universe
20475 Yellow Brick Rd STE 3C-3D
Walnut, CA 91789
United States
Public contact: info@mypartsuniverse.com
Hours: Monday–Friday 9:00 AM–5:00 PM Pacific Time. Saturday and Sunday closed.
We operate an auto parts and supplies store online. Parts Universe is the registered DBA of Ca Feng Enterprises, Inc., a California corporation. The operator is not a trade-name URL standing alone.
2. Personal information we collect
We collect information that identifies, relates to, or could reasonably be linked to you, depending on how you use the Site or buy from us.
You provide:
- Name, email, phone number, billing address, and shipping address
- Account username, password, and preferences if you create an account (accounts are optional)
- Order details, returns, warranty questions, and messages you send by email, live chat, phone, or contact form
- Payment details at checkout (processed by Shopify and payment processors; we do not store full payment card numbers)
Collected automatically on the Site:
- Device and browser information, IP address, and similar identifiers
- Pages viewed, products viewed or added to cart, referring site, and timestamps
- Cookies and similar technologies used for the cart, checkout, security, analytics, and (if enabled) advertising
From service providers and partners:
- Shopify, payment processors, shipping carriers, and warehouse/fulfillment tools
- Analytics and advertising tools used to operate or measure the store
- Address validation, fraud screening, and similar checkout protections
From marketplaces:
- When you buy on Amazon, Walmart, or eBay, we receive order and communication data those platforms provide so we can fulfill the order, answer messages, and handle returns. Those platforms’ policies also apply. We do not use marketplace buyer data to build unrelated marketing lists.
We do not intend to collect government ID numbers, precise geolocation, biometric identifiers, or health information. If a customer accidentally sends that kind of information in a message, we use it only as needed to respond and then handle it under our ordinary message retention.
3. Notice at collection — categories, purposes, sale/share, retention
This table is our notice at collection in plain language. “Sell” and “share” here follow California privacy law (including sharing for cross-context behavioral advertising). They are not limited to selling a mailing list for cash.
| Category (examples) | Why we collect it | Sold or shared under California law? | How long we keep it |
|---|---|---|---|
| Identifiers (name, email, phone, address, account login, IP) | Take orders, ship, contact you, prevent fraud, run the Site | May be shared with Shopify, carriers, payment processors, and (if ads/analytics are on) advertising or analytics partners. We do not sell this for money to unrelated marketers. | Account and contact records while the account is open and as needed for orders, tax, and legal records; then delete or de-identify when no longer needed. |
| Commercial / order information (items, cart, returns, transaction history) | Fulfill orders, customer service, accounting, warranties | Disclosed to Shopify, payment, shipping, dropship suppliers as needed to fulfill. Not sold for money to unrelated marketers. | Order, invoice, and tax records for as long as required for tax, accounting, warranty, chargebacks, and legal holds — not a blanket 90 days. |
| Payment information | Process payment | Disclosed to Shopify and payment processors. We do not store full card numbers. | Processors keep what they need; we keep payment status with the order, not full PAN. |
| Internet / device activity (cookies, pages, cart activity) | Site function, security, analytics, and possibly ads | Cookies and similar tools may be treated as a “sale” or “share” under California law when they support advertising or certain analytics. You may opt out (see Section 8). | Cookie/session data per cookie lifetime and analytics vendor settings; server logs a shorter operational period unless needed for security. |
| Inferences (e.g., products you may want) | Recommendations or ads, if those features are on | May be shared in an advertising context if ads are enabled. | Only while used for that purpose or as stored with analytics/ad accounts. |
| Marketplace order and message data | Fulfill marketplace orders and handle A-to-Z / case / return workflows | Used for fulfillment and platform required processes; not sold for money to unrelated marketers. Platform policies also apply. | As needed to fulfill, plus tax/accounting and platform record requirements. |
| Communications with us | Customer service, quality, legal | Shared with staff and, if needed, carriers or suppliers to resolve the issue. | Customer-service records as needed for the order, warranties, disputes, and legal requirements. |
Sensitive personal information. Payment card details entered at checkout can be sensitive and are used to complete the transaction through Shopify and processors. We do not use sensitive personal information to infer characteristics about you. If California’s right to limit use of sensitive personal information applies to data we actually collect, you may ask us to limit that use (see Section 8).
