C10MT Global Data Protection Standards

1. Legal Framework and Jurisdiction

At C10MT ("we," "us," or "our"), based in Dallas, Texas, USA, we are committed to protecting your personal data with the highest integrity. This Privacy Policy is designed to comply with global privacy standards, including but not limited to:

  • The General Data Protection Regulation (GDPR) for EU/EEA residents.
  • The California Consumer Privacy Act (CCPA) and CPRA for California residents.
  • The Brazilian General Data Protection Law (LGPD).
  • The UK Data Protection Act (DPA 2018) and UK GDPR.
  • Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
  • Australia’s Privacy Act 1988.
  • Children’s Online Privacy Protection Act (COPPA) in the United States.
  • Google Ads and AdSense Publisher Policies.

Data collected through C10MT may be processed in the United States or other jurisdictions. Where data is transferred internationally, we implement safeguards such as Standard Contractual Clauses (SCCs) to ensure compliance with GDPR and equivalent frameworks. Any disputes arising under this Privacy Policy shall be governed by the laws of the State of Texas, USA, without regard to conflict of law principles.

2. Categories of Data Collected

We collect and process data to provide superior technical restoration guides and ensure compliance with global privacy standards. This includes:

  • Voluntary Information: Name, email address, and vehicle specifications (Year/Model) provided via our Technical Inquiry Form.
  • Automated Metadata: IP addresses, browser fingerprints, device types, and operating systems collected via log files.
  • Engagement Data: Clickstream patterns, session durations, and interaction heatmaps provided by Microsoft Clarity and Google Analytics.
  • Security Data: Bot-detection signals processed by Cloudflare Turnstile to ensure site integrity.
  • Advertising & Referral Data: Information on referring domains, ad impressions, and click-through rates collected to measure campaign effectiveness.
  • Preference & Consent Records: Cookie consent choices, language preferences, and opt-in/opt-out selections stored to respect user privacy decisions.
  • Communication Records: Copies of inquiries, support requests, and correspondence maintained to provide accurate technical assistance and improve service quality.

All collected data is used exclusively for technical support, site optimization, and community engagement. We do not sell personal information to third parties and implement safeguards to protect your privacy across all categories of data.

3. Cookies and Tracking Technologies

Our v4.6.1 CookieConsent system implements a "Strict Privacy First" architecture. Cookies and tracking technologies are classified as follows:

A. Essential Cookies (Strictly Necessary): These are vital for site security (Cloudflare Turnstile), session stability, and remembering your privacy settings. Without these, the site cannot function securely.

B. Analytical & Marketing Cookies (Optional): These help us measure performance (Google Analytics, Microsoft Clarity) and serve relevant automotive ads (Google AdSense, Mgid). These are disabled by default and only activated upon your explicit "Accept" action.

C. Functional Cookies: These enhance usability by remembering preferences such as language, display options, and saved form inputs. They improve your browsing experience but are not strictly required.

D. Performance & Optimization Cookies: These track load times, error logs, and responsiveness to help us improve site speed and reliability.

E. Third-Party Tracking Technologies: Certain embedded resources (e.g., YouTube videos, social media widgets) may set their own cookies. We do not control these cookies, but you can manage them via your browser settings.

Retention: Essential cookies typically expire within 24 hours to 30 days, while consent records may last up to 365 days. Analytical cookies follow the retention policies of their respective providers (e.g., Google Analytics: 26 months).

Management: You may revoke consent or adjust preferences at any time via our Cookie Management Page. You can also configure your browser to block or delete cookies. Please note that disabling essential cookies may affect site functionality.

4. Google AdSense & Personalized Advertising

Google, as a third-party vendor, uses cookies to serve ads on C10MT. Google's use of advertising cookies enables it and its partners to deliver ads to our users based on their visit to C10MT and/or other sites on the Internet.

A. Types of Advertising: Ads may include contextual automotive promotions, restoration tools, or general interest campaigns. These are tailored to your browsing behavior and preferences during your visit to our vehicle archive.

B. Data Used for Personalization: Google may process anonymized identifiers such as device type, browsing history, and interaction patterns. No personally identifiable information (PII) is shared with advertisers without your explicit consent.

C. Transparency & Control: - Users may opt out of personalized advertising by visiting Google Ad Settings.
- Alternatively, you can opt out of third-party vendors' use of cookies for personalized advertising by visiting www.aboutads.info.
- You may also configure your browser to block or delete advertising cookies at any time.

D. Compliance: All advertising practices on C10MT comply with Google Ads Publisher Policies, GDPR, CCPA, and other applicable frameworks. We ensure that consent is obtained before enabling non-essential advertising cookies.

E. Limitations: Opting out of personalized advertising does not mean you will stop seeing ads. Instead, ads may be less relevant to your interests but will continue to appear as part of của our content creators' monetization strategy.

Note: For more details on how Google handles advertising data, please review the Google Advertising Privacy Policy.

5. Third-Party Data Processing

We share specific hashed or pseudonymized data with trusted partners to enhance your experience and maintain site functionality. Each partner operates under its own independent Privacy Policy and compliance framework. Data shared is limited, purpose-driven, and safeguarded through contractual agreements.

Provider Purpose Legal Compliance Link
Google LLC Advertising delivery, contextual targeting, and analytics reporting Privacy & Terms
Microsoft Corp User behavior heatmaps and session analytics (Clarity) Microsoft Privacy
Cloudflare Inc Bot mitigation, DDoS protection, and secure content delivery Cloudflare Trust
Mgid Inc Native advertising and sponsored content integration Mgid Policy
Ahrefs Pte Ltd SEO analytics and backlink monitoring Ahrefs Privacy
Meta Platforms Inc Social media integrations and referral tracking Meta Privacy

Safeguards: All third-party data sharing is governed by Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs) where applicable. Shared data is pseudonymized, encrypted in transit, and restricted to the minimum necessary for the stated purpose.

User Rights: You may opt out of non-essential third-party processing (e.g., advertising cookies) via của Cookie Management Page. For more information on our independent mission, visit our About Us page.

Accountability: Each provider is independently responsible for its own compliance with GDPR, CCPA, LGPD, and other applicable frameworks. We encourage users to review the linked privacy policies for detailed information.

6. Your Rights (GDPR / CCPA / LGPD)

Regardless of your location, C10MT grants you the following rights over your personal data, in alignment with global privacy frameworks:

  • Right to Access: You may request confirmation of whether we process your personal data and obtain a copy of such data.
  • Right to Rectification: You can request corrections to inaccurate or incomplete personal information.
  • Right to Restrict Processing: You can request that we limit the processing of your data under specific circumstances (e.g., pending verification of accuracy).
  • Right to Data Portability: You have the right to receive your data in a structured, commonly used, machine-readable format and transmit it to another controller.
  • Right to Object: You can object to data processing based on our legitimate interests, including direct marketing activities.
  • Right to Erasure: Also known as the "Right to be Forgotten," you can request deletion of your records under certain conditions.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.
  • Right to Non-Discrimination (CCPA): You will not be discriminated against for exercising your privacy rights, such as denial of services or different pricing.
  • Right to Transparency: You have the right to clear information about how your data is collected, used, and shared.
  • Right to Lodge a Complaint: You may file a complaint with a relevant Data Protection Authority if you believe của our practices infringe upon your rights.

How to Exercise Your Rights: To exercise any of the above rights, please contact us at [email protected] or submit a request via của Contact Page. We will respond within 30 days as required by GDPR and equivalent frameworks.

7. Children’s Privacy & COPPA Compliance

C10MT is a technical library for automotive restoration and is not directed at children under 13. We do not knowingly collect Personally Identifiable Information (PII) from minors.

If we become aware that we have inadvertently collected data from a child under 13, we will execute an emergency deletion protocol to remove such data immediately from our systems.

In compliance with the Children’s Online Privacy Protection Act (COPPA) and equivalent frameworks such as GDPR-K (for EU residents under 16), we implement the following safeguards:

  • Age Verification: Forms and submissions are designed to discourage entry by minors.
  • Parental Rights: Parents or guardians may request access to, correction of, or deletion of any data inadvertently collected from their child.
  • Educational Disclaimer: All technical content is intended for adult automotive enthusiasts and professionals, not for children.

Contact: If you believe your child has submitted personal data to C10MT, please email [email protected] for immediate resolution.

8. Retention and International Transfers

Your data is stored on secure servers located in the United States. By using C10MT, you consent to the transfer of data across international borders, subject to appropriate safeguards.

Retention Policy: We retain personal data only as long as necessary for the purposes of technical support, community engagement, or as required by Texas state law and applicable international regulations.

  • Inquiry Data: Retained for up to 24 months to ensure continuity of technical support.
  • Consent Records: Retained for 365 days to respect cookie and privacy preferences.
  • Analytics Data: Retained according to provider policies (e.g., Google Analytics: 26 months).
  • Legal Obligations: Certain records may be retained longer if required by law or regulatory authorities.

International Transfers: Where data is transferred outside the United States, we implement safeguards such as Standard Contractual Clauses (SCCs) under GDPR and equivalent mechanisms to ensure lawful and secure processing.

Security Measures: All transfers are encrypted in transit and at rest, with access restricted to authorized personnel only as outlined in của Terms of Use.

Data Privacy Office

For all requests regarding Access, Deletion, or Data Portability, please contact our Legal Department in Dallas at [email protected]. We commit to acknowledging all legal requests within 30 days.