Privacy policy

Last updated: March 22, 2025

This Privacy Policy explains how DRC Media LLC & Dirt Road Cred Products LLC ("we," "us," or "our") collect, use, and share your personal information when you visit, interact with our services, or make a purchase on dirtroadcredmedia.com (the "Site"). It also applies to any communication you have with us regarding the Site (collectively, the "Services").

In this policy, "you" refers to anyone using our Services, whether as a customer, Site visitor, or any other individual whose information we collect under this Privacy Policy.

Please read this Privacy Policy carefully. By accessing or using our Services, you consent to the collection, use, and disclosure of your information as described here. If you do not agree, please refrain from using our Services.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or other operational needs. Any updates will be posted on the Site with a revised "Last Updated" date, and we will take any additional steps required by applicable law.

How We Use and Collect Your Personal Information

To provide our Services, we collect personal information from various sources, as outlined below. Over the past 12 months, the type of information we collect and use depends on how you interact with us.

Beyond the specific uses detailed below, we may also use your information to communicate with you, enhance our Services, comply with legal obligations, enforce our terms of service, and protect the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

The personal information we collect depends on how you interact with our Site and use our Services. When we refer to "personal information," we mean any data that identifies, relates to, describes, or can be linked to you. Below, we outline the categories and specific types of personal information we collect.

Information We Collect Directly from You

Information you provide directly through our Services may include:

• Contact Details: Your name, address, phone number, and email.

• Order Information: Your name, billing and shipping addresses, payment confirmation, email, and phone number.

• Customer Support Information: Any details you share when communicating with us, such as messages sent through the Services.

Certain features of our Services may require you to provide specific information. While you can choose not to share this information, doing so may limit your ability to use or access certain features.

Information We Collect about Your Usage

We may also automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, information about your network connection, your IP address and other information regarding your interaction with the Services.

Information We Obtain from Third Parties

We may also obtain information about you from third parties, including vendors and service providers who collect data on our behalf. This may include:

• Service Providers: Companies that support our Site and Services, such as Shopify.

• Payment Processors: Third parties that collect payment details (e.g., bank account, credit or debit card information, billing address) to process transactions and fulfill your orders.

• Online Tracking Technologies: When you visit our Site, engage with our emails, or interact with our Services or ads, we or our partners may automatically collect data using tracking technologies like pixels, web beacons, software developer kits, third-party libraries, and cookies.

Any information we receive from third parties will be handled in accordance with this Privacy Policy. For more details, see the section Third-Party Websites and Links below.

How We Use Your Personal Information

• Providing Products and Services: We use your personal information to fulfill our contract with you, including processing payments, fulfilling orders, sending account-related notifications, managing your account, arranging shipping, and handling returns or exchanges. Additionally, Shopify may match your account with other Shopify services you choose to use, in accordance with its Privacy Policy and Consumer Privacy Policy.
  

• Marketing and Advertising: We may use your information for promotional purposes, such as sending marketing emails, text messages, or postal mail, and displaying targeted advertisements. This helps us personalize your shopping experience and tailor advertising on our Site and other platforms.
  

• Security and Fraud Prevention: Your information helps us detect, investigate, and prevent fraudulent, illegal, or malicious activity. If you create an account, you are responsible for keeping your credentials secure. We strongly advise against sharing your username, password, or other access details. If you suspect unauthorized access, please contact us immediately.

• Communications and Service Improvement: We use your personal information to provide customer support and enhance our Services. This allows us to respond effectively, improve your experience, and maintain a strong business relationship with you.

Transmission of Leads to Dealer Partners

Transmission of Leads to Affiliate Dealers and Third Parties

When you submit a lead, request, inquiry, quote request, or otherwise provide contact information through DRC Media LLC’s website, mobile app, or services (collectively, the “Services”), you expressly consent to the collection, use, and disclosure of the information you provide for the purposes described below.

What information we may transmit
We may transmit any information you provide in connection with your submission, including but not limited to: name, mailing address, phone number, email address, vehicle or product preferences, ZIP code, messages you write, and any other information you supply (“Lead Data”).

