PRIVACY POLICY
1. Introduction
Welcome to Tuners Vault Auction Marketplace ("Tuners Vault," "we," "us," or "our"). Tuners Vault operates an online auction marketplace that enables registered users worldwide to buy, bid on, and sell performance, OEM, aftermarket, JDM, import, discontinued, and replacement parts and components for cars and motorcycles, together with related tools, equipment, and motorsport goods. The Platform is owned and operated from the Province of Ontario, Canada.
The present Privacy Policy ("Policy") explains how we collect, use, disclose, store, retain, and protect your personal information when you access or use our website located at tunersvault.com, our services, and all related features and tools (collectively, the "Services"). It also describes the rights available to you regarding your personal information and how you may exercise them.
By accessing the Platform, creating an account, or otherwise using the Services, you acknowledge that you have read and understood this Policy. Where your consent is required as a legal basis for processing, your continued use of the Services following publication of any amendments shall constitute your acceptance of the revised Policy.
2. Governing Privacy Legislation
Tuners Vault processes personal information in compliance with the privacy and data protection frameworks applicable to the individual User based on jurisdiction of residence. In Canada, the Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5 ("PIPEDA"), together with the Breach of Security Safeguards Regulations, SOR/2018-64, applies. In the European Union, Regulation (EU) 2016/679 of the European Parliament and of the Council (the "General Data Protection Regulation" or "GDPR") applies. In the United Kingdom, the UK General Data Protection Regulation ("UK GDPR") as retained under the Data Protection Act 2018 applies. In the United States, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 ("CCPA/CPRA"), applies where relevant.
Where a conflict arises between the provisions of this Policy and any mandatory requirement under applicable law, the applicable legal requirement shall prevail.
3. Scope of Application
The present Policy applies to all visitors to tunersvault.com, registered Buyers and Sellers, account holders, and individuals who contact us through any channel. It governs the processing of personal information collected through the Platform, including information provided directly by Users, information collected automatically through technological means, and information received from third-party sources.
The Policy does not apply to the practices of third-party websites, services, or platforms linked from or integrated with Tuners Vault, each of which is governed by its own privacy policy. Users are encouraged to review the privacy policies of any third-party service they access.
4. Information We Collect
4.1 Information You Provide Directly
When you register for an account, create listings, place bids, complete purchases, enter giveaways or promotional contests, claim prizes, or communicate with us, we may collect your full legal name; username; email address; telephone number; billing and shipping address; credit card and payment information, processed through secure third-party payment processors; government-issued identification, where required for identity verification, fraud prevention, prize eligibility, or regulatory compliance; tax identification numbers, where required by law; seller account and business information; listings, item descriptions, part numbers, fitment data, and photographs; giveaway and contest entries; prize-claim information; winner eligibility declarations; skill-testing question records where applicable; prize delivery details; and communications with customer support.
4.2 Information Collected Automatically
When you access or interact with the Services, we may automatically collect certain technical and usage information through cookies and similar tracking technologies, as described in our Cookie Policy. Such information includes your IP address; device type, model, and unique device identifiers; browser type and version; operating system; pages visited and time spent on each page; listing activity, bidding history, saved searches, and watchlist interactions; referral URLs and exit pages; log data and error reports; and geographic location inferred from IP address. Where third-party advertising services are enabled on the Platform, including Google AdSense operated by Google LLC, additional data points may be collected automatically, such as advertising identifiers, ad interaction and click-through data, and interest-based profiling information, as governed by the applicable third-party provider's own privacy policy.
4.3 Information from Third Parties
We may receive personal information about you from identity verification providers; fraud prevention and risk assessment services; payment processors; marketing and analytics partners; and social media platforms, where you interact with our Services through social media integrations.
5. Purposes of Collection and Use
5.1 Provision and Administration of Services
We create, maintain, and administer user accounts; facilitate listings, bidding, fixed-price purchases, and transactions; process the 9.5% marketplace operations commission; issue settlement invoices; enable post-transaction communication between Buyers and Sellers; and provide customer support.
