Privacy Policy
This policy explains what information we collect when you visit enginestand.com, place an order, or contact us; what we do with it; who receives it; and the choices you have. The short version: essential functions always run, everything else waits for your permission, and you can change your mind at any time. This site carries no advertising or re-targeting tags of any kind.
1. Who we are and what this policy covers
enginestand.com is operated by Honest Solutions, LLC, doing business as EngineStand.com ("we," "us"), 1035 Data Lane, Knoxville, Tennessee 37932. We manufacture and sell professional-series running engine stands, mount kits, and engine parts in the United States.
Honest Solutions, LLC also operates mechman.com, which has its own privacy policy describing that site. The two sites use different tools and collect different things, so the policies differ. Your rights, the company you are dealing with, and the process for making a request are the same either way, and a request sent to either site reaches the same company.
This policy covers information collected through enginestand.com, through orders placed on it, and through our customer service channels. It does not cover other websites we link to, or the separate websites of our dealers and resellers. Following a social media link from our site takes you to that company's own platform, where its privacy policy applies.
2. Information we collect
Information you give us
- Order and account information: name, email address, billing and shipping address, phone number, and the products you buy. Payment card numbers are entered directly with our payment processor and are not stored by us.
- Application details you provide when asking a question about fitment or configuration — engine, mounting, accessories, and similar.
- Communications: what you write in a contact form or email, and what you tell us when you call.
- Newsletter signup: the email address you enter in the signup form at the bottom of every page, if you choose to use it. It is stored by our platform. We do not currently send marketing email; if we start, every message will include an unsubscribe link.
- Account credentials if you create an account, stored in hashed form by our platform.
Information collected automatically
- Standard request data that every web server receives: IP address, browser type and version, device type, operating system, the page requested, the page you came from, and the time of the request.
- Site activity such as pages viewed, products viewed, items added to the cart, and searches — collected by our platform to run the store, and by our analytics service only if you allow it (see Section 4).
- Cookies and similar identifiers, described in Section 4.
Information from other sources
- Fraud-screening results from PayPal, whose payment processing includes its own fraud screening of each order using the order details and standard request data. We use no separate fraud-screening service.
We do not knowingly collect sensitive personal information such as government ID numbers, precise geolocation, health information, or biometric data, and we do not ask for it.
3. How we use information
- To process, fulfill, ship, and support your orders, including warranty and return handling
- To answer your questions and help you choose the right configuration
- To screen orders for fraud and protect the security of the store
- To run and improve the website, including analytics if you allow it
- To send you a newsletter if you have signed up and we begin sending one, which you can stop at any time
- To comply with law, enforce our terms, and resolve disputes
We do not use your information to show you advertising on other websites, and we do not use it to make automated decisions that have legal or similarly significant effects on you.
4. Cookies, tracking technologies, and your consent choices
When you first visit enginestand.com, a banner asks which categories of data collection you allow. Nothing outside the Essential category runs until you allow it. The categories are:
| Category | What it does | Who receives data | Default |
|---|---|---|---|
| Essential | Makes the site work: your cart, checkout, login, fraud screening, the consent banner itself, the structured product data search engines read, and the delivery of fonts and code libraries. | BigCommerce (our platform), PayPal (payments and fraud screening), SEOKart, static-asset delivery networks | Always on |
| Functional | Enhanced features such as embedded video or live chat. We do not currently run anything in this category. Our storefront's display features — category icons, product tags — are served from our own platform and contact no one, so they sit under Essential. | No one at present | Off until you allow it |
| Analytics | Statistics about how the site is used so we can improve it. | Google Analytics | Off until you allow it |
| Targeting / Advertising | Advertising and cross-site measurement. We do not currently run anything in this category. The control exists so that your choice is already recorded if that ever changes, and so that a Global Privacy Control signal has something to act on. | No one at present | Off until you allow it |
To change your choices at any time: visit Your Privacy Choices (also linked in the footer of every page) or use the cookie preferences link at the bottom of every page. Your choices are stored in a cookie named bc_consent and apply on your next page load. Clearing your browser's cookies resets them and the banner will appear again.
Our platform, BigCommerce, sets cookies that are necessary to run the store (session, cart, and security cookies). These are Essential and cannot be turned off without breaking the site.
5. Global Privacy Control and Do Not Track
Global Privacy Control (GPC). If your browser or extension sends the Global Privacy Control signal, we treat it as an opt-out of the sale or sharing of your personal information: the Targeting / Advertising category is denied automatically on your first visit, without you having to do anything. You can still allow Functional and Analytics if you wish. If you later choose "Accept All Cookies" on the banner, that explicit choice is honored over the automatic signal until you change it again. GPC is detected through the browser's navigator.globalPrivacyControl property; we cannot read the corresponding request header on our hosting platform, so a small number of tools that send only the header may not be detected.