We do not sell personal information for money to unrelated third-party marketers. We may “share” or, as California uses the word, “sell” personal information through Shopify, cookies, analytics, and advertising technologies that help operate or measure the store. That is why this policy includes opt-out and Global Privacy Control (GPC) language even though we do not rent our customer list.
4. How we use personal information
- Process, fulfill, ship, and track orders (including dropship from suppliers)
- Process payments and prevent fraud
- Provide customer service, returns (RMA), and manufacturer warranty coordination
- Send order, shipping, and account messages (these are transactional, not ads)
- Operate, secure, and improve the Site
- Comply with tax, accounting, and legal obligations
- Handle marketplace orders using the data those platforms send us
- Marketing emails if you subscribe or if we otherwise lawfully send them; you can unsubscribe
- Show or measure ads when advertising tools are used on the Site
We do not use marketplace buyer data for unrelated marketing.
5. How we disclose personal information
We disclose personal information to:
- Shopify, which hosts the store and processes checkout
- Payment processors
- Carriers (FedEx is our preferred carrier; UPS or USPS may be used) and local delivery partners for eligible batteries
- Suppliers when an item is drop-shipped, so they can ship to you
- Warehouse and operations tools used at our Walnut, CA location
- Professional advisors (accounting, legal) when needed
- Authorities when required by law or to protect rights, safety, or the Site
- A buyer of the business, if we ever sell or reorganize the company, subject to this policy or equivalent notice
- Advertising and analytics providers that help operate or measure the store
We do not sell personal information for cash to unrelated marketers.
When you buy on Amazon, Walmart, or eBay, those companies collect and use information under their policies. We use the order data they give us to fulfill and support the order.
6. Cookies and similar technologies
The Site uses cookies and similar tools to:
- Keep your cart and checkout working
- Keep you signed in if you have an account
- Help with security and fraud prevention
- Understand how the Site is used
- Support advertising or Shopify customer events when those features are used
You can block or delete cookies in your browser. If you block cookies, cart and checkout may not work. We do not respond to browser “Do Not Track” headers other than the Global Privacy Control, which we treat as an opt-out signal (Section 8).
7. California privacy rights (CCPA as amended by CPRA)
The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives California consumers rights over personal information. We describe those rights in plain language. This is not legal advice. Official consumer information is published by the California Department of Justice at https://oag.ca.gov/privacy/ccpa.
Notice at collection. This policy is intended to tell you, before or when we collect information, what we collect and why (see Section 3).
Right to know / access. You may request that we tell you what personal information we have collected about you, the categories of sources, the purposes, and the categories of third parties to whom we disclose it, and you may request a copy of specific pieces we hold, subject to verification and legal exceptions.
Right to delete. You may request that we delete personal information we collected from you, subject to exceptions (for example, completing a transaction, detecting security incidents, and records we must keep for tax or legal reasons).
Right to correct. You may request that we correct inaccurate personal information we keep about you.
Right to opt out of sale or sharing. You may opt out of the sale or sharing of personal information, including sharing for cross-context behavioral advertising. Submit a request as described below, use any “Do Not Sell or Share My Personal Information” control we post on the Site, and/or send a GPC signal.
Right to limit use of sensitive personal information. If we collect sensitive personal information and use it beyond what is needed to provide the goods or services you requested (or other permitted uses), you may ask us to limit that use. We do not intend to use sensitive personal information to infer characteristics.
Right to non-discrimination. We will not deny goods, charge a different price, or provide a different quality of service because you exercised these rights, except as the law allows (for example, a difference that is reasonably related to the value of the data).