5.2 Security, Fraud Prevention, and Trust
Tuners Vault verifies user identity; detects and prevents fraudulent bidding, listing, or selling activity; monitors suspicious account behaviour; enforces the Terms of Service, User Agreement, Buyer Agreement, and Seller Agreement; and administers its trust and safety program. Verification activity may include additional checks in connection with transactions designated high value under the High-Value Risk Policy.
5.3 Legal and Regulatory Compliance
We comply with applicable tax reporting obligations; fulfil anti-money laundering requirements; respond to lawful requests from law enforcement or regulatory authorities; maintain records as required by PIPEDA's breach of security safeguards record-keeping obligations under SOR/2018-64; and enforce or defend legal claims.
5.4 Platform Improvement and Analytics
Tuners Vault analyzes user behaviour and engagement patterns to improve website performance, functionality, and the user experience; conducts internal research; develops new features; and generates aggregated, de-identified statistical reports.
5.5 Communications
We send transactional messages, including account confirmations, bid confirmations, listing notifications, and settlement invoices, and, where you have provided express consent in accordance with Canada's Anti-Spam Legislation, S.C. 2010, c. 23 ("CASL"), commercial electronic messages relating to upcoming auctions, promotions, and platform updates.
5.6 Advertising
Tuners Vault delivers advertisements through third-party advertising platforms integrated with the Platform, including Google AdSense operated by Google LLC; measures advertisement performance, impressions, and engagement metrics; supports interest-based and contextual advertising where the User has provided consent in accordance with applicable law; and analyzes advertising effectiveness for the purpose of improving the relevance of advertisements displayed on the Platform.
5.7 Giveaways and Promotional Contests
We administer giveaways, prize draws, launch promotions, auction-linked promotional contests, user-registration promotions, and similar promotional events; verify participant eligibility; record entries; conduct random draws or other lawful winner-selection procedures; administer no-purchase entry methods; contact selected entrants; administer mathematical skill-testing questions for Canadian winners where applicable; confirm winner identity; collect prize-claim documentation; arrange prize delivery; maintain contest records; detect and prevent contest abuse; and comply with applicable advertising, contest, tax, privacy, and consumer-protection laws.
6. Legal Bases for Processing
For Users in the European Union and the United Kingdom, we process personal data on the basis of one or more of the following lawful grounds under the GDPR and UK GDPR.
Performance of a contract, meaning processing that is necessary to perform our obligations under the Terms of Service, User Agreement, Buyer Agreement, or Seller Agreement, or to take pre-contractual steps at your request.
Legitimate interests, meaning processing that is necessary for our legitimate interests or those of a third party, provided that such interests are not overridden by your rights and freedoms. Our legitimate interests include fraud prevention, platform security, enforcement of our policies, and business analytics.
Legal obligation, meaning processing that is necessary to comply with a legal obligation to which we are subject, including tax reporting, anti-money laundering requirements, and breach notification obligations.
Consent, meaning processing based on your freely given, specific, informed, and unambiguous consent, including the use of non-essential cookies and the sending of marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
For Users in Canada, we rely on the knowledge and consent of the individual as the primary basis for collection, use, and disclosure of personal information, in accordance with Principle 3 of Schedule 1 to PIPEDA, except where an exemption to the consent requirement applies under the Act.
7. Sharing and Disclosure of Information
7.1 Service Providers
We share personal information with third-party vendors that provide services on our behalf, including payment processors, cloud hosting and storage providers, analytics platforms, email service providers, fraud detection services, identity verification providers, and advertising network providers. Those providers include Google AdSense, operated by Google LLC, which may collect and process User data in connection with the delivery of advertisements on the Platform in accordance with Google's Privacy Policy, available at https://policies.google.com/privacy. All service providers are bound by contractual obligations to protect your personal information and to use it solely for the purposes for which it was disclosed.
7.2 Other Users
In connection with completed transactions, certain information is shared between Buyers and Sellers to facilitate transaction completion, as described in the Terms of Service and User Agreement. Publicly visible information on the Platform may include your username, listings, and bid history as displayed on the Site. Sensitive personal information is not publicly displayed.