Do Not Track. Our platform does not respond to browser "Do Not Track" signals, which have no agreed-upon meaning. Use GPC or the consent banner instead.
6. Third parties that receive personal information
This is the complete list of companies that receive information from or about visitors to enginestand.com, what they receive, and when. "Standard request data" means IP address, browser and device information, the page requested, and the referring page — what any server receives when a browser requests something from it.
A service provider works for us under a contract that limits how it may use the information. A third party may use the information for its own purposes, including advertising. Every company on this list is a service provider. No third party in that sense receives information from this site.
| Company | What they do for us | Information they receive | When | Role |
|---|---|---|---|---|
| Always on — Essential | ||||
| BigCommerce, Inc. | Hosts the store, processes orders and checkout, runs the consent banner | Everything you enter on the site and standard request data | Always | Service provider |
| PayPal, Inc. | Our payment gateway. Processes card payments (Visa, Mastercard, American Express, Discover) and PayPal payments, and screens each order for fraud as part of processing it. Amazon Pay and Google Pay are processed by their own providers when you choose them. | Payment details you enter with them, order amount, billing name and address, email, phone, IP address and device information used for fraud screening | At checkout | Service provider for the transaction; also operates under its own privacy policy for any PayPal account you hold |
| Shipping carriers — UPS, FedEx, FedEx Freight, USPS | Deliver your order | Name, shipping address, phone number | When we ship | Service provider |
| SEOKart | Generates the structured product data search engines read | Standard request data only. The data itself is written into our own pages and is not sent anywhere by your browser. | Every page | Service provider |
| Cloudflare, Inc. | Sits in front of the site to deliver it and filter malicious traffic | Standard request data for every request, including requests that never reach our platform | Always | Service provider (infrastructure) |
| Static-asset delivery — Google Fonts, Google Hosted Libraries | Deliver the typefaces and the JavaScript library the site is built on | Standard request data only; no cookies | Every page | Service provider (infrastructure) |
| Functional — only if you allow it | ||||
| No company receives information from this site in this category. The display features in our storefront theme run entirely on our own platform and send nothing to anyone. | ||||
| Analytics — only if you allow it | ||||
| Google Analytics 4 (Google LLC) | Tells us how the site is used | A pseudonymous visitor ID, pages and products viewed, device and browser, approximate location derived from IP address (the IP address itself is not stored by Google Analytics 4) | When you allow Analytics | Service provider under Google's data processing terms; advertising features are not enabled |
| Atomic Widgets (atomicwidgets.com) | Reports page and product events from our storefront to Google Analytics | Pages and products viewed, cart activity, and whether you are signed in | When you allow Analytics | Service provider |
| Targeting / Advertising | ||||
| No company receives information from this site for advertising or cross-site measurement. We run no advertising pixel, conversion tag, or re-targeting tag. | ||||
We also disclose information when the law requires it, to protect our rights or the safety of others, and as part of any sale or reorganization of our business. We do not sell personal information to data brokers, and we do not give it to anyone not listed here except as this paragraph describes.
7. Sale and sharing of personal information
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
California law counts as a "sale" or "sharing" the disclosure of identifiers to advertising companies so they can show you ads on other sites based on what you looked at here. We do not do this. enginestand.com carries no advertising pixel, no conversion tag, and no re-targeting tag, and no company on the list in Section 6 receives information for advertising purposes.
The Targeting / Advertising control described in Section 4 exists because that is where such tools would go if we ever added them, and because it gives the Global Privacy Control signal something to act on. It is empty today.
We do not knowingly sell or share the personal information of anyone under 16.
8. How long we keep information
| Information | Kept for | Why |
|---|---|---|
| Order and invoice records (name, addresses, products, amounts) | A minimum of 7 years, and for as long as a product remains under warranty | Tax, accounting, and warranty obligations — our products carry a lifetime warranty, so the record that proves your purchase is kept for as long as the warranty can be claimed |
| Account information | For as long as the account is open, and afterwards for as long as needed to resolve any open order, warranty claim, or dispute | So you can log in and see your history, and so we can service what you bought |
| Correspondence | For as long as needed to resolve the matter and any follow-up, warranty claim, or dispute that arises from it | To handle follow-up questions and warranty claims |
| Newsletter signup list | Until you unsubscribe or ask us to remove you | Only for as long as you want to hear from us |
| Fraud-screening results | Held by PayPal under its own policy; we keep only whether the order was accepted, as part of the order record | To recognize repeat fraud |
Consent choices (bc_consent cookie) | 12 months in your browser | So we remember your choice |
| Analytics — event-level data | 2 months | The shortest retention Google Analytics offers |
| Analytics — user-level data | 14 months, then aggregated | Google Analytics' longest user-data setting; reset by new activity |
| Server logs | Set by BigCommerce; we do not retain them separately | Platform security |
When information is no longer needed for the purpose it was collected for, we delete it or make it anonymous.