Recipients and purposes of disclosure
We may share your Lead Data with our affiliate dealer partners, manufacturer partners, service providers, and other authorized third parties (collectively, “Dealers and Partners”) for the following purposes: to contact you regarding your request, schedule appointments, provide product or pricing information, process orders, deliver and fulfill services, perform performance reporting, and otherwise respond to or fulfill your request. We do not control how Dealers and Partners use Lead Data after we transmit it; their use is governed by their own privacy policies.

Consent to be contacted (phone, SMS, email)
By submitting your Lead Data, you expressly consent to be contacted by Dealers and Partners by telephone (including autodialed and prerecorded/artificial voice calls), text message (SMS), and email for the purpose of responding to your inquiry and related communications. Message and data rates may apply. You may revoke this consent at any time by following the opt-out instructions below; revocation may not apply to messages that are necessary to fulfill a transaction or legal obligation.

Purpose limitation and contractual controls
We transmit Lead Data only for the purposes outlined above. When we transmit Lead Data to Dealers and Partners, we require, by contract, that they use Lead Data only for permitted purposes and comply with applicable law. Where feasible, we require Dealers and Partners to implement reasonable administrative, technical, and physical safeguards designed to protect Lead Data.

Prohibition on resale (dealer partners)
We require our Dealers and Partners, via contract, not to sell, resell, rent, exchange, or otherwise monetize Lead Data received from DRC Media LLC except as expressly authorized in writing by DRC Media LLC or the individual who provided the data.

Retention
We retain Lead Data for as long as necessary to fulfill the purposes in this policy, to comply with legal obligations, resolve disputes, and enforce our agreements. Unless a different retention period is required or permitted by law, Lead Data will be retained for 3 years after the date of submission.

Your choices & opting out

• To stop receiving marketing messages from a Dealer or Partner, follow the opt-out instructions included in the message or contact the Dealer directly.

• To opt out of transmission of your Lead Data to Dealers and Partners in the future, contact us at info@dirtroadcredmedia.com or UNIT 102 1594 Cumberland Street Lebanon, PA 17042. Please note: if you opt out of transmission, we may be unable to fulfill your request that requires Dealer involvement.

• To request access, correction, deletion, or portability of your Lead Data, or to lodge a complaint, see the “Your Rights” section of this Privacy Policy or contact us at info@dirtroadcredmedia.com

How we store consent & proof of permission
We will maintain records evidencing your consent to lead transmission and communications, including: timestamp of submission, the content of the submission, the IP address and user-agent string at time of submission, the consent checkbox state (or equivalent express consent), and a copy of the Lead Data transmitted. These records will be retained for our audit and compliance needs for at least 3 YEARS and will be made available to you upon request consistent with applicable law.

Security
We implement reasonable technical and organizational measures to protect Lead Data in transit and at rest (e.g., TLS/HTTPS in transit, access control, encryption of backups where feasible). However, no internet transmission or storage is completely secure; we cannot guarantee absolute security of Lead Data. Please do not input any sensitive data into the forms.

Third-party policies
After transmission, the Dealer or Partner may process your information under its own privacy practices. We encourage you to review the privacy policy of any Dealer or Partner that contacts you.

Additional legal notices (TCPA & other compliance)

• If you provide a mobile telephone number you consent to receive calls and text messages (including by automated means) from Dealers in order to respond to your inquiry. To the extent required by law for marketing communications beyond the scope of your inquiry, we will obtain separate written consent.

 

• For residents of jurisdictions requiring additional disclosures (for example, California), please see the applicable section of this Privacy Policy for state-specific rights and disclosures.

Dealer contact hours & company liability
Dealers and other third-party recipients of Lead Data may contact you by telephone, SMS/text message, or email in order to respond to your inquiry. Although we require our Dealers and Partners to comply with applicable laws (including the Telephone Consumer Protection Act and similar state laws) and to respect consumer contact preferences, we do not control the timing or content of communications after we transmit your Lead Data. Dealers may attempt to contact you outside of normal business hours (for example, evenings or weekends), and we are not responsible for such contacts. You acknowledge and agree that we are not the sender or controller of communications sent directly by Dealers and Partners and that any communications you receive from those entities are not communications from DRC Media LLC unless explicitly stated.

