Loading...
Loading...
LEGAL
Last updated: 11 August 2026
At Italian Import Racing your privacy matters to us. This policy describes what personal data we collect when you browse the site, create an account or make a purchase, why we use it, and how you can exercise your rights. Processing is governed by Costa Rica's Law No. 8968 on the Protection of Individuals with regard to the Processing of their Personal Data and its regulations, under the supervision of the Data Protection Agency (PRODHAB).
We collect the information you give us directly when you create an account, make a purchase or contact us: - Identification and contact data: full name, email address, phone number, and identity document type and number. - Shipping data: street address, province, canton and district of delivery. - Billing data: cardholder name, billing address and email tied to the payment, which the processor requires to authenticate the transaction and which we need to issue the electronic invoice. - Technical data: IP address, browser type and pages visited, retained as an audit trail of the operations on your account.
We use your information to: - Process, invoice and ship your orders - Contact you about your account and your orders - Handle returns and refunds - Send you promotions and news, only if you consented to receive them - Improve our website and the shopping experience - Meet legal, accounting and tax obligations
Charges are processed through BAC Credomatic on the PowerTranz platform. Your full card number, expiry date and security code travel encrypted straight to the processor: they are never written to our databases or logs, and our staff never sees them. When you choose to save a card for future purchases, the processor returns a token from which the original number cannot be reconstructed. Of the card itself we keep only the brand, the last four digits, the cardholder name and the expiry date, so that you can recognise it at checkout. You can delete a saved card at any time from your profile. Every transaction is authenticated with 3D Secure against the issuing bank, which may ask you for a verification code. The processor holds PCI DSS certification for handling card data.
We apply technical and organisational safeguards to protect your information against unauthorised access, loss or alteration. The whole site runs over HTTPS with TLS encryption, access to information is restricted by role through database-level controls, and sensitive operations are logged for audit. No system is infallible: should a security breach affecting your data occur, we will notify you and report it to PRODHAB as the law requires.
We do not sell or rent your personal information. We share it only with the providers needed to complete your purchase, and only to the extent each one requires: - BAC Credomatic and PowerTranz, to process the charge, authenticate the transaction with 3D Secure and handle refunds - The courier companies that deliver your order - Our infrastructure and transactional email providers, which host the platform and deliver confirmations - The Costa Rican Ministry of Finance, for issuing the electronic invoice - Competent authorities, where a legal obligation or a well-founded request applies
We keep your account data for as long as the account stays active. Order, payment and billing records are retained for the period Costa Rican tax and commercial rules require, even after you close your account, because they document operations already carried out. Once that period elapses, the data is deleted or anonymised.
Our site uses first-party cookies that are strictly necessary to keep you signed in and remember your language and currency preferences; without them you cannot sign in or complete a purchase. We also use analytics cookies to understand site traffic and improve the shopping experience. You can configure your browser to reject cookies, with the consequence that some functionality will stop working.
Some of our infrastructure, payment and email providers operate servers outside Costa Rica. By accepting this policy you consent to that transfer, which is made only to providers maintaining safeguards equivalent to those required by Law No. 8968.
The store is intended for adults. We do not knowingly collect data from minors. If we find that an account was created with a minor's data without the authorisation of their legal guardian, we will delete it.
Under Law No. 8968 you have the right to: - Access the personal information we hold about you - Ask us to correct inaccurate, incomplete or outdated data - Ask for your account and data to be deleted, except for the order and payment records we are legally required to retain - Withdraw the consent you gave, without affecting the lawfulness of prior processing - Withdraw your consent to marketing communications - File a complaint with the Data Protection Agency (PRODHAB) To exercise these rights, write to the address at the bottom of this page. We answer within five business days of receiving your request.
We reserve the right to update this privacy policy. Changes are published on this page along with the update date; if a change materially affects how we process your data, we will notify you by email before it takes effect. We recommend reviewing this policy periodically.
If you have any question about how we handle your information, write to us at info@itimportracing.store