Privacy policy

Effective date: August 12, 2026
Last updated: August 12, 2026

This Privacy Policy explains how Trail One LLC, doing business as Trail One Components ("Trail One," "we," "us," or "our"), collects, uses, discloses, and otherwise processes personal information when you visit trailone.bike or another website or online service that links to this Privacy Policy, communicate with us, create an account, make or return a purchase, submit a warranty, crash-replacement, product-safety, or customer-support request, apply to or participate in an affiliate, ambassador, referral, or promotional program, subscribe to marketing emails or product notifications, submit a review or other content, or otherwise interact with us (collectively, the "Services").

This Privacy Policy is a notice of our privacy practices. It is not itself a request for consent and does not replace any consent that applicable law requires us to obtain before using non-essential cookies, pixels, session-replay technology, or similar tools. Our Terms of Service govern use of the Services and purchases from us.

1. Who We Are

Trail One LLC, a Delaware limited liability company, operates the Trail One Components brand and is the controller or business responsible for the personal information described in this Privacy Policy, except where another entity is identified at the point of collection. Cayley Enterprises, Inc. and its personnel provide shared staffing, customer-support, fulfillment, distribution, administrative, and related operational services to Trail One LLC and may process personal information for those functions. Shared operations may occur in California, Nevada, and Pennsylvania. Trail One does not operate retail stores.

Contact information
Trail One LLC d/b/a Trail One Components
3225 Grande Vista Drive
Newbury Park, California 91320, United States
Contact Us

2. Scope and Important Limitations

This Privacy Policy applies to personal information we process through the Services. It does not apply to information processed solely on behalf of another business, to third-party websites or services that maintain their own privacy notices, to workforce or applicant information covered by a separate notice, or to information that applicable law excludes from the definition of personal information.

The Services may link to payment providers, marketplaces, social networks, shipping carriers, financing providers, affiliate platforms, review services, or other third parties. Their privacy practices are governed by their own notices. We encourage you to review those notices before providing information to them.

3. Personal Information We Collect

The information we collect depends on how you interact with us. We may collect the following categories of personal information:

Category	Examples	Main collection purposes	Retention approach
Identifiers and contact information	Name, email address, postal and billing address, telephone number, account identifier, social-media handle, online identifiers, IP address	Create and manage accounts; process orders, returns, exchanges, warranty and crash-replacement requests; deliver products; communicate with you; prevent fraud; personalize and market the Services	Kept for the life of the account or relationship and afterward as reasonably necessary for warranty, product-safety, tax, accounting, fraud-prevention, dispute, and legal purposes
Account and authentication information	Username, password hash, account preferences, authentication tokens, security questions, or similar credentials	Authenticate users, secure accounts, remember preferences, and prevent misuse	Kept while the account is active and for a limited period afterward for security, dispute, and legal purposes
Commercial and transaction information	Products viewed, searched for, placed in a cart, purchased, returned, exchanged, reviewed, or saved; order number; transaction status; discounts; gift-card or store-credit activity; warranty, crash-replacement, and customer-service history	Complete transactions; provide service; manage returns, warranties, and crash replacement; maintain records; analyze and improve our offerings; personalize and advertise	Transaction and tax records are generally kept for the period required by law and our legitimate accounting, warranty, product-safety, fraud-prevention, and dispute-resolution needs
Payment and financial information	Payment method, billing details, payment token, transaction authorization, last four digits, refund information, and financing information	Process payments, refunds, chargebacks, financing, and fraud screening	Full payment-card information is generally collected and processed by payment providers; we retain the limited payment and transaction information needed for the purposes above
Internet, device, and network activity	Browser and device type, operating system, IP address, cookie or device identifiers, referring and exit pages, timestamps, pages and products viewed, searches, clicks, scrolling, cart and checkout activity, ad interactions, and approximate location derived from IP address	Operate and secure the Services; remember choices; measure performance; troubleshoot; understand use; prevent fraud; personalize content; and, subject to your choices, advertise	Retention varies by tool and purpose; identifiers and event data are kept only as long as reasonably necessary for security, analytics, advertising, legal, and operational purposes
Communications and customer-service information	Messages submitted through our contact page, emails or chat messages we receive, call recordings or notes where permitted, support and survey responses, warranty or crash-replacement communications, and information you choose to include in free-text fields	Respond to requests; provide support; document transactions; train personnel; improve products and service; resolve disputes	Kept as reasonably necessary to manage the request, relationship, quality assurance, disputes, and legal obligations
User content	Product reviews, ratings, photos, videos, audio, testimonials, social-media posts, contest entries, and other content you submit	Display and moderate content; administer promotions; engage with customers; improve and promote products and Services	Public content and associated permission records may remain available for the period of authorized use and afterward as reasonably necessary for backup, legal, rights-management, and recordkeeping needs
Preferences and inferences	Bicycle, component, riding, product, compatibility, and style interests; marketing preferences; likely interests; customer segments; and inferences drawn from shopping or browsing activity	Personalize experiences and recommendations; measure campaigns; improve products, inventory, and merchandising; and, subject to your choices, advertise	Kept while useful for the stated purpose and then deleted or de-identified under our retention practices
Marketing information	Email subscription status, consent records, source and time of sign-up, campaign engagement, back-in-stock requests, and opt-out history	Send requested communications, maintain suppression lists, document consent, and comply with law	Consent and suppression records may be retained for as long as reasonably necessary to document compliance and honor opt-outs
Affiliate, ambassador, referral, and promotion information	Applications; occupation or relevant experience; audience; social profiles; referral links and codes; commission, payment, product, or discount activity; promotion entries; and eligibility information	Evaluate and administer affiliate, ambassador, referral, sponsorship, contest, giveaway, and similar programs; prevent misuse; document endorsements and required disclosures	Kept for the program relationship and afterward as reasonably necessary for payments, tax, fraud-prevention, rights-management, disputes, and legal purposes
Location information	Shipping and billing locations and approximate location inferred from IP address; precise location only if you knowingly enable a feature that requests it	Deliver orders; calculate taxes and shipping; prevent fraud; localize content; administer location-based promotions; and provide a feature you request	Kept according to the related transaction, promotion, or feature and our legal and operational needs
Product-safety, compatibility, and warranty information	Bicycle and component make, model, size, specifications, compatibility, installation and torque information, proof of purchase, product or batch identifiers, use and maintenance history, crash or incident details, photographs or video, injury or property-damage information, and recall or corrective-action records	Evaluate warranty and crash-replacement requests; assist with compatibility questions; investigate incidents and potential defects; comply with product-safety and recall duties; prevent fraudulent claims	Kept as reasonably necessary for warranty administration, trend analysis, product safety, recalls or corrective actions, insurance, disputes, and legal obligations
Fraud and compliance information	Fraud scores, device or account risk signals, chargeback history, identity-verification results, suspected misuse, sanctions or export screening, and records of legal or compliance requests	Protect customers, personnel, and the Services; investigate misuse; enforce terms; comply with law	Kept as reasonably necessary for security, fraud prevention, disputes, and legal obligations

Some information may be considered "sensitive personal information" under certain laws, including account credentials, payment information, precise location if enabled, or the contents of communications you send to us. We use sensitive personal information only for the purposes described in this Policy and do not use or disclose it for purposes that require us to provide a right to limit under California law, unless we provide that right before beginning such processing.

Please do not place payment-card numbers, account passwords, government identification numbers, medical information, or other highly sensitive information in search boxes, review forms, chats, or other free-text fields unless we specifically request it through a secure method.