Authorized agent. You may use an authorized agent to submit a request. We will need proof that the agent is authorized, and we may still need to verify your identity directly.
Verification. We will take reasonable steps to verify that the person making the request is you (or your agent). We may ask for information that matches our records, such as name, email, order number, and shipping address. We will not fulfill a request if we cannot verify it.
How to submit a privacy request. Email info@mypartsuniverse.com with the subject line “California Privacy Request.” You may also write to the Walnut address above. Tell us whether you want to know/access, delete, correct, opt out of sale/share, or limit sensitive personal information. We will respond within the time California law requires.
Shopify also processes some information as described in Shopify’s consumer privacy materials. You may use Shopify’s privacy portal at https://privacy.shopify.com for certain Shopify-controlled processing.
8. California “Shine the Light”
California’s Shine the Light law lets California residents ask whether we disclosed personal information to third parties for those third parties’ direct marketing purposes in the preceding calendar year, and to request certain details about those disclosures.
To make that request, email info@mypartsuniverse.com with the subject line “Shine the Light Request.” We will respond as that law requires. This is separate from a CCPA/CPRA request.
9. Opting out of sale / sharing and Global Privacy Control (GPC)
Because Shopify, cookies, analytics, and advertising tools may involve a “sale” or “share” as California uses those words, we provide an opt-out even though we do not sell your information for money to unrelated marketers.
To opt out:
- Email info@mypartsuniverse.com with “Do Not Sell or Share” in the subject line; or
- Use a “Do Not Sell or Share My Personal Information” link if one is posted on the Site; or
- Enable Global Privacy Control (GPC) in a supporting browser or extension. We treat a GPC signal as a request to opt out of sale/sharing for that browser and device. Learn more at https://globalprivacycontrol.org.
Opting out does not stop order, shipping, payment, or fraud-prevention disclosures needed to complete a purchase. You may still receive transactional emails about orders you place. You can unsubscribe from promotional emails using the link in those emails.
10. Children
The Site is not directed to children. We do not knowingly collect personal information from children. We do not have actual knowledge that we sell or share the personal information of consumers under 16. If you believe a child provided personal information, contact us and we will delete it as required.
11. Security
We use reasonable administrative, technical, and organizational measures appropriate to the nature of the information, including HTTPS on the Site, access limited to people who need it for their jobs, and payment handled by Shopify and payment processors rather than storing full card numbers ourselves.
No method of transmission or storage is perfectly secure. We do not claim any specific encryption product name, algorithm, or multi-factor setup on this page.
12. Retention
We keep personal information only as long as reasonably needed for the purposes in this policy, including:
- Orders, invoices, tax, and accounting records for as long as tax, accounting, warranty, chargeback, and legal rules require (this is typically years, not 90 days)
- Customer service and RMA records for the life of the related order/warranty/dispute
- Account data until you close the account and we no longer need it for the reasons above
- Marketplace order data as needed to fulfill and as platforms and tax rules require
- Cookies and logs for shorter operational or security periods
We do not use a blanket “delete everything in 90 days” rule. That would conflict with ordinary business and tax recordkeeping.
13. Other states and countries
We are a California business selling primarily to U.S. customers. If you live somewhere else, we still handle your information as described here. The Site is hosted by Shopify, which may process information in the United States and other countries. We do not target the European Union or United Kingdom as a primary market.
14. Changes
We may update this policy. The “Last updated” date will change. Material changes will be posted on this page. Continued use of the Site after an update means you have seen the revised policy.
15. Contact
Parts Universe
20475 Yellow Brick Rd STE 3C-3D
Walnut, CA 91789
Email: info@mypartsuniverse.com
Hours: Monday–Friday 9:00 AM–5:00 PM PT; Saturday–Sunday closed
Site: https://mypartsuniverse.com
Related policies: Terms & Conditions, Shipping, Returns.
