Deep Roots Garage — Privacy Policy

Effective date: October 5, 2026

About this policy

Deep Roots Garage gives enthusiast and collector vehicles a permanent home for their stories and history. This policy explains how we collect, use, and share personal information through our website, forms, communications, and vehicle-registry services.

For privacy questions or requests, contact letsgo@deeprootsgarage.com.

Information we collect

Information you provide. When you contact us, sign up for updates, submit a business-interest request, or participate in the registry, you may provide your name, email, organization, website, interests, general location, and messages. Registry submissions may also include vehicle details, authentic photographs, stories, ownership periods, documents, and source information. We record your communication choices and relevant consent records.

Only provide information you are entitled to share. Avoid submitting private addresses, financial details, or personal information about another person unless necessary and appropriately authorized. Public business contact details and private personal contact details are handled separately.

Technical information. Our website and service providers may receive information such as an IP address, browser and device details, referring pages, and interactions with our site or forms. Cookies and similar technologies may support site functions, security, and analytics. The website’s cookie information and controls describe the technologies actually in use.

How we use information

We use information to respond to inquiries; process requested registrations and submissions; maintain vehicle records and supporting evidence; review contributions and disputes; manage profile permissions; operate and secure our services; prevent spam and abuse; and improve our service.

When you choose to receive marketing emails, we use your email address and selected interests to send relevant Deep Roots Garage news and updates. A newsletter signup is not proof of a paid membership. Customer status, audience interests, and email permission are maintained separately.

Public profiles and private information

Vehicle history and approved profile content may become public after review and publication approval. Public material can be viewed, copied, or shared by others.

Full VIN and chassis information is private by default. Publishing an allowed VIN fragment or full VIN requires the applicable permission and review. Private account details, private evidence documents, personal contact information, and exact private addresses are not automatically included in public profiles.

Protected contact requests do not automatically reveal an owner’s identity or contact details. A search, contribution, or claimed match does not automatically establish ownership or grant management access.

When profile management changes, we preserve the vehicle’s approved history while keeping the former manager’s private account, billing, messages, contact details, and private documents separate.

Service providers and other disclosures

We use service providers to operate our website, contact management, registry, communications, security, and automation. The planned service stack includes Duda, HubSpot, Airtable, Make, and Google services. Google reCAPTCHA may be used to prevent automated abuse. Relevant providers process information under their applicable terms and privacy practices.

We may disclose information when required by law, to respond to valid legal requests, to protect rights or safety, to investigate misuse, or in connection with a business reorganization subject to applicable safeguards. We may also share information at your direction, including content you choose to publish.

We do not sell personal information or share it for third-party cross-context behavioral advertising.

Email choices

Marketing consent is separate from a request for service. You can unsubscribe through a marketing email or contact us at the address above. We may retain a limited suppression record to respect your choice. Essential responses and service communications may continue when necessary to address your request or account.

Retention and privacy requests

We retain personal information only as needed for the purposes described in this policy, including operating the service, preserving supported vehicle history, resolving disputes, meeting legal requirements, and honoring communication choices. Retention depends on the type of record and its purpose.

You can contact us to request access, correction, or deletion of your personal information, or to withdraw a consent where applicable. We may need to verify your identity and authority before acting. Applicable law and legitimate record-preservation requirements may limit some requests. Deleting a private account does not necessarily remove every independently supported vehicle-history fact; we will assess the personal information within those records separately.

Security and processing locations

We use reasonable organizational and technical measures to protect information. No internet transmission or storage method can guarantee absolute security. Our providers may process information in locations different from where you live, subject to applicable legal requirements and provider arrangements.

Children

Our services are not directed to children under 13. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate and take appropriate action.

Changes

We may update this policy as our service and practices change. We will post the updated policy and effective date and provide additional notice when required.