Privacy policy
Fast-Trac Industries Inc.
Effective date: August 25, 2026
Last updated: August 25, 2026
This Privacy Policy explains what personal information Fast-Trac Industries Inc. (“Fast-Trac,” “we,” “us,” or “our”) collects when you visit or buy from fasttractraction.com (the “Site”), how we use and share it, how long we keep it, and the choices and rights you have over it.
By using the Site, you acknowledge that you have read this Privacy Policy. Where the law requires your consent for a particular activity, we will ask for it.
1. Quick summary
- We collect the information you give us when you order, create an account, subscribe to email, write a review, or chat with us.
- We automatically collect information about your device and how you use the Site, including session recordings and heatmaps — recordings of the pages you view, your mouse movements, clicks, scrolling, and taps — which we use to find and fix problems with the Site.
- We use advertising and analytics technologies from Google, Microsoft, and Meta. Under some state privacy laws, this counts as “selling” or “sharing” personal information for targeted advertising. You can opt out — see Section 8.
- We do not sell your personal information for money, and we do not send marketing text messages.
- We do not knowingly collect information from children under 16.
2. Information we collect
2.1 Information you give us
| Category | Examples |
|---|---|
| Identifiers & contact information | Name, billing and shipping address, email address, phone number, account username and password |
| Order and transaction information | Products purchased, order value, order history, discount codes used, returns and exchanges, size and fitment details you provide (sled make/model/year, track make, lug height) |
| Payment information | Payment card details, billing address. Card numbers are collected and processed directly by our payment processors — Fast-Trac does not store full card numbers. |
| Customer support & communications | Messages you send us by email or through live chat, phone call notes, warranty and exchange requests |
| User-generated content | Product reviews, ratings, review photos and videos, questions, and any content you post |
| Marketing preferences | Email subscription status, consent records, promotional entries and prize claims |
| Dealer & wholesale information | For dealer or B2B accounts: business name, resale certificate or tax exemption documentation, and account tier |
2.2 Information collected automatically
| Category | Examples |
|---|---|
| Device & connection data | IP address, browser type and version, operating system, device type, screen resolution, language, and approximate location derived from IP address (city/region level) |
| Usage data | Pages viewed, time on page, referring URL, exit pages, search terms used on the Site, products viewed, cart activity, and navigation paths across pages and across visits |
| Session recordings & behavioral data | Recordings and reconstructions of your session on the Site, including mouse movements, clicks and taps, scroll depth, rage clicks, form field interaction (which fields you engaged with — not the payment card values you type), and heatmaps aggregating this behavior across visitors |
| Advertising & attribution data | Click identifiers and campaign parameters from ads you clicked (for example Google, Microsoft/Bing, Meta, and YouTube), UTM parameters, and conversion events used to measure ad performance |
| Cookies & similar technologies | Cookies, pixels, tags, local storage, and SDKs — see Section 6 |
2.3 Information from other sources
We may receive information about you from our service providers and advertising partners — for example, aggregated ad performance and conversion data from Google, Microsoft, and Meta; delivery and tracking status from our shipping partners; fraud and risk signals from Shopify; and review submissions from our reviews platform.
3. How we use your information
- To fulfill your order — process payment, verify fitment, ship your products, provide tracking, handle returns, exchanges, and warranty claims.
- To provide customer support — answer questions about sizing, installation, and orders by email or live chat.
- To operate and secure the Site — maintain accounts, remember your cart, prevent fraud and abuse, and protect against security incidents.
- To improve the Site and our products — analyze how visitors navigate the Site, identify pages and steps where people get stuck, test different page layouts and content (A/B testing), and use session recordings and heatmaps to diagnose usability problems.
- To personalize your experience — show relevant products and content, tailor landing pages and on-site messaging based on how you arrived at the Site and what you have viewed.
- To market to you — send promotional email if you have subscribed, send abandoned-cart and post-purchase email, and show you advertising on other websites and platforms.
- To measure advertising — understand which ads and channels drive visits and orders, and report conversions back to advertising platforms.
- To comply with law — meet tax, accounting, and recordkeeping obligations, respond to lawful requests, and enforce our Terms of Service.
4. Legal bases (EEA and UK visitors)
If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases: performance of a contract (to fulfill orders and provide support); legitimate interests (to secure and improve the Site, prevent fraud, and measure our marketing, balanced against your rights); consent (for marketing email and for non-essential cookies, session recording, and advertising technologies, which you may withdraw at any time); and legal obligation (tax and recordkeeping).
Fast-Trac is based in the United States. If you access the Site from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. Where required, we rely on Standard Contractual Clauses or another approved transfer mechanism through our service providers.