4. How We Collect Personal Information

We may collect personal information:

Directly from you, such as when you create an account, place or return an order, submit a warranty, crash-replacement, compatibility, or safety request, contact us, submit a review, enter a promotion, apply to an affiliate or ambassador program, or subscribe to emails or product notifications.
Automatically from your browser or device, using cookies, pixels, tags, software development kits, local storage, server logs, and similar technologies.
From service providers and transaction partners, including Cayley Enterprises, Inc., Shopify, payment and financing providers, fraud-prevention services, customer-support platforms, shipping carriers, fulfillment providers, manufacturers, and return-management services.
From advertising, analytics, affiliate, review, and social-media partners, such as when you arrive through an advertisement or affiliate link, submit or interact with a review, interact with our advertising, or tag or communicate with us on a social platform.
From marketplaces and other sales channels, including when you purchase a Trail One product or request support through Amazon or another third-party marketplace.
From business and promotional partners, including in connection with events, co-marketing, sponsorships, affiliate relationships, giveaways, or promotions.
From publicly available sources and people who refer you, where permitted by law.
By combining information collected from the sources above.

5. How We Use Personal Information

We may use personal information to:

provide, operate, maintain, and improve the Services;
create and manage accounts and authenticate users;
process orders, payments, financing, taxes, shipping, delivery, returns, exchanges, warranty and crash-replacement requests, recalls, and corrective actions;
communicate about orders, accounts, products, warranty, crash-replacement, compatibility, safety, or support requests, policy changes, security, and other transactional matters;
provide customer service and technical support;
remember preferences, personalize content and product recommendations, and improve search and merchandising;
send marketing emails, direct mail, or other marketing where permitted, and honor communication choices;
send back-in-stock or product-availability notifications that you request;
measure traffic, performance, engagement, attribution, and advertising effectiveness;
select and deliver advertising on our Services and elsewhere, subject to applicable law and your privacy choices;
administer surveys, contests, giveaways, affiliate, ambassador, referral, sponsorship, event, and discount programs;
solicit, verify, publish, and moderate reviews and other user content;
obtain and manage permissions for authorized uses of content, names, images, likenesses, voices, testimonials, and endorsements;
detect, investigate, and prevent fraud, security incidents, harmful activity, and violations of our Terms or program rules;
investigate potential product defects, incidents, injuries, property damage, compatibility concerns, claims trends, recalls, and other product-safety matters;
administer and document Trail One's trail-support and giving commitments;
maintain business, tax, accounting, warranty, product-safety, consent, rights-management, and compliance records;
establish, exercise, or defend legal claims and respond to lawful requests;
complete a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction.

We may de-identify or aggregate information so that it cannot reasonably be linked to you. We may use and disclose de-identified or aggregated information for any lawful purpose and will not attempt to re-identify it except to test whether our de-identification process is effective or as otherwise permitted by law.

6. Cookies, Pixels, Session Replay, and Similar Technologies

We and third parties may use cookies, pixels, tags, local storage, server logs, and similar technologies for the following purposes:

Strictly necessary: security, fraud prevention, network management, authentication, shopping-cart functionality, checkout, payment, and remembering privacy choices.
Functional: remembering language, currency, account, search, accessibility, and other preferences; providing chat, reviews, product notifications, or similar features.
Analytics and performance: understanding traffic, page performance, navigation, product interest, searches, errors, and campaign attribution.
Advertising, affiliate, and social media: measuring campaigns, attributing referrals, building audiences, limiting ad frequency, personalizing ads, and connecting activity across websites, apps, devices, or services.

Where enabled, interaction-analysis tools such as session replay, heat maps, chat, or search analytics may record or reconstruct interactions such as pages viewed, clicks, scrolling, cursor movement, device and browser information, URLs, search terms, and text entered into fields that are configured for collection. We require these tools to be governed by our privacy choices and do not intend for them to collect payment-card numbers, passwords, or other information entered into fields designated as sensitive.

Some advertising, analytics, social-media, affiliate, and commerce partners may receive online identifiers, device and browser information, IP address, approximate location, commercial information, and activity on the Services. They may combine that information with data from other services and use it for measurement, security, personalization, referral attribution, or targeted advertising under their own privacy notices.