7.3 Legal Authorities, Fraud Prevention, and Safety
We may disclose personal information where required to do so by law, regulation, subpoena, court order, production order, governmental request, or other lawful process. Disclosure may also be made where we believe in good faith that disclosure is reasonable, necessary, or appropriate to protect our rights, protect the safety of Users or third parties, or investigate or respond to fraud, attempted fraud, scam activity, identity misuse, payment abuse, chargeback abuse, counterfeit activity, theft, unlawful conduct, breach of agreement, or conduct that threatens the trust, safety, or integrity of the Platform.
Where permitted under applicable law, including PIPEDA and other privacy or data-protection legislation, such disclosure may be made to law enforcement authorities, regulatory bodies, payment processors, fraud-prevention service providers, carriers, affected Users, legal counsel, courts, tribunals, or other competent recipients. Disclosures made for fraud prevention, investigation, legal compliance, or safety purposes are limited to information reasonably relevant to the purpose for which the disclosure is made.
7.4 Customs, Carriers, and Regulatory Authorities
Where a transaction involves a cross-border shipment, the Seller requires the Buyer's name and delivery address in order to complete customs documentation, and a carrier or customs authority may require further information in connection with the entry. Disclosure of such information takes place between the Users concerned and the carrier or authority, in accordance with the Cross-Border Duties, Taxes & Customs Policy. Tuners Vault does not lodge customs declarations and does not transmit User information to customs authorities except where compelled to do so by law.
7.5 Business Transfers
In the event of a merger, acquisition, reorganization, asset sale, or similar transaction, personal information may be transferred as part of that transaction. We will provide notice before personal information becomes subject to a different privacy policy.
8. International Data Transfers
Tuners Vault operates globally, and your personal information may be transferred to, stored in, and processed in countries outside your country of residence, including Canada and other jurisdictions where our service providers maintain infrastructure. Where personal information originating from the European Economic Area, the United Kingdom, or Switzerland is transferred to a country that has not received an adequacy decision from the European Commission or the UK Secretary of State, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission under Commission Implementing Decision (EU) 2021/914, to ensure an adequate level of protection.
For Users in Canada, we ensure that personal information transferred to third parties outside Canada for processing receives a comparable level of protection, in accordance with Principle 1 of Schedule 1 to PIPEDA and guidance issued by the Office of the Privacy Commissioner of Canada.
9. Data Retention
We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, as identified in this Policy, or as required or permitted by applicable law. Specific retention periods are determined as set out below.
Account information is retained for the duration of your active account and for a period of five (5) years following account closure or termination, to comply with legal, tax, and regulatory obligations and to resolve any disputes that may arise.
Transaction records are retained for a minimum of seven (7) years following the date of the transaction to satisfy tax reporting and audit requirements under the Income Tax Act, R.S.C. 1985, c. 1 (5th Supp.), and equivalent legislation in other jurisdictions.
Breach records are retained for a minimum of twenty-four (24) months following the date of discovery, in compliance with the Breach of Security Safeguards Regulations, SOR/2018-64, made under PIPEDA.
Marketing consent records are retained for as long as the consent remains valid, and for a reasonable period thereafter to demonstrate compliance with CASL.
Promotional contest records, including giveaway entries, no-purchase entries, winner-selection records, eligibility confirmations, skill-testing question records where applicable, prize-claim documentation, winner communications, and prize delivery records, may be retained for up to three (3) years following the conclusion of the applicable promotion, or for a longer period where necessary to comply with legal obligations, resolve disputes, respond to regulatory inquiries, defend legal claims, investigate fraud, or maintain accurate promotional records.
Automated data, including logs and analytics records, is retained for up to twenty-four (24) months, unless a longer period is necessary for security investigation or legal proceedings.
Upon expiration of the applicable retention period, personal information will be securely deleted, destroyed, or de-identified in accordance with our internal data disposal procedures.
10. Children's Privacy
The Services are not directed at, and are not intended for use by, individuals under eighteen (18) years of age. Tuners Vault does not knowingly collect, solicit, or process personal information from minors. If we become aware that we have collected personal information from a person under eighteen (18), we will take prompt steps to delete such information from our systems. Should you believe that a minor has provided personal information to Tuners Vault, please contact us immediately at info@tunersvault.com.
11. Security Measures
We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, destruction, loss, and theft. Measures employed include encryption of personal information in transit and at rest using industry-standard protocols; access controls limiting personnel access to personal information on a need-to-know basis; secure server infrastructure with firewalls and intrusion detection systems; regular security assessments and vulnerability testing; and employee training regarding data protection responsibilities.