5. Service providers and partners we share information with
We do not sell your personal information for money. We share it with the service providers below so they can perform services for us, and with advertising partners as described in Section 5.3. Each provider is permitted to use the information only to provide services to us, except where noted.
5.1 Store platform, payments, and fulfillment
| Provider | What it does | Information involved |
|---|---|---|
| Shopify Inc. — Privacy | Hosts the Site, processes checkout and payments, stores order and customer records, provides fraud analysis | All order, account, payment, and browsing data on the Site |
| Shopify Payments / Shop Pay, PayPal, and other payment gateways enabled at checkout | Process payments; Shop Pay may store your details for accelerated checkout | Payment card details, billing address, order amount |
| Affirm, Inc. — Privacy | Offers pay-over-time financing at checkout. Affirm acts as an independent controller of the information you provide to it for a financing application. | Order value, cart contents, and any application information you submit to Affirm |
| ShipStation (Auctane) — Privacy | Generates shipping labels, manages fulfillment and tracking | Name, shipping address, phone, email, order contents |
| Carriers (USPS, UPS, FedEx, and others) | Deliver your order and provide tracking | Name, shipping address, phone, email |
| Rokt / AfterSell — Privacy | Presents post-purchase offers on the order confirmation page | Order contents, order value, email, and limited profile signals used to select offers |
5.2 Analytics, optimization, and customer experience
| Provider | What it does | Information involved |
|---|---|---|
| Ariven (ariven.ai) | Conversion analytics and on-site personalization. Collects pseudonymous on-site behavior to help us understand and improve the shopping experience, including across repeat visits. Also runs A/B tests and personalizes pages, offers, and navigation — see Section 5.5. Ariven is not configured to collect direct identifiers such as your name, email address, or payment details through these behavioral events. | Pages viewed, clicks, scrolls, cart activity, and purchase events, tied to a randomly generated visitor identifier rather than to your name or contact details. Retention is tiered — see Section 10. |
| Google Analytics 4 (Google LLC) — Privacy | Website and e-commerce analytics — traffic, audience, and conversion reporting | Device and usage data, IP address (truncated), page and product views, purchase events, and a Google analytics identifier |
| Microsoft Clarity (Microsoft Corporation) — Privacy | Session recording and heatmaps. Records your session on the Site and aggregates click, scroll, and rage-click behavior. Microsoft may use the data it collects for its own purposes as described in its privacy statement. | Session recordings, device and usage data, click and scroll behavior, page content rendered during your visit |
| VWO (Wingify) — Privacy | A/B testing and on-site experimentation | Device and usage data, test variation assigned, and a visitor identifier |
| Chatra — Privacy | Live chat on the Site | Chat transcripts, name and email if you provide them, page you were viewing, device data |
| Judge.me — Privacy | Collects, stores, and displays product reviews; sends review request emails | Name (as displayed), email, order details, review text, and review photos or videos you upload |
| Shopify app partners installed on the Site, including vehicle fitment lookup and merchandising apps | Provide specific storefront features such as sled make/model/year fitment search | The inputs you provide to that feature and related device and usage data |
Purchase events sent to Klaviyo. When you complete a purchase, we send a purchase event from Ariven to Klaviyo so that Klaviyo stops marketing automations — such as abandoned-cart reminders — from reaching you after you have already bought. This matters most when you check out using a different email address than the one we have on file, which would otherwise leave those reminders running against the wrong address. This is a suppression measure taken in your interest, not an advertising disclosure.
We do not sell the information Ariven collects.
5.3 Email marketing and advertising
| Provider | What it does | Information involved |
|---|---|---|
| Klaviyo — Privacy | Sends marketing and automated email (welcome, abandoned cart, post-purchase, win-back), manages lists and segments, and attributes revenue to email | Email address, name, order and browsing history on the Site, email engagement (clicks, subscription status), and profile attributes we assign |
| Privy — Privacy | On-site pop-ups and email capture forms | Email address, device and usage data, form interaction |
| Google (Google Ads, Google Merchant Center, YouTube) — Privacy | Runs search, shopping, display, and video advertising; measures conversions; builds remarketing audiences | Advertising identifiers and cookies, pages and products viewed, purchase and conversion events, and hashed email where enhanced conversions are enabled |
| Microsoft Advertising (Bing) — Privacy | Runs search advertising and measures conversions via the UET tag | Advertising identifiers and cookies, pages and products viewed, purchase and conversion events |
| Meta Platforms (Facebook, Instagram) — Privacy | Runs advertising and measures conversions through the Meta Pixel and Conversions API; builds custom and remarketing audiences | Advertising identifiers and cookies, pages and products viewed, purchase and conversion events, and hashed contact information (email, phone, name) sent through the Conversions API |
What this means under state privacy law. When these advertising technologies read cookies and identifiers from your browser and receive information about your activity on the Site, that activity may be treated as a “sale” or a “share” of personal information for cross-context behavioral advertising under the California Consumer Privacy Act, and as “targeted advertising” under other state privacy laws. In the past twelve months, the categories we have disclosed for these purposes are: identifiers, internet or network activity, commercial information, and inferences. You have the right to opt out — see Section 8. We do not knowingly sell or share the personal information of consumers under 16 years of age.