Release; limitation of liability; indemnification
To the fullest extent permitted by applicable law, you release, discharge, and hold harmless DRC Media LLC, its parents, subsidiaries, affiliates, officers, directors, employees, agents and contractors (collectively, the “Released Parties”) from and against any and all claims, demands, causes of action, losses, damages, liabilities, costs and expenses (including reasonable attorneys’ fees and court costs) arising out of or relating to: (a) any contact or communication (including calls, SMS/text messages, or emails) from any Dealer or Partner after we transmit your Lead Data; (b) Dealers’ or Partners’ use, retention, processing or disclosure of your Lead Data in accordance with their own privacy policies; or (c) contacts made by Dealers or Partners outside of normal business hours, except to the extent the claim results directly from the Released Parties’ gross negligence or willful misconduct.

Contact us
If you have questions about this section of our Privacy Policy or wish to exercise your rights regarding Lead Data, please contact:

info@dirtroadcredmedia.com
DRC Media LLC
Unit 102 1594 Cumberland St. Lebanon, PA 17042

Cookies 

Like many websites, we may use Cookies on our Site. For details about the Cookies used to power our store through Shopify, visit Shopify’s Cookie Policy https://www.shopify.com/legal/cookies .

We use Cookies to enhance and improve our Site and Services, such as remembering your actions and preferences, running analytics, and understanding user interactions (which helps us manage, optimize, and improve our Services). We may also allow third-party service providers to use Cookies on our Site to personalize services, products, and advertising on both our Site and other platforms.

Most web browsers accept Cookies by default, but you can modify your browser settings to block or remove them. However, disabling Cookies may impact your experience and prevent certain features or functionalities from working properly. Additionally, blocking Cookies may not entirely prevent data sharing with third parties, such as advertising partners.

Our Site recognizes the Global Privacy Control (GPC) signal, allowing you to opt out of certain uses or disclosures of your information. If you enable GPC, we will treat it as a valid request to opt out of targeted advertising for the browser or device used. If we can associate the signal with a Shopify account, we will apply the opt-out request to that account as well. To learn more about GPC, visit globalprivacycontrol.org.

Beyond GPC, we do not recognize other “Do Not Track” signals sent by web browsers or devices.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for contract fulfillment purposes, legitimate purposes and other reasons subject to this Privacy Policy. Such circumstances may include:

• With third parties or other vendors who perform services on our behalf (e.g., management, IT, payment processing, data and analytics, customer service, cloud storage, shipping and fulfillment).

• With business and marketing partners to provide services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices.

• When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations, with your consent.

• With our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful business.

• In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

We have in the past 12 months disclosed the following categories of personal information and sensitive personal information about users for the purposes set out above in "How we Collect and Use your Personal Information" and "How we Disclose Personal Information":

We do not use or disclose sensitive personal information without your consent or for the purposes of inferring characteristics about you.

Third Party Websites and Links

Our Site may contain links to third-party websites or online platforms. If you follow these links to sites not operated or controlled by us, we encourage you to review their privacy policies, security practices, and terms of use. We do not guarantee and are not responsible for the privacy, security, accuracy, completeness, or reliability of any information on these external sites.

Additionally, any information you share on public or semi-public platforms, including third-party social media sites, may be visible to other users without restriction on its use by us or third parties. The inclusion of links to third-party sites does not imply our endorsement of their content, owners, or operators unless explicitly stated within our Services.

Children's Data

Our Services are not intended for use by children, and we do not knowingly collect personal information from anyone under the age of 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us using the details below to request its deletion.

As of the effective date of this Privacy Policy, we have no actual knowledge that we “share” or “sell” (as defined by applicable law) the personal information of individuals under 16 years of age.

Security and Retention of Your Information

While we take measures to protect your personal information, no security system is completely foolproof, and we cannot guarantee “perfect security.” Additionally, information you transmit to us may not be secure while in transit. We recommend avoiding insecure channels when sharing sensitive or confidential information.

The length of time we retain your personal information depends on various factors, including the need to maintain your account, provide the Services, comply with legal obligations, resolve disputes, and enforce applicable contracts and policies.

Your Rights

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

• Right to Access / Know: You may have a right to request access to personal information that we hold about you, including details relating to the ways in which we use and share your information.

• Right to Delete: You may have a right to request that we delete personal information we maintain about you.

• Right to Correct: You may have a right to request that we correct inaccurate personal information we maintain about you.

