Last Updated: August 19, 2025

 

Candru, Inc. (“Candru,” “we,” “us,” or “our”) is committed to protecting your privacy. As a U.S.-registered global auto parts distributor, we comply with privacy laws worldwide, including the EU’s GDPR and California’s CCPA. This Privacy Policy explains what information we collect, how we use it, and your rights under applicable laws. We use clear, straightforward language and outline the categories of data we collect and why, in accordance with GDPR transparency requirements.

Information We Collect

We collect different types of information to operate our business and serve you:

Personal Identification. Contact details you provide (such as name, email address, billing and shipping address, and phone number) when you create an account or place an order. We also collect any vehicle information or other product-related details you share to help fulfill your order.

Order Details. Information about the products you order (part numbers, quantities, etc.) and any communications related to your purchase.

Technical Data. We automatically collect data about your device and browsing activity. This includes your IP address, browser type, operating system, and pages you visit on our site. We use cookies and similar technologies for site functionality (e.g., keeping your shopping cart) and performance monitoring. For example, we use Google Analytics to anonymously track how visitors navigate our website. This data helps us improve the site and our services.

Payment Information. We do not collect or store your payment details. All payment processing (credit/debit card data, bank transfers, etc.) is handled securely by third-party payment processors (such as Stripe, PayPal, or others). We only receive confirmation that payment was completed; we never have access to your full payment information.

We do not knowingly collect personal data from children under 13. If you are a parent or guardian and become aware that your child has provided us with personal information, please contact us immediately to have it removed.

How We Use Your Information

We use the information we collect for legitimate business purposes, including:

Order Fulfillment. Processing and shipping your orders, providing customer service, and sending updates about your order status (such as confirmation emails and delivery notifications).

Account Administration. Managing your account, fulfilling your requests, and communicating with you about account-related matters.

Site Improvement. Understanding how visitors use our website to improve its functionality and content. We analyze usage data (for example, page visits and referring sites) using Google Analytics. This data is aggregated and anonymized; it does not include your personal contact details.

Customer Service and Support. Responding to your inquiries, comments, and warranty claims. We may share order details with product manufacturers to assist with legitimate warranty claims.

Marketing Communications (Optional). If you opt in to newsletters or promotions, we use your email address to send you updates about promotions, new parts, or helpful information. You can unsubscribe at any time.

We will not use your personal data for purposes incompatible with the ones stated above without your consent. We do not sell your personal information to advertisers or unrelated third parties.

Cookies and Tracking Technologies

Candru uses cookies and similar technologies to improve your browsing experience. Cookies are small data files placed on your device. We use:

Essential Cookies: Required for site functionality (e.g., keeping track of items in your cart).

Performance Cookies: Including analytics tools like Google Analytics, which use cookies to collect anonymous statistics about site usage. This helps us understand trends (for example, which pages are most popular).

Marketing Cookies: Third-party cookies (e.g., Facebook Pixel, Google Ads) may be used to deliver advertising relevant to your interests. These are provided by outside services, and Candru is not responsible for their operation.

You can set your browser to refuse or delete cookies (consult your browser’s help menu). Please note that disabling cookies may prevent certain website features from working correctly. Google Analytics has its own opt-out tools which you can use to prevent Google from collecting your data.

Data Sharing and Disclosure

We may share your information only in the ways described below and as permitted by law:

Service Providers: We disclose information to trusted third-party vendors who perform services on our behalf, such as hosting our site, shipping orders, customer service, and data analysis. These providers are contractually obligated to keep your data secure and use it only for the services they perform for us.

Product Manufacturers (Warranty and Support): To process valid warranty or recall claims, we may share your order details with the product’s manufacturer or its agents. This is done to facilitate repairs, replacements, or refunds in accordance with the manufacturer’s warranty terms.

Legal Requirements: We will disclose personal information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, the safety of our customers, or the public.

We do not sell, trade, or rent your personal information. Except as described above, we do not share your personal data with any third parties for their direct marketing purposes.

Your Rights

Rights Under GDPR (EU/EEA Residents)

If you are located in the European Union (EU) or European Economic Area (EEA), you have rights under the GDPR regarding your personal data. These rights include:

Right of Access: You can request confirmation of whether we process your personal data and obtain a copy of it. (GDPR Article 15 guarantees data access).

Right to Rectification: You can request that we correct or update inaccurate or incomplete personal data we hold about you.

Right to Erasure (“Right to be Forgotten”): You can request that we delete your personal data in certain circumstances (e.g., if it’s no longer needed for the purposes collected).

Right to Restrict Processing: You can ask us to limit processing of your personal data in certain scenarios (for example, if you contest the data’s accuracy).

Right to Object: You can object to processing based on our legitimate interests or to direct marketing at any time.

Right to Withdraw Consent: If we rely on consent to process your data (for a specific purpose), you can withdraw that consent anytime.

Right to Data Portability: You can request that we transfer your personal data directly to another organization, where technically feasible.

To exercise any of these rights, please contact us as indicated below. We will respond within the timeframes required by law. You can also lodge a complaint with an EU data protection authority if you believe your rights have been violated.

Rights Under CCPA/CPRA (California Residents)

If you are a California resident, the CCPA and its amendments (CPRA) give you additional rights:

Right to Know: You can request that we disclose what categories of personal information we have collected about you and how we use it.

Right to Delete: You can request deletion of your personal information, subject to certain exceptions.

Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information. (Candru does not sell personal information to third parties, but we provide this notice for compliance.)

Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA/CPRA rights.

California residents may make verifiable requests to exercise these rights. Please see “Contact Us” below for how to submit requests. We will verify your identity and respond in accordance with the law.

Data Security and Retention

We maintain administrative, technical, and physical safeguards designed to protect your personal information. Our website uses industry-standard SSL encryption to protect data transmitted online. However, no security system is impenetrable. We retain your data only as long as needed for business or legal purposes. For example, we keep order records for accounting and tax reasons. Once data is no longer needed, we securely delete or anonymize it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time (for example, to reflect new legal requirements or company practices). Any changes will be effective when we post the revised policy on this page with an updated “Last Updated” date. We encourage you to review this page periodically. Your continued use of Candru’s website after any changes indicates your acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise your rights, please contact us at:

Candru, Inc.
Email: privacy@candru.com