5.4 Other disclosures
- Legal and safety. We may disclose information if required by law, subpoena, or court order, or where we believe disclosure is necessary to investigate fraud, protect our rights or property, enforce our Terms of Service, or protect the safety of any person.
- Professional advisors. Accountants, auditors, insurers, and attorneys, under confidentiality obligations.
- Business transfer. If Fast-Trac is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such transfer and of any material change to this Policy that results.
5.5 Testing and personalization
You may not see the same version of this Site that another visitor sees. Using Ariven and VWO, we run A/B tests and personalize the experience, which means the pages, offers, and navigation shown to you may differ from what someone else is shown. We do this to work out which version helps riders find the right product more easily.
These decisions are based on pseudonymous behavioral and traffic-source data — such as which pages you have viewed and how you arrived at the Site — not on your name, contact details, or payment information.
6. Cookies, pixels, and similar technologies
We and our providers use cookies, pixels, tags, and browser local storage. They fall into four categories:
| Category | Purpose | Examples |
|---|---|---|
| Strictly necessary | Required to run the Site, keep you signed in, remember your cart, process checkout, and prevent fraud. These cannot be turned off. |
_session_id, _secure_session_id, cart, cart_sig, secure_customer_sig, storefront_digest, _cmp_a, _tracking_consent
|
| Analytics & performance | Measure traffic, understand how the Site is used, record sessions, and diagnose problems. |
_shopify_y, _shopify_s, _shopify_sa_t, _shopify_sa_p, _ga, _ga_<id>, _gid (Google Analytics), _clck, _clsk, CLID (Microsoft Clarity), _p_id_client and _st_ctx (Ariven — see below), _vwo_uuid, _vis_opt_* (VWO) |
| Functional & preferences | Remember choices such as language, region, saved fitment, pop-up dismissal, and chat state. |
localization, keep_alive, Privy and Chatra identifiers, _sf_cfg (Ariven — see below) |
| Marketing & advertising | Deliver and measure advertising on other sites and platforms, and build remarketing audiences. |
_gcl_au, _gcl_aw (Google Ads), _uetsid, _uetvid (Microsoft Advertising), _fbp, fbc (Meta), Klaviyo __kla_id
|
Cookie names and lifetimes change as providers update their technology; this table describes the categories in use rather than a guaranteed-complete list.
Ariven cookies. Ariven sets three first-party cookies, each lasting up to 12 months:
| Cookie | Purpose | Duration |
|---|---|---|
_st_ctx |
Recognizes a returning visitor across sessions | Up to 12 months |
_p_id_client |
Pseudonymous visitor identifier used for analytics | Up to 12 months |
_sf_cfg |
Remembers which site experience a visitor should see | Up to 12 months |
Managing cookies. Where a cookie banner or preference control is presented on the Site, you can set your preferences there and change them at any time. You can also block or delete cookies in your browser settings, and most browsers offer a “do not track” setting. Blocking strictly necessary cookies will prevent checkout from working. We honor the Global Privacy Control (GPC) signal as a valid opt-out of sale/sharing and targeted advertising where the law requires it.
7. Session recording — specific notice
We want to be explicit about this, because it is not obvious from ordinary browsing:
Your visits to this Site may be recorded. Using technology from Microsoft Clarity, we capture a reconstruction of your session — the pages you viewed, your mouse movements and taps, what you clicked, how far you scrolled, and which form fields you interacted with. We use these recordings only to find and fix problems with the Site and to improve the shopping experience.
Our other analytics providers work differently. Ariven does not record or replay your session. It records discrete behavioral events — pages viewed, clicks, scrolls, cart activity, and purchase events — tied to a randomly generated visitor identifier, rather than a reconstruction of your screen.
Session recording is configured to mask sensitive input, including payment card numbers, passwords, and other fields marked sensitive, so those values are not captured in the recording. Recordings are not used to make decisions about you individually, and we do not use them to contact you.
If you do not want your sessions recorded, you can opt out through the cookie or privacy controls on the Site, by enabling Global Privacy Control in your browser, by using your browser's tracking protection, or by contacting us at the address in Section 12. Microsoft also offers its own opt-out for Clarity at Microsoft's privacy statement.
8. Your choices
- Marketing email. Click “unsubscribe” at the bottom of any marketing email, or contact us. You will still receive transactional messages about orders you place.
