01

Information We Collect

The privacy page should describe the information Ride PAS collects when someone shops, creates an account, contacts the store, requests a test ride, places an order or uses the website. This may include contact details, order and payment-related information, device data, browsing activity and messages submitted through forms. The final policy should also reflect information collected through connected tools such as analytics, email marketing, inventory systems, customer support platforms and Shopify services. Only categories of information that are actually collected in production should be listed.

02

How Information Is Used

Explain that customer information may be used to process orders, arrange pickup, respond to questions, manage test-ride requests, provide support and improve the shopping experience. It may also support account administration, fraud prevention, inventory coordination, service communications and marketing where the customer has agreed to receive it. The final wording should distinguish between uses that are necessary to operate the store and uses that rely on consent or another applicable legal basis. Avoid broad language that suggests Ride PAS uses customer information for purposes it does not actually perform.

03

Shopify & Service Providers

Because the store is built on Shopify, the privacy policy should accurately describe Shopify and the service providers connected to the production website. These may include payment processors, analytics tools, email platforms, inventory systems, advertising services and customer support software. These providers may process information on Ride PAS's behalf in order to operate specific parts of the website or purchase journey. Only services that are actually active at launch should be named, and the policy should be updated if the technology stack changes later.

04

Cookies & Analytics

The page should explain how cookies and similar technologies support essential site functionality, analytics, personalization and marketing. The production policy must match the actual cookie banner, consent settings and analytics tools configured on the site instead of relying on generic wording. Customers should be told how they can manage non-essential cookies or update their preferences where those controls are required. If advertising, remarketing or additional analytics tools are introduced later, the privacy page and consent experience should be updated together.

05

Sharing Information

The policy should state the categories of third parties that may receive information in order to operate the store, such as payment processors, shipping providers, ecommerce infrastructure, analytics services and professional advisers. Sharing should be limited to what is reasonably necessary to provide requested services, operate the business, maintain security or comply with legal obligations. Ride PAS should not claim that it sells customer data unless the client confirms the specific legal wording required for its jurisdiction. The final page should identify any additional categories of recipients that are actually used in the live business.

06

Data Retention & Security

Explain at a high level how long customer information may be retained for order records, accounting, customer support, fraud prevention or legal obligations. Different categories of data may be kept for different periods depending on the business purpose and applicable requirements. Ride PAS and its providers can describe reasonable administrative, technical and organizational safeguards used to protect personal information, but the policy should avoid promising absolute security. Final retention periods should reflect the real operational and legal needs of the business rather than generic numbers.

07

Your Privacy Choices

Customers should have a clear way to request access, correction or deletion of personal information where those rights apply, as well as a simple method for opting out of marketing communications. The page should also explain available cookie controls, communication preferences and any jurisdiction-specific rights that apply to Ride PAS customers. The exact rights and response process depend on where the business operates and sells, so final wording should be reviewed for those jurisdictions. The contact method and any identity-verification process for privacy requests should be confirmed before launch.

08

Contact

The privacy page should use the confirmed Ride PAS privacy contact email, business address and any other contact details required by law. Customers should know where to send questions about privacy practices or requests involving their personal information. For design purposes, placeholder contact information may remain temporarily, but it must be replaced before launch. The final privacy contact details should also match the contact information shown across the rest of the website so customers do not see conflicting information.