While we take commercially reasonable steps to protect your personal information, no method of electronic transmission or storage is entirely secure, and we cannot guarantee absolute security. In the event of a breach of security safeguards involving personal information under our control that creates a real risk of significant harm to an individual, we will comply with the notification requirements set forth in sections 10.1 through 10.3 of PIPEDA and the Breach of Security Safeguards Regulations, SOR/2018-64, and with equivalent requirements under the GDPR at Articles 33 and 34, the UK GDPR, or other applicable legislation.
12. Your Privacy Rights
Depending on your jurisdiction of residence, you may have some or all of the rights described below.
The right of access, meaning the right to request confirmation of whether we process your personal information and to obtain a copy of such information.
The right to rectification, meaning the right to request correction of inaccurate or incomplete personal information.
The right to erasure, meaning the right to request deletion of your personal information, subject to applicable legal retention requirements.
The right to restriction of processing, meaning the right to request that we restrict the processing of your personal information in certain circumstances.
The right to object, meaning the right to object to processing based on legitimate interests or for direct marketing purposes.
The right to data portability, meaning the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller.
The right to withdraw consent, meaning that where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
Canadian residents have the right to access their personal information held by Tuners Vault, to challenge its accuracy and completeness, and to have it amended as appropriate, in accordance with Principles 9 and 10 of Schedule 1 to PIPEDA.
California residents may have additional rights under the CCPA/CPRA, including the right to know what personal information is collected, disclosed, or sold; the right to request deletion; the right to opt out of the sale or sharing of personal information; and the right to non-discrimination for exercising their privacy rights.
To exercise any of the foregoing rights, please contact us at info@tunersvault.com. We will respond to verifiable requests within the timeframes prescribed by applicable law. Reasonable verification of your identity may be requested before a request is processed.
13. Cookies and Tracking Technologies
Tuners Vault uses cookies and similar tracking technologies as described in our Cookie Policy, which should be read in conjunction with this Privacy Policy. You may manage your cookie preferences through the cookie consent mechanism presented upon your first visit to the Site, where required by law, and through your browser settings. Please note that disabling essential cookies may impair the functionality of certain features, including bidding and account access.
Where Google AdSense is enabled on the Platform, Google may place cookies and similar tracking technologies on your device for the purpose of serving personalized or contextual advertisements, measuring advertisement performance, and conducting interest-based audience profiling. Data collected and processed by Google in connection with AdSense is governed by Google's Privacy Policy, available at https://policies.google.com/privacy, and by Google's advertising terms. You may manage your Google advertisement personalization preferences at https://myadcenter.google.com. For Users located in the European Union or the United Kingdom, AdSense advertising cookies will only be activated after you have provided explicit consent through the Platform's cookie consent mechanism, in accordance with the ePrivacy Directive and applicable national transpositions thereof.
14. Third-Party Links and Integrations
The Platform may contain links to third-party websites, services, or applications that are not owned or controlled by Tuners Vault, including manufacturer reference sites, carrier tracking pages, and social media platforms. We are not responsible for the privacy practices, content, or security of any third-party site. You are encouraged to review the privacy policy of every third-party service you access through or in connection with the Platform.
15. Changes to This Privacy Policy
We may update the present Policy from time to time to reflect changes in our practices, applicable law, or regulatory guidance. When material changes are made, we will revise the "Last Updated" date at the top of this document and, where required by law, notify you through reasonable means, which may include email notification or a prominent notice upon login. Your continued use of the Services following publication of any amendments constitutes acceptance of the revised Policy to the extent permitted by applicable law.
16. Contact Information and Privacy Inquiries
If you have any questions, concerns, or complaints regarding this Privacy Policy or our handling of your personal information, or if you wish to exercise any of your privacy rights, please contact us by email at info@tunersvault.com or through the website at https://tunersvault.com.
If you are located in Canada and are not satisfied with our response to your privacy inquiry, you may file a complaint with the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca.
If you are located in the European Union or the United Kingdom and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.
© 2026 Tuners Vault. All rights reserved.