• Right of Portability: You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.

• Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information.

• Withdrawal of Consent: Where we rely on consent to process your personal information, you may have the right to withdraw this consent.

• Appeal: You may have a right to appeal our decision if we decline to process your request. You can do so by replying directly to our denial.

• Managing Communication Preferences: We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

You may exercise any of these rights where indicated on our Site or by contacting us using the contact details provided below.

We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a substantive response to the request. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

Complaints

If you have concerns about how we process your personal information, please contact us using the details provided below. If you are not satisfied with our response, you may have the right to appeal our decision, depending on your location. You can do so by reaching out to us again or by filing a complaint with your local data protection authority.

International Users

We may transfer, store, and process your personal information outside your country of residence. This includes processing by our staff, third-party service providers, and partners in these locations.

If your personal information is transferred outside of Europe, we will rely on recognized transfer mechanisms, such as the European Commission’s Standard Contractual Clauses or equivalent agreements issued by the UK’s competent authority, unless the destination country has been deemed to provide an adequate level of data protection.

We are committed to complying with global privacy laws and regulations that govern the collection, use, and protection of personal information. Depending on where you reside, you may have specific rights under various data protection laws, as outlined below.

California Privacy Rights (CCPA/CPRA Notice)

The California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), provides California residents with specific rights regarding their personal information. We strive to respect these rights and comply with applicable California privacy laws to the best of our ability. This section describes those rights and explains how California residents may exercise them.

Right to Know and Access:
California residents have the right to request that we disclose the categories of personal information we collect, the categories of sources from which the information is collected, the business or commercial purposes for collecting or sharing such information, the categories of third parties with whom we share personal information, and the specific pieces of personal information we hold about them. We make reasonable efforts, consistent with our operational capabilities, to respond to these requests in accordance with California law.

Right to Delete:
California residents may request that we delete personal information we have collected, subject to certain legal exceptions (such as information needed to complete a transaction, detect security incidents, comply with law, or maintain internal business records). We evaluate and process deletion requests in good faith and strive to honor all valid requests to the fullest extent permitted by law.

Right to Correct Inaccurate Information:
California residents may request that we correct inaccurate personal information maintained by us. We will take commercially reasonable steps to verify and address such correction requests.

Right to Opt Out of Certain Data Sharing:
California residents have the right to opt out of the “sharing” of personal information for cross-context behavioral advertising. We do not sell personal information for monetary value, but certain disclosures (such as transmission of leads to affiliate dealers to respond to consumer inquiries) may qualify as “sharing” under the CPRA’s broad definitions. We provide mechanisms for California residents to opt out of such sharing and will honor those choices.

Right to Limit Use of Sensitive Personal Information:
To the extent we collect information that may be classified as “sensitive personal information,” we only use such information for limited business purposes and do not use or disclose it for inferring characteristics about individuals. California residents may request limitations on the use of sensitive personal information, and we will process such requests consistent with applicable law.

Non-Discrimination:
We will not discriminate against any California resident for exercising their privacy rights. This includes denying services, charging different prices, reducing service level, or offering lower quality services because of a privacy rights request.

Good-Faith Compliance Statement:
While DRC Media LLC is not a large data broker or high-volume data processor, we make a good-faith effort to comply with California privacy laws, including the CCPA and CPRA, to the best of our operational and technical ability. We review our policies, data practices, and vendor relationships to align with California requirements and respond to California consumer requests in accordance with the law’s timelines and verification procedures.

How to Submit a California Request:
California residents may submit privacy requests by contacting us at:
Email: info@dirtroadcredmedia.com
Mail: UNIT 102 1594 Cumberland St. Lebanon, PA 17042
To protect consumer privacy, we will take steps to verify your identity before responding to certain requests.

Exercising Your Privacy Rights

If you are located in a region with specific privacy rights, you may:

• Request access, correction, deletion, or restriction of your personal data.

• Opt out of certain data processing or marketing communications.

• Withdraw consent where applicable.

• File a complaint with your local data protection authority.
  
  

To exercise your rights or inquire about our data practices, please contact us using the information provided in this Privacy Policy.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call, email, or write to us at:

717-679-0083

info@dirtroadcredmedia.com 

Unit 102 1594 Cumberland St. Lebanon, PA 17042