URNIETA is a wholesale brand. This policy explains what information we collect when you visit urnieta.com, submit a trade-contact form, open a wholesale account, or correspond with our sales, engineering, or after-sales teams. It applies globally to visitors and customers, with regional supplements in Section 11.55
Information We Collect
We collect two broad categories of information. The first is visitor analytics: information automatically generated when a browser loads a page on urnieta.com. This includes the IP address making the request, the user-agent string, the referring URL, the requested path, the response status, the timestamp, an approximate geographic region derived from IP, and a first-party cookie used to distinguish unique sessions across pages. We do not log raw form keystrokes, mouse movement, or any biometric signal. We do not embed third-party advertising pixels or fingerprinting libraries.
Information We Collect
The second category is trade-contact data: information you provide voluntarily through our dealer-application form, quote-request form, support tickets, downloads gating, or direct email. This typically includes business name and address, business registration or VAT number where applicable, the named contact’s full name and title, business email, business telephone, the vehicle platforms you intend to stock, your projected first-order volume, and any free-text notes you choose to attach. For shipping and customs purposes we may additionally collect importer-of-record details and customs broker references.
How We Use Information
Visitor analytics are used to understand which pages and SKUs are loading correctly, to monitor uptime and error rates across our regional CDN nodes, to detect abusive traffic patterns, to inform editorial and engineering decisions about which sections of the catalog to expand, and to satisfy our own internal reporting on regional demand. The data is aggregated for these purposes; we do not sell or rent it to third parties.
Trade-contact data is used for four narrowly defined purposes: (a) order fulfillment: preparing quotes, processing wholesale orders, generating commercial invoices and shipping documents; (b) sales follow-up: a member of our trade desk may contact you about open inquiries; (c) dealer routing: connecting end-user enquiries with the nearest authorized URNIETA distributor in your region; and (d) opt-in marketing: periodic catalog updates, new product announcements, and field-journal newsletters. Marketing emails are sent only with explicit double opt-in confirmation, and every message contains a one-click unsubscribe link.
Information Sharing
We share trade-contact data with three categories of recipient, and only when sharing is necessary. Authorized dealers and distributors in your region may receive your contact information when you submit an enquiry that we route to them. Logistics and customs partners, including our forwarding agents, regional last-mile carriers, and customs brokers in destination countries, receive shipping addresses and consignee details strictly to move goods.
We may also disclose information to compliance and law-enforcement authorities where we are legally required to do so by a valid order from a court of competent jurisdiction in Hong Kong SAR, the People’s Republic of China, the European Union, the United Kingdom, or any other jurisdiction in which we operate. We do not sell, rent, or trade personal information to data brokers, advertising networks, list brokers, or any party for monetary or other consideration. We do not share your data with social media platforms for ad-targeting purposes.
Cookies & Tracking
urnieta.com uses a small set of first-party cookies only. The session cookie distinguishes your browser across page loads so we can resume a multi-page download flow or remember a language preference. A consent cookie records whether you have accepted optional analytics. A CSRF cookie protects form submissions. None of these cookies persist longer than 24 months, and most are session-scoped and discarded when you close the browser.
We use Cloudflare as our edge network and web-application firewall. Cloudflare may set its own technical cookies for bot mitigation; these are operational rather than analytical and do not profile users. We do not use Google Analytics, Meta Pixel, TikTok Pixel, Hotjar, FullStory, or any third-party advertising or session-replay product. Our internal analytics run on self-hosted infrastructure inside our own VPC.
International Data Transfers
Because URNIETA serves dealers in multiple countries, your data will inevitably cross borders. Trade contacts originating in the European Economic Area or the United Kingdom are processed primarily in Hong Kong SAR; we rely on the European Commission’s Standard Contractual Clauses (SCCs) Module Two, supplemented by the UK Addendum where relevant, as the legal basis for those transfers.
For end-user enquiries that are routed to authorized regional distributors, the data is transferred under a written data-processing agreement that binds the distributor to the same standards described in this policy. We maintain a register of these distributor agreements and review it annually.
Data Retention
Different categories of data are retained for different periods, reflecting both their commercial usefulness and the statutory record-keeping obligations applicable to a Hong Kong registered exporter. Trade transaction records, including invoices, packing lists, customs declarations, and the underlying order-line data, are retained for seven (7) years from the date of shipment.
Prospect contacts, including leads who enquired but did not place a wholesale order, are retained for twenty-four (24) months from the date of last meaningful interaction, after which the record is anonymized for trend analysis and the personally identifying fields are deleted. Server access logs are retained for 90 days. Marketing-list subscriptions are retained until you unsubscribe, plus a 12-month suppression-list window so that you are not re-subscribed by accident.
Your Rights
Subject to the laws applicable in your jurisdiction, you have the right to obtain confirmation of whether we hold personal data about you, to receive a copy of that data in a portable machine-readable format, to request correction of inaccurate or incomplete data, to request erasure of data we no longer have a lawful basis to keep, to restrict or object to certain processing, and to lodge a complaint with the data-protection authority of your country of residence.
These rights derive from the EU General Data Protection Regulation (GDPR), the Hong Kong Personal Data (Privacy) Ordinance (PDPO), and the People’s Republic of China Personal Information Protection Law (PIPL), among other instruments. To exercise any of these rights, write to info@urnieta.com from the email address on record. We will respond within thirty (30) days.
Children’s Privacy
urnieta.com is a B2B trade portal directed at vehicle workshops, dealers, distributors, and adult enthusiasts who are evaluating modifications for their own vehicles. The site is not directed at children under the age of sixteen, and we do not knowingly collect personal information from children. We do not run promotions, contests, social-media campaigns, or any other activity intended to attract minors.
If you are a parent or guardian and you believe that a child under sixteen has submitted personal information to us, please contact info@urnieta.com with sufficient detail for us to identify the record. We will delete the data as soon as reasonably practicable and confirm completion in writing.
Security
We protect data in transit using modern TLS across all public endpoints. Data at rest in our primary databases is encrypted, and production database access is restricted to a small named group of engineers. Access is gated, logged, and reviewed through internal operational controls.
We test our public attack surface periodically and remediate critical findings on a priority basis. In the unlikely event of a security incident affecting your personal data, we will notify the relevant regulator and affected users in line with applicable legal obligations.
Changes to This Policy
We revise this policy when our practices change, when a new regulation comes into force, or when feedback from a regional regulator requires us to clarify a clause. Each revision increments the version number printed at the top of this page.
If we issue a major-version revision, we will notify everyone on our marketing list by email and place a banner at the top of urnieta.com before the new version takes effect. Prior versions remain archived and available on request from info@urnieta.com for as long as we remain in business.
Regional Notices
California (CCPA / CPRA). California residents have the right to know which categories of personal information we have collected, to know whether their information has been sold or shared, to request deletion, to correct inaccurate information, to limit the use of sensitive personal information, and to be free from discrimination for exercising these rights.
European Union and United Kingdom (GDPR / UK GDPR). Our lawful bases for processing are contract performance, legitimate interests, legal obligation, and consent, depending on the relevant activity.
Brazil (LGPD). Brazilian data subjects have rights closely aligned with those described in Section 7. Our privacy office accepts LGPD-specific enquiries at info@urnieta.com.
Contact Us
For any privacy question, request, complaint, or correction, please contact our Privacy Office. We monitor this address Monday through Friday and respond to most enquiries within two business days, with a hard SLA of thirty (30) days for substantive rights requests where required by law.