- Text messages. We do not send marketing text messages and do not collect phone numbers for that purpose.
-
Opt out of targeted advertising and of the sale/sharing of your information. You can do any of the following, and we will honor it:
- Enable Global Privacy Control in a supporting browser or extension — this is treated as a valid opt-out request for the browser you use it in.
- Use the cookie or privacy preference control on the Site to reject marketing cookies.
- Email us at info@fasttractraction.com with the subject line “Do Not Sell or Share My Personal Information.”
- Adjust settings directly with the platforms: Google Ads Settings, Microsoft ad settings, Meta ad preferences, and the industry tools at optout.aboutads.info and optout.networkadvertising.org.
- Session recording. See Section 7.
- Account information. Log in to your account to review or update your addresses and details, or contact us.
9. Your privacy rights
9.1 U.S. state privacy rights
Depending on where you live, you may have the right to:
- Know and access the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the parties we disclosed it to;
- Correct inaccurate personal information;
- Delete personal information we have collected from you, subject to exceptions (for example, we must keep records of completed transactions for tax and warranty purposes);
- Obtain a portable copy of your information;
- Opt out of the sale or sharing of your personal information and of targeted advertising and profiling; and
- Not be discriminated against for exercising these rights. We will not deny you products, charge you a different price, or provide a lesser quality of service because you exercised a privacy right.
These rights are available to residents of states with comprehensive privacy laws in effect, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. The exact rights available vary by state.
Sensitive personal information. We do not collect or process sensitive personal information (such as government identifiers, precise geolocation, health, biometric, or account credentials beyond your Site login) for the purpose of inferring characteristics about you.
9.2 EEA and UK rights
If you are in the EEA or the UK, you have the rights to access, rectify, erase, restrict, and object to processing of your personal data, the right to data portability, the right to withdraw consent at any time, and the right to lodge a complaint with your local supervisory authority.
9.3 How to make a request
Email info@fasttractraction.com with the subject line “Privacy Request,” or write to us at the address in Section 12. Tell us what right you want to exercise. We will verify your identity by matching the information in your request against our records — typically the email address and order details associated with your purchases — before acting on it.
We will respond within 45 days, and may extend once by an additional 45 days where reasonably necessary, in which case we will tell you. There is no charge unless a request is manifestly unfounded or excessive.
Authorized agents. You may use an authorized agent to submit a request on your behalf. We may ask the agent for written proof of authorization and may ask you to verify your identity directly.
Appeals. If we decline your request and you live in a state that provides an appeal right, you may appeal by replying to our decision with the subject line “Privacy Appeal.” We will respond to the appeal within 45 days. If we deny the appeal, you may contact your state Attorney General.
10. How long we keep information
| Information | Retention |
|---|---|
| Order and transaction records | 7 years, for tax, accounting, warranty, and dispute purposes |
| Account information | For as long as your account is active, then up to 3 years after last activity |
| Email marketing profiles | Until you unsubscribe, then retained in suppression form only, so we do not re-contact you |
| Session recordings | Typically 30–90 days, per each provider's retention settings |
| Analytics and advertising data (Google, Microsoft, Meta) | Typically 14–26 months, per each provider's retention settings; aggregated reporting may be kept longer |
|
Ariven — raw behavioral events (clicks, scrolls, pageviews, pixel events) |
Up to 13 months, then automatically deleted |
|
Ariven — derived session, journey, and conversion records (tied to the pseudonymous visitor identifier, not to your name) |
Up to 25 months, then automatically deleted |
| Ariven — aggregated summaries | Retained longer, because they cannot be reconstructed once the underlying records are deleted. These are aggregate figures and are not used to identify or single out an individual visitor. |
| Customer support and chat records | Up to 3 years |
| Product reviews | Indefinitely while published, unless you ask us to remove yours |
11. Security, children, and changes
Security. The Site uses TLS encryption in transit. Payment card data is handled by PCI-DSS compliant processors; Fast-Trac does not store full card numbers. We limit access to personal information to people who need it to do their jobs. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Children. The Site is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it. By using the Site you represent that you are the age of majority in your state or province of residence.
Changes to this Policy. We may update this Policy. We will change the “Last updated” date at the top, and if the changes are material we will provide more prominent notice — such as a notice on the Site or an email to subscribers — before they take effect.
12. Contact us
To access, correct, or delete your information, to opt out of sale or sharing, to register a complaint, or for any other question about this Policy, contact our Privacy Officer:
Fast-Trac Industries Inc.
Attn: Privacy Officer
Mailing address — send written privacy requests here:
PO Box 554
Wauconda, IL 60084
United States
Physical address:
1001 N Old Rand Rd, Ste 103B
Wauconda, IL 60084
United States
Email: info@fasttractraction.com
Phone: (800) 497-3485