Where our consent banner is displayed, you can accept or reject non-essential technologies by category. You can revisit your settings through the Cookie Preferences or Your Privacy Choices link or icon on the Services. Rejecting non-essential technologies does not disable technologies necessary to provide the Services.

Selecting Accept All or affirmatively enabling a non-essential category means that you consent to the collection, storage, use, and contemporaneous transmission of the information described above through technologies in that category to the applicable categories of partners for the disclosed purposes. Selecting Reject Nonessential means that non-essential categories will remain disabled. You may withdraw consent prospectively at any time through Cookie Preferences. We do not treat silence, scrolling, continued browsing, or acceptance of our Terms of Service as consent to non-essential tracking where affirmative consent is required.

You can also control cookies through your browser. Blocking or deleting cookies may cause some features to stop working, and deleting cookies may also delete a preference stored in that browser.

We recognize Global Privacy Control (GPC) signals as requests to opt out of sale, sharing, or targeted advertising where applicable law requires. Because there is no uniform legal or technical standard for browser "Do Not Track" signals, we do not respond to those signals unless required by law.

7. Shopify and Shopify Network Intelligence

The online store is hosted by Shopify. Shopify collects and processes personal information about your interactions with the store to provide hosting, checkout, payment, security, fraud prevention, analytics, personalization, and other commerce services. Depending on our settings and the Shopify services we use, Shopify may process information from your interactions with this store, other merchants, and Shopify to provide enhanced personalization, analytics, security, advertising, and commerce services. This processing may involve information about your browsing, searches, products viewed or purchased, device, account, and transaction activity and may occur in countries other than where you live.

Learn more in the Shopify Consumer Privacy Policy. Depending on your location, you may also use the Shopify Privacy Portal to exercise choices concerning certain processing by Shopify.

8. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients for the purposes described in this Policy:

Cayley Enterprises, Inc., which provides Trail One with shared staffing, customer-support, fulfillment, distribution, administrative, technology, and related operational services.
Commerce and technology providers, including Shopify and providers of hosting, cloud storage, cybersecurity, fraud prevention, account management, customer support, email, reviews, chat, search, and website functionality.
Payment, financing, and transaction providers, which process payments, refunds, chargebacks, financing, taxes, and identity or fraud checks.
Fulfillment, logistics, and product-safety partners, including shared operations and providers in California, Nevada, and Pennsylvania; warehouses; shipping carriers; manufacturers and suppliers; testing providers; return-management providers; insurers; and safety, recall, or corrective-action vendors.
Marketplaces and sales channels, when necessary to process, fulfill, support, reconcile, or comply with rules governing a marketplace transaction.
Analytics, advertising, affiliate, review, and social-media partners, subject to your privacy choices and applicable law.
Promotion, sponsorship, and event partners, where disclosed at the point of collection, necessary to administer the offering, or directed by you.
Professional advisers and insurers, including lawyers, auditors, accountants, consultants, and insurance providers.
Government authorities, courts, and other parties for legal reasons, when we believe disclosure is necessary to comply with law, protect rights or safety, investigate misconduct, or establish or defend claims.
Corporate transaction parties, including potential or actual buyers, sellers, investors, lenders, advisers, and successors in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.
Other parties at your direction or with your consent, such as a person to whom you ask us to ship a gift or a partner whose joint promotion you choose to enter.

We may disclose de-identified or aggregated information that cannot reasonably be linked to you.

We do not sell personal information for money. However, disclosures of online identifiers, device information, commercial information, internet activity, approximate location, hashed contact information, or inferences to advertising, social-media, analytics, affiliate, or commerce partners may be considered a "sale," "sharing," or use for "targeted advertising" under some state privacy laws, even when no money is exchanged.

