Security Practices
- All data is encrypted in transit using TLS 1.2 or higher
- Passwords are hashed using bcrypt — we never store plaintext passwords
- Session cookies are HTTP-only, Secure, and SameSite=Strict
- You can request deletion of your data at any time by emailing [email protected]
- We do not sell your personal data to third parties
- We do not use your data for advertising or profiling
Data Collected
| Data type | Purpose | Shared |
|---|---|---|
| Name | Account creation and order identification | |
| Email address | Account login, transactional emails, and order confirmations | |
| Phone number | SMS lead notifications (dealer accounts only) | |
| Approximate location (zip/postal code) | Finding nearby EMPI Authorized Dealers | |
| App activity (pages visited, features used) | Service improvement and security | |
| Cart and order data | Processing quote requests and order history |
Data NOT Collected
| Data type | Purpose | Shared |
|---|---|---|
| Precise GPS location | We only use zip/postal codes you enter manually | |
| Financial or payment card data | Payments are processed by third-party providers only | |
| Health or biometric data | Not applicable to this service | |
| Contacts or call logs | Not applicable to this service |
Data Sharing
| Data type | Purpose | Shared |
|---|---|---|
| Google Maps Platform | Zip code geocoding and nearby dealer search only; governed by Google's Privacy Policy | |
| Twilio | SMS delivery to dealer accounts only; governed by Twilio's Privacy Policy | |
| Third-party advertisers | We do NOT share data with advertisers |
How to Delete Your Account & Data
To request deletion of your account and all associated data, email [email protected] with the subject line "Account Deletion Request" from your registered email address. We will permanently delete your account within 30 days, except data we are required to retain by law (such as transaction records for tax purposes).