Privacy Rights (GDPR & California)

Severe Auto is a brand of Domus Solis LLC, 7500 Golden Triangle Rd, Eden Prairie, MN 55344 (“we,” “us,” or “our”). This page describes privacy rights that may apply to you under the EU/UK General Data Protection Regulation (GDPR) and California consumer privacy laws (including the CCPA as amended by the CPRA). It supplements our Privacy Policy.

Depending on where you live and what information we hold about you, some rights below may not apply in every case. We will respond in accordance with applicable law.

1. How to Submit a Request

To exercise any privacy right described on this page — including access to your records, correction (remediation), deletion, opt-out of certain processing, or questions and concerns — submit a Compliance Request through our Support portal:

http://support.localhost:3000/tickets/new?type=compliance

Create a Support account (or sign in), then open a Compliance Request. Include enough detail for us to verify your identity and locate your information (for example, the email address or order details associated with your request, and which right you are asserting). We may ask for additional information solely to confirm you are the person making the request or an authorized agent. You can track replies in your Support portal.

We aim to respond within the timeframes required by law (generally within 30–45 days, with extensions where permitted). If we cannot fulfill a request, we will explain why, subject to legal limitations.

2. Rights Under GDPR (EEA / UK and similar)

If the GDPR (or comparable UK data protection law) applies to you, you may have the right to:

Access — request a copy of personal data we process about you (a subject access / record request).
Rectification — ask us to correct inaccurate or incomplete personal data (remediation).
Erasure — request deletion of personal data in certain circumstances (the “right to be forgotten”).
Restriction — ask us to limit processing in certain situations.
Portability — receive personal data you provided to us in a structured, commonly used, machine-readable format, where technically feasible.
Object — object to certain processing, including processing based on legitimate interests or for direct marketing.
Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
Complain — lodge a complaint with your local supervisory authority if you believe our processing violates the GDPR.

Where we process personal data, the legal bases may include performance of a contract (e.g. fulfilling an order), legitimate interests (e.g. site security and analytics), consent (where required), and legal obligations.

3. Rights Under California Law (CCPA / CPRA)

If you are a California resident, you may have the right to:

Know / access — request the categories and specific pieces of personal information we have collected about you, the sources, purposes, and categories of third parties with whom we disclose it.
Delete — request deletion of personal information we collected from you, subject to legal exceptions (for example, completing a transaction or complying with law).
Correct — request correction of inaccurate personal information we maintain about you.
Opt out of sale or sharing — opt out of the “sale” or “sharing” of personal information as those terms are defined under California law (including sharing for cross-context behavioral advertising, where applicable).
Limit use of sensitive personal information — where we collect sensitive personal information as defined by California law, request that we limit its use and disclosure to purposes permitted by statute.
Non-discrimination — we will not discriminate against you for exercising your California privacy rights.

Do we “sell” personal information? We do not sell personal information for money. Like many websites, we may use analytics and advertising technologies that could be considered a “sale” or “sharing” under California law in some interpretations. You may submit an opt-out request via support.severe-auto.com. We do not knowingly sell or share the personal information of consumers under 16.

Authorized agents may submit requests on behalf of California residents; we may require proof of authorization and identity verification.

4. Categories of Information & Retention

Depending on how you interact with us, we may process identifiers (such as name or email if you contact us or place an order), commercial information (orders), internet / device activity (analytics), and communications you send us. Payment card data for merch purchases is handled by our payment processor and is not stored on our servers.

We retain personal information only as long as reasonably necessary for the purposes described in our Privacy Policy, to comply with legal obligations, or to resolve disputes — then delete or de-identify it.

5. Support Account Portal

You do not need an account to browse the main Severe Auto site. Privacy and compliance requests are handled through the Support portal at support.localhost:3000, where you can:

Register with an email and password and submit a Compliance Request
Track ticket status and replies from our team
Provide additional information and attachments as needed

Self-serve machine-readable (e.g. JSON) export and one-click account deletion from a marketing-site login are not available yet; use a Compliance Request for those actions in the meantime.

6. International Transfers

Domus Solis LLC is based in the United States. If you access our services from outside the U.S., your information may be processed in the United States and other countries that may not provide the same level of data protection as your home country. Where required, we will use appropriate safeguards for cross-border transfers.

7. Changes

We may update this page from time to time. The “Last updated” date will change when we do. Significant changes may also be noted in our Privacy Policy.

Domus Solis LLC · Severe Auto · 7500 Golden Triangle Rd, Eden Prairie, MN 55344 · Privacy requests: support.severe-auto.com