During the preceding 12 months, we may have sold or shared the following categories for advertising, personalization, referral attribution, or analytics, depending on the technologies enabled and your choices:

Category	Types of recipients
Identifiers, such as cookie IDs, device IDs, IP address, and hashed contact information	Advertising networks, social-media platforms, analytics providers, affiliate platforms, and commerce technology providers
Commercial information, such as products viewed, cart activity, purchases, and discount or referral activity	Advertising networks, social-media platforms, analytics providers, affiliate platforms, and commerce technology providers
Internet or other electronic network activity	Advertising networks, social-media platforms, analytics providers, affiliate platforms, and commerce technology providers
Approximate geolocation and inferences about interests	Advertising networks, social-media platforms, analytics providers, affiliate platforms, and commerce technology providers

We did not knowingly sell or share sensitive personal information during the preceding 12 months. We do not knowingly sell or share the personal information of anyone under 16 years of age.

Separately, during the preceding 12 months, we may have disclosed the following categories of personal information for business purposes, depending on how a person interacted with us:

Category disclosed for a business purpose	Categories of recipients
Identifiers and California Customer Records information, such as name, contact details, account information, payment-related information, and online identifiers	Cayley Enterprises, Inc.; Shopify and other commerce platforms; payment and financing providers; hosting, security, fraud-prevention, customer-support, email, professional-adviser, and compliance providers
Commercial information, such as products viewed, cart activity, purchases, returns, exchanges, warranties, crash-replacement requests, gift cards, discounts, and service history	Cayley Enterprises, Inc.; commerce platforms; payment and financing providers; fulfillment providers; carriers; manufacturers and suppliers; testing, return-management, customer-support, analytics, marketplace, insurance, and accounting providers
Internet or other electronic network activity	Hosting, security, fraud-prevention, website-functionality, analytics, advertising, affiliate, and commerce technology providers, subject to applicable privacy choices
Geolocation information, including shipping and billing locations and approximate location inferred from an IP address	Commerce, payment, fraud-prevention, tax, fulfillment, shipping, localization, analytics, and advertising providers, subject to applicable privacy choices
Audio, electronic, or visual information, such as customer-service communications and photos, audio, or videos a person submits	Customer-support, communications, review, content-hosting, advertising, security, and professional-service providers
Professional or program-eligibility information	Affiliate, ambassador, sponsorship, program-administration, payment, tax, hosting, communications, and professional-adviser providers
Inferences about preferences or interests	Commerce, personalization, analytics, advertising, affiliate, and social-media providers, subject to applicable privacy choices
Sensitive personal information used for permitted business purposes, such as account credentials and limited payment information	Commerce, payment, account-authentication, security, fraud-prevention, and compliance providers

To opt out, use the Your Privacy Choices link or icon on the Services or send a GPC signal from your browser. Your opt-out will apply to the browser or device from which you submit it unless you also provide information that allows us to associate the request with your account. You may need to repeat the choice on another browser or device or after deleting cookies.

10. Marketing, Discounts, Promotions, and Financial Incentives

Email and other marketing

You can unsubscribe from marketing emails using the link in the message. You may still receive non-marketing communications about your account, orders, returns, exchanges, warranties, crash replacement, safety notices, recalls, or requests. Trail One does not currently operate a marketing text-message program. Providing a telephone number for an order, delivery, warranty request, account, or support matter does not authorize marketing text messages.

If you request a back-in-stock or similar product notification, we use the contact information you provide to send that requested notification and related service messages. Any broader marketing choice is presented separately where required.

Notice of financial incentives and price or service differences

We may offer discounts, coupons, store credits, early access, review incentives, promotion entries, affiliate or ambassador opportunities, or other benefits in connection with the collection or retention of personal information. Examples may include a first-purchase discount for joining an email list, an incentive for submitting an honest review or optional photo or video, an affiliate commission, a product or discount for an eligible ambassador, or a promotion that requires contact or eligibility information. The specific benefit, eligibility criteria, duration, and material terms will be presented with the offer or in applicable program rules.

Depending on the offering, we may collect identifiers and contact information, commercial information, user content, preferences, internet or device activity, social-media or professional information, program eligibility information, and engagement with the offering. We use that information to administer the offering, communicate with participants, prevent fraud, measure performance, improve products and marketing, and maintain the customer or program relationship.

