Privacy Policy

Last updated: June 24, 2026

This Privacy Policy explains how SUPREMACY collects, uses, stores and protects personal data when you visit x3supremacy.eu, create an account, place an order, buy vinyl/custom handmade parts, use our garage/public profile/community features, contact us, connect Google Calendar, or otherwise use our services.

For questions about this policy or your personal data, contact us at support@x3supremacy.eu.

1. Who We Are

SUPREMACY operates x3supremacy.eu, an online store and community platform focused on automotive vinyl, decals, banners, handmade/custom parts, garage profiles, workshop/service appointments, reviews, social/community features and customer support.

For GDPR purposes, SUPREMACY is the controller of the personal data processed through this website, except where another provider acts as an independent controller, such as a payment provider, shipping carrier or Google when you connect your Google account.

2. Data We Collect

We may collect the following categories of data:

Account data: name, username, email address, password/account authentication data, profile details, login/security logs, account activation state and preferences.
Order, checkout and billing data: products ordered, product options, custom text, colors, dimensions, design choices, prices, discounts, coupons, wallet/referral usage, order notes/messages, billing/shipping addresses, phone number, NIF/VAT or tax details where applicable, payment method/status, invoices/receipts and refund/return history.
Custom production data: design approvals, change requests, customer instructions, uploaded references, images, files, vehicle details, selected materials and other information needed to produce vinyl, decals, banners or handmade/custom parts.
Garage and vehicle data: vehicles, specs, images, notes, mileage, privacy choices, likes, build reputation, linked products and public profile display settings.
Community data: public profile content, follows/followers, social feed posts, chat messages, comments, reactions, reviews, reports, moderation history and uploaded media.
Support and order conversation data: messages between you and SUPREMACY, attachments/images, approval/change confirmations, service updates and admin/customer notes.
Workshop and appointment data: bookings, repairs, service history, mechanic assignments, appointment dates/times, locations, reminders, repair status and related customer/vehicle details.
Calendar data: if you connect Google Calendar, OAuth tokens and appointment/event data needed to create, update or remove SUPREMACY appointments in your calendar.
Technical data: IP address, browser/device data, cookies, session data, language preference, search queries, security/spam prevention signals, usage information and logs needed to operate and protect the website.

3. How We Use Data

We use personal data to:

Create, verify, secure and manage your account.
Process orders, manual orders, payments, refunds, shipping labels, tracking, invoices, returns and customer support.
Produce custom vinyl, decals, banners, handmade parts and other made-to-order products according to your instructions.
Provide garage, public profile, social feed, chat, reviews, notifications, referral/wallet and search features.
Schedule and manage workshop/service appointments and repair updates.
Send order updates, appointment reminders, review requests, account/security notices, notification digests and service communications.
Prevent spam, fraud, abuse, unauthorized access and platform misuse.
Improve the website, products, customer experience and operational workflows.
Comply with legal, tax, accounting, consumer protection and regulatory obligations.

4. WooCommerce, Payments and Store Providers

Our store is built with WooCommerce/WordPress technology. WooCommerce helps power checkout, carts, orders, coupons, customer accounts, product options and related store functionality. SUPREMACY remains responsible for our store policies and how we configure and use those systems.

When you place an order, payment and shipping-related data may also be processed by payment providers, banks, anti-fraud tools, shipping/carrier services, label providers, email/SMS services and other connected services needed to complete the transaction. These providers may have their own privacy terms when they act as independent controllers.

We do not store full card numbers on our website. Payment details are handled by payment providers according to their security rules.

5. Google Calendar Integration

If you choose to connect Google Calendar, SUPREMACY requests access only for the purpose of syncing appointments related to your orders, workshop bookings or services.

We use Google Calendar access to create, update and delete SUPREMACY appointment events. We do not use Google Calendar data for advertising, profiling unrelated to the service, resale, or training AI models. We do not sell Google user data.

You can disconnect Google Calendar from your account/settings page or revoke access directly from your Google Account permissions. After disconnecting, SUPREMACY will stop syncing future changes unless you reconnect.

Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

6. Emails, Notifications and Preferences

We may send service emails and website notifications for order status, production updates, order messages, appointments, repair updates, reviews, account activation, password/account security, wallet/referrals and unread notification digests.

You can manage available notification preferences in your account. Some service or legal communications may still be sent when necessary to provide the service, protect your account or comply with legal obligations.

7. Legal Bases Under GDPR

Depending on the situation, we process data under one or more of these legal bases:

Contract: to provide your account, orders, custom products, appointments, repairs and requested services.
Consent: for optional features such as marketing/news preferences, certain cookies, public profile choices or Google Calendar connection.
Legitimate interests: to secure the website, prevent abuse, improve services and communicate about active orders or account activity.
Legal obligation: for accounting, tax, invoices, consumer protection and regulatory requirements.

8. Sharing Data

We may share data only when needed to operate the website and services, including with hosting providers, WordPress/WooCommerce-related systems, product option/upload tools, payment processors, shipping/carrier providers such as postal/parcel services, email/SMS/communication providers, security/spam protection services, analytics tools, Google Calendar when you connect it, and professional/legal/accounting advisors where required.

We do not sell your personal data.

9. Cookies, Security and Spam Prevention

We use cