Privacy Policy

Your Privacy Matters to Extang

At Extang, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and interact with us. Please read this policy carefully to understand our privacy practices.

Our mission is to build premium tonneau covers that protect what matters to you. Protecting your personal information is part of that mission. We only collect and use information necessary to provide you with the best possible experience.

Information We Collect

Information You Provide Directly

When you visit our website and interact with us, we may collect information you voluntarily provide, including:

• Contact information: Name, email address, phone number, mailing address
• Product inquiries: Questions about our tonneau covers, compatibility with your vehicle, specifications
• Feedback and comments: Reviews, testimonials, product feedback you choose to share
• Contact form submissions: Any information you submit through our contact forms

Information Collected Automatically

When you visit our website, we automatically collect certain technical information, including:

• Device information: Device type, operating system, browser type and version
• Usage data: Pages visited, time spent on our website, links clicked, referring website
• IP address: Your Internet Protocol (IP) address for analytics and security purposes
• Location information: General geographic location based on IP address (city/state level)
• Cookies and tracking technologies: Data from cookies, pixels, web beacons, and similar technologies

Third-Party Information

We may receive information about you from third-party sources, including:

• Amazon Associates Program (affiliate program data)
• Analytics providers and marketing partners
• Service providers who assist with website functionality

How We Use Your Information

We use the information we collect for the following purposes:

• Providing services: To respond to your inquiries, fulfill requests, and provide customer support
• Website functionality: To maintain, improve, and optimize our website and user experience
• Analytics: To understand how you interact with our website and identify trends
• Marketing and communications: To send you updates about our products (only if you consent)
• Legal compliance: To comply with applicable laws, regulations, and legal processes
• Security: To detect, prevent, and address fraud, technical issues, and security incidents
• Affiliate program: To manage our participation in the Amazon Associates Program and track referrals
• Personalization: To tailor content and recommendations based on your interests and behavior

We will not use your information for purposes other than those described in this policy without first obtaining your consent.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience and gather analytics. Here’s what you should know:

Types of Cookies We Use

• Essential cookies: Necessary for website functionality and security
• Performance cookies: Help us understand how visitors interact with our website
• Marketing cookies: Used to track referrals and affiliate relationships with Amazon
• Analytics cookies: Collect data about site usage patterns and visitor behavior

Cookie Management

Most web browsers allow you to control cookies through browser settings. You can set your browser to refuse cookies or alert you when a cookie is being sent. However, some features of our website may not function properly without cookies. Instructions for managing cookies vary by browser — consult your browser’s help section for details.

Third-Party Tracking

We use third-party analytics providers (such as Google Analytics) to track website performance and user behavior. These providers may use cookies, pixels, and other tracking technologies. We do not have control over their tracking practices, and we encourage you to review their privacy policies separately.

Amazon Affiliate Program

We participate in the Amazon Associates Program. Amazon may set cookies on your device to track referrals and purchases made through our affiliate links. This helps us measure the effectiveness of our affiliate relationships. Amazon’s privacy practices are governed by their own privacy policy.

How We Share Your Information

We do not sell your personal information to third parties. However, we may share information in the following circumstances:

Service Providers

We may share information with third-party service providers who assist us with website hosting, analytics, customer support, and other business functions. These providers are contractually obligated to use your information only for the purposes we specify.

Amazon Associates Program

As an Amazon Associates participant, we share referral information with Amazon, including which products you viewed or purchased through our affiliate links. This allows Amazon to properly credit and track our affiliate commissions.

Legal Requirements

We may disclose your information if required to do so by law, legal process, or government request, or to protect our rights, privacy, safety, or property.

Business Transfers

If Extang is involved in a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

With Your Consent

We may share your information for purposes other than those listed above only with your explicit consent.

Data Security

Extang implements appropriate technical, administrative, and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit using SSL/TLS technology
• Secure hosting infrastructure
• Regular security assessments and updates
• Limited access to personal information by authorized personnel only
• Monitoring and logging of security incidents

While we implement industry-standard security practices, no method of transmission over the internet is completely secure. We cannot guarantee absolute security of your information. You use our website at your own risk, and you are responsible for maintaining the confidentiality of any login credentials.

Your Privacy Rights — GDPR, CCPA & State Laws

Depending on your location, you may have specific privacy rights regarding your personal information. We comply with applicable privacy laws, including GDPR, CCPA, and other state privacy regulations.

European Union (GDPR) Rights

If you are located in the EU or EEA, you have the following rights under the General Data Protection Regulation:

• Right to access: You may request access to the personal information we hold about you
• Right to rectification: You may request correction of inaccurate or incomplete information
• Right to erasure: You may request deletion of your personal information (“right to be forgotten”)
• Right to restrict processing: You may request that we limit how we use your information
• Right to data portability: You may request a copy of your information in a portable format
• Right to object: You may object to certain processing activities
• Right to withdraw consent: You may withdraw your consent for any processing that relies on your consent

California (CCPA) Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to know: You may request what personal information we collect, use, and share
• Right to delete: You may request deletion of personal information collected from you
• Right to opt-out: You may opt out of the “sale” or “sharing” of your personal information
• Right to correct: You may request correction of inaccurate personal information
• Right to limit use: You may request that we limit use of sensitive personal information
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights

Other State Privacy Rights

Other U.S. states (including Colorado, Connecticut, Delaware, Indiana, Montana, New Hampshire, Oregon, Tennessee, Texas, Utah, and Virginia) have passed privacy laws that provide similar rights. If you reside in one of these states, you may have the right to access, correct, delete, and port your personal information.

How to Exercise Your Rights

To exercise any of these privacy rights, please contact us at hello@extang.com or write to our address below. Include your name, email address, and a clear description of your request. We will respond to your request within the timeframe required by applicable law (typically 30-45 days). We may request verification of your identity before processing your request.

Authorized Agent

If you are a California resident, you may authorize another person to submit a request on your behalf. We will require verification that the authorized agent has your permission and valid power of attorney.

Children’s Privacy

Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will delete such information immediately.

For children ages 13-18, we provide heightened privacy protections and comply with applicable laws regarding the collection and use of their information.

If you believe we have collected information from a child under 13, please contact us immediately at hello@extang.com.

Third-Party Links and Services

Our website may contain links to third-party websites, including Amazon product pages and other external resources. We are not responsible for the privacy practices of these third-party websites. We encourage you to review the privacy policies of any third-party sites before providing your information.

Our website may include third-party analytics tools (such as Google Analytics) and marketing services. These third parties may collect information about your online activities across different websites. We do not control their data collection practices.

Do Not Track (DNT)

Some browsers include a “Do Not Track” feature that sends a signal to websites requesting that your online activity not be tracked. Currently, there is no industry standard for recognizing DNT signals. Our website does not currently respond to DNT signals, but you may disable cookies and tracking technologies through your browser settings.

International Data Transfers

Extang is based in the United States. Your information may be transferred to, stored in, and processed in the United States or other countries where we or our service providers operate. These countries may have data protection laws that differ from your home country.

If you are located outside the United States and choose to provide information to us, you consent to the transfer of your information to the United States and its processing according to this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, and other factors. We will notify you of material changes by updating the “Last Updated” date at the top of this policy and posting the updated policy on our website.

Your continued use of our website following the posting of updated terms means you accept and agree to the changes. We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact Us About Your Privacy

If you have questions about this Privacy Policy, your privacy rights, or how we handle your information, please contact us:

We will respond to your inquiry within 10 business days. If you are not satisfied with our response or believe we have violated your privacy rights, you may have the right to lodge a complaint with your local data protection authority (if applicable).