We estimate the value of information associated with an offering by considering the reasonably anticipated revenue or engagement generated by the relationship, the value of honest feedback or authorized content, the costs of providing and administering the benefit, the volume and nature of the information collected, and the expenses of maintaining the program. The value of the benefit is reasonably related to our good-faith estimate of the value of the information and relationship to Trail One.

Participation is voluntary. You opt in by completing the affirmative enrollment, application, review, submission, or entry process after receiving the applicable notice. You may withdraw prospectively by unsubscribing from marketing, discontinuing participation, or using our Contact Us page. Withdrawal may end eligibility for a benefit that depends on continued participation or the information involved, but it will not affect a completed transaction, an authorized use that cannot practicably be recalled, or rights and obligations that survive under applicable terms. We will not unlawfully discriminate against you for exercising a privacy right.

An incentive for a review is never conditioned on a positive sentiment. Reviews and endorsements must reflect honest opinions and must disclose any material connection, discount, free product, commission, or other benefit as required by law.

11. Data Retention

We retain personal information for no longer than reasonably necessary for the purposes described in this Policy, including to provide Services, complete transactions, honor returns, warranties, and crash-replacement commitments, investigate compatibility and product-safety matters, manage recalls and corrective actions, administer gift cards and program benefits, maintain suppression and consent records, document content and likeness permissions, secure accounts, prevent fraud, comply with tax and accounting requirements, resolve disputes, and establish or defend legal claims.

When setting retention periods, we consider the nature and sensitivity of the information, the volume and context of processing, the relationship with you, operational needs, contractual commitments, applicable limitation periods, and legal requirements. We then delete, de-identify, or securely isolate the information, subject to backup cycles and legal holds.

12. Security

We use administrative, technical, and physical safeguards designed to protect personal information, taking into account the nature of the information and the risks of processing. No system, transmission, or storage method is completely secure, and we cannot guarantee absolute security. You are responsible for using a unique password, protecting your account credentials, and notifying us if you suspect unauthorized account activity.

13. U.S. State Privacy Rights

Depending on where you live and subject to legal exceptions, you may have the right to:

confirm whether we process your personal information and access or obtain a copy of it;
request correction of inaccurate personal information;
request deletion of personal information;
obtain certain information in a portable format;
opt out of sale, sharing, targeted advertising, or certain profiling;
receive information about and opt out of certain uses of automated decisionmaking technology for significant decisions, where applicable;
limit certain uses or disclosures of sensitive personal information;
request a list of specific third parties or categories of third parties to which we disclosed personal information, where required;
withdraw consent to processing that relies on consent; and
appeal our refusal to act on a request.

We will not unlawfully discriminate against you for exercising a privacy right. We may offer a different price or benefit where a lawful discount or financial-incentive program applies and the difference is reasonably related to the value of the information. Section 10 describes these offerings generally, and additional terms are presented when you enroll.

How to submit a request

You may submit a request by:

using our Contact Us page and entering Privacy Request in the subject line or at the beginning of the message; or
writing to Trail One LLC d/b/a Trail One Components, Attn: Privacy, 3225 Grande Vista Drive, Newbury Park, California 91320, United States.

For an opt-out of sale, sharing, or targeted advertising, use Your Privacy Choices on the Services or a GPC signal. We will honor an opt-out preference signal where legally required.

We may need to verify your identity before completing certain requests. Verification may require matching information you provide with our records and, for higher-risk requests, additional steps. We will use verification information only for verification, security, fraud prevention, and legal compliance. If we cannot verify a request, we may deny it and explain why. We may also decline or limit a request where an exception applies, such as when information is needed to complete a transaction, provide a requested service, honor a warranty or crash-replacement commitment, address product safety, protect security, comply with law, or establish or defend legal claims.

You may use an authorized agent where permitted by law. We may require proof that the agent is authorized and may ask you to verify your identity or confirm the request directly. Parents or legal guardians may submit requests concerning a child as permitted by law.

If we deny a request and your law provides an appeal right, reply to our decision or submit the online contact form and enter Privacy Appeal at the beginning of the message. We will explain the result of the appeal and, where required, how to contact your state attorney general.

Additional California disclosures

California residents may request the categories and specific pieces of personal information we collected, the categories of sources, our purposes, and the categories of third parties to which we disclosed, sold, or shared information. During the preceding 12 months, we may have collected the following categories specified by California law, depending on how a person interacted with us:

California category collected	Examples
Identifiers	Name, aliases, postal address, email address, telephone number, account or customer identifier, social-media handle, IP address, cookie and device identifiers
Personal information described in California Civil Code section 1798.80(e)	Name, signature where provided, physical characteristics or descriptions included in submitted content, address, telephone number, payment-related information, and affiliate or program-eligibility information
Commercial information	Purchase, return, exchange, warranty, crash-replacement, gift-card, discount, customer-service, product-view, search, cart, referral, and preference history
Internet or other electronic network activity	Browsing and search history on the Services, clicks, scrolling, ad interactions, device data, and interactions with the Services
Geolocation data	Shipping and billing locations and approximate location inferred from an IP address; precise location only if a person knowingly enables a feature that requests it
Audio, electronic, visual, or similar information	Customer-service communications and photos, audio, videos, or other content a person submits
Professional or employment-related information	Occupation, professional qualifications, certifications, audience, social profiles, affiliate or ambassador application information, and related program communications
Inferences	Bicycle, component, riding, compatibility, product, and style interests; likely interests; and customer segments
Sensitive personal information	Account log-in information with credentials, limited payment information, and precise geolocation if a person enables it

We do not necessarily collect every example listed from every person. Sections 3 through 10 describe our categories, sources, purposes, recipients, financial incentives, and two separate preceding-12-month lists for sale or sharing and disclosure for a business purpose. We do not use or disclose sensitive personal information for purposes that require a right to limit under California law, unless we provide that right.

California's "Shine the Light" law may permit residents to request information about certain disclosures of personal information to third parties for their own direct-marketing purposes. Submit the online contact form and enter California Shine the Light Request at the beginning of the message, or mail the request to the address in Section 17.

14. Rights Outside the United States

If privacy law in the European Economic Area, United Kingdom, Switzerland, Canada, or another jurisdiction applies to our processing, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, and complain to a regulator.

Where required, our legal bases for processing are:

Purpose	Legal basis
Process purchases, provide requested Services, manage accounts, returns, exchanges, warranties, crash-replacement requests, and customer support	Performance of a contract or steps requested before entering a contract
Secure the Services, prevent fraud, improve operations, maintain records, personalize non-advertising content, and establish or defend claims	Our legitimate interests, balanced against your rights
Send marketing, use non-essential tracking, or process certain sensitive information	Consent, where consent is required
Meet tax, accounting, consumer-protection, product-safety, law-enforcement, and other legal duties	Compliance with legal obligations

You may object to processing based on legitimate interests, and you may withdraw consent at any time without affecting processing that occurred before withdrawal. We may process information in the United States and other countries that may not provide the same protections as your home jurisdiction. Where required, we use approved contractual safeguards or another lawful transfer mechanism. You may contact us for more information about applicable safeguards.

15. Children's Privacy

The Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information online from children under 13 without legally required parental consent, and we do not knowingly sell or share personal information of anyone under 16. If you believe a child has provided personal information to us in violation of this section, contact us so we can investigate and take appropriate action.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in law, technology, the Services, or our practices. The "Last updated" date shows when it was most recently revised. If a change is material, we will provide additional notice as required by law. Unless stated otherwise, changes apply prospectively from the effective date.

17. Contact Us

For general privacy questions or complaints, use our Contact Us page or write to:

Trail One LLC d/b/a Trail One Components
Attn: Privacy
3225 Grande Vista Drive
Newbury Park, California 91320, United States

To exercise a privacy right, use one of the designated methods in Section 13. Those methods may differ from our ordinary customer-service channels.