Privacy Policy

Effective date: October 28, 2026

Bimmer Society is a US online store for aftermarket performance and replacement parts for BMW vehicles. This policy explains how personal information is handled when you visit our site, join the Society, ask for help, or order parts.

Information we collect

When you sign up, we save your email address, your selected chassis if provided, which signup form you used, your marketing consent, and signup and update timestamps in our database. We also store a hashed version of your IP address to help prevent repeated or abusive signups. A hash is not the original IP address, but we still treat it as personal information.

Your selected car in My Garage and your saved Society Tech chat history are stored in your browser, not as garage or chat-history records in our database. When you use Society Tech, the conversation included with your request and your saved car details are sent for processing so the assistant can respond.

Questions and support messages reach us by email. If you contact us at the address below, we receive your email address and any name, vehicle details, message, or attachments you choose to provide. We do not run a separate contact form that stores messages on this site.

Orders, payments, billing and shipping details are handled through Shopify checkout. Order information can include your name, email, address, contact details, and the parts ordered. We never see full payment card numbers.

Our hosting and service providers also process technical information, such as IP addresses and request details, as needed to deliver the site, operate their services, and protect against abuse.

How we use it

We use information to record member signups, provide relevant car and parts information, respond to support requests, process and fulfill orders, prevent abuse, and meet legal obligations. We send marketing emails only with your consent. You can unsubscribe at any time using an unsubscribe link in a marketing email or by contacting us at the address below.

Who processes information

• Shopify: provides our store, cart, checkout, and payment services and processes order and checkout information.
• Lovable Cloud: provides website hosting and our signup database.
• Lovable’s AI gateway and Anthropic’s Claude model: process Society Tech requests, including the conversation and vehicle details sent with a request. Saving chat history only in your browser does not mean the messages stay on your device when you ask the assistant a question. Avoid sharing card details or other sensitive personal information in chat.
• Shipping partners and suppliers: fulfill orders from partner warehouses and receive the name, shipping address, and order contents needed to pack and deliver your parts.

These providers handle information under their applicable service terms and privacy policies. We do not sell personal information. We may also disclose information when required by law or reasonably necessary to protect people, prevent fraud, or defend legal rights.

Cookies and browser storage

The site uses local storage to remember your cart and Shopify cart reference, My Garage selection, Society Tech chat history, and whether you have already seen the email signup popup. It also saves a randomly generated visitor identifier used with your IP address to limit abusive chat requests. Shopify and other service providers may use cookies or similar storage needed to operate checkout and their services.

You can clear these records through your browser’s site-data settings, and Clear chat removes the chat history saved by the site in that browser. Clearing browser data does not delete signup records, orders, or information already processed by service providers. Blocking cookies or local storage may prevent cart, checkout, or saved preferences from working correctly.

How long information is kept

We keep signup and support information for as long as needed for the purposes described here, unless you request deletion or withdraw marketing consent. We may retain limited records needed to honor an unsubscribe request, resolve disputes, prevent abuse, or comply with legal, tax, and accounting obligations. Order information and information processed by service providers are also subject to those providers’ retention practices.

Browser-stored information remains until you remove it through the site’s available controls or clear your browser’s site data.

Security

We use access restrictions and safeguards provided by our hosting, database, and checkout services to protect information. Signup records are not publicly accessible. No website, storage system, or transmission method can be guaranteed completely secure.

Children

The site is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided information, contact us so we can investigate and delete it as appropriate.

Your privacy choices and US state rights

Depending on your state of residence and applicable law, you may have rights to access or obtain a copy of personal information, correct it, request deletion, or appeal a decision about your request. You may also have rights to opt out of certain uses or disclosures, where applicable. We do not sell personal information.

Send requests or appeals to the support email below. We may need to verify your identity and the scope of the request before acting. Some information may need to be retained as permitted or required by law. We will not discriminate against you for exercising applicable privacy rights. For information held in your browser, you can clear it directly; for Shopify checkout information, we can help direct your request to the appropriate provider.

California residents

Where the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), applies, California residents have the right to know and access the personal information we collect, use, and disclose; request deletion; correct inaccurate personal information; and opt out of the sale or sharing of personal information. We do not sell personal information or share it for cross-context behavioral advertising. We will not discriminate against you for exercising these rights.

Submit a request by emailing support@bimmersociety.com. We may verify your identity using information needed to match your request to our records; do not send passwords or full card numbers. An authorized agent may submit a request on your behalf, subject to verification of their authority and, where permitted, your identity or direct confirmation. Rights are subject to applicable legal exceptions, including records we must keep to fulfill orders or meet legal obligations.

Changes to this policy

We may update this policy as the store or our practices change. The effective date above identifies the latest version. If applicable law requires additional notice or consent for a change, we will provide it.

Contact

For privacy questions, requests, or marketing opt-outs, email support@bimmersociety.com.