9. How we protect information
Every connection to enginestand.com is encrypted (TLS). Payment card details are entered directly with our payment processors and never pass through our systems. Access to order and customer information inside our platform is limited to staff who need it. Our platform, BigCommerce, is certified to the Payment Card Industry Data Security Standard. No method of transmission or storage is perfectly secure; if we learn of a breach affecting your information, we will notify you as the law requires.
10. Children
enginestand.com is not directed to children under 13 and we do not knowingly collect information from them. If you believe a child has provided us information, contact us and we will delete it.
11. Your privacy rights
Wherever you live, you can:
- Change your cookie and tracking choices at any time (Section 4)
- Leave the newsletter list at any time by asking us, or by using the unsubscribe link in any message we send
- Ask what information we hold about you, ask us to correct it, or ask us to delete it
- Get a copy of the information you gave us in a usable format
Section 12 describes additional rights for California residents. Residents of other U.S. states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others) have substantially similar rights of access, correction, deletion, portability, and opt-out of targeted advertising, and may appeal a decision on a request as described in Section 13. We honor those rights for all U.S. residents regardless of state.
12. Additional information for California residents
This section supplements the rest of the policy for California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA").
Categories of personal information
In the twelve months before the effective date, we collected the following categories, from the sources and for the purposes described in Sections 2 and 3:
| Category | Examples | Collected | Disclosed to service providers | Sold or shared |
|---|---|---|---|---|
| Identifiers | Name, email, address, phone, IP address, cookie IDs | Yes | Yes | No |
| Customer records | Billing and shipping details, order history; payment card details go directly to processors | Yes | Yes | No |
| Commercial information | Products purchased or considered | Yes | Yes | No |
| Internet or network activity | Pages viewed, browser and device information, interactions with the site | Yes | Yes | No |
| Geolocation | Approximate location inferred from IP address; no precise geolocation | Yes | Yes | No |
| Inferences | We do not build profiles about you | No | No | No |
| Sensitive personal information | Account password only, stored hashed by our platform | Yes, that item only | No | No |
We do not collect the remaining CCPA categories (protected classifications, biometric information, audio or visual recordings, professional or education information).
Your CCPA rights
- Right to know what personal information we have collected about you, the sources, the purposes, and the third parties we disclosed it to
- Right to delete personal information we collected from you, subject to exceptions (for example, we must keep order records for tax purposes)
- Right to correct inaccurate personal information
- Right to opt out of sale or sharing — we do not sell or share personal information, so there is nothing to opt out of. The controls at Your Privacy Choices and the Global Privacy Control signal described in Section 5 are honored regardless.
- Right to limit use of sensitive personal information — we do not use sensitive personal information for any purpose that would trigger this right
- Right to non-discrimination — we will not deny you service, charge a different price, or provide a different quality of service because you exercised these rights
We do not offer financial incentives in exchange for personal information.
Authorized agents
You may designate an agent to make a request on your behalf. We will ask the agent for written permission signed by you and may ask you to verify your identity directly with us.
Nevada residents
We do not sell personal information as that term is defined in Nevada law.
13. How to exercise your rights and contact us
Send requests to customerservice@enginestand.com with the subject line Privacy Request, or call 1 (888) 632-4626 during customer service hours, Monday to Friday 9:00am to 4:30pm Eastern. You may also write to the address in Section 1.
Verification. Before acting on a request to know, delete, or correct, we confirm it is you by matching the information you provide (typically name, email, and a recent order number) against our records. We will not ask for more than we need, and we use what you send for verification only.
Timing. We confirm receipt within 10 business days. We respond to requests to know, delete, or correct within 45 days; if we need longer, we will tell you why and take no more than an additional 45 days. Cookie and tracking choices made through the banner take effect on your next page load.
Appeals. If we decline a request, we will explain why. You may appeal by replying to our response with the word Appeal in the subject line; a different person will review it and respond within 45 days. If you are not satisfied, California residents may contact the California Privacy Protection Agency, and residents of other states may contact their state attorney general.
Questions about this policy go to the same address.
14. Changes to this policy
When we change this policy we update the effective date at the top. For changes that materially affect how we use information you have already given us, we will also post a notice on the site or email account holders. This version replaces the policy dated May 1, 2025. The consent banner, the Global Privacy Control handling described in Section 5, and the Your Privacy Choices page were introduced on September 11, 2026; before that date, the analytics collection described in Section 6 ran without asking first.
Honest Solutions, LLC
1035 Data Lane, Knoxville, TN 37932
customerservice@enginestand.com · 1 (888) 632-4626
Monday to Friday, 9:00am to 4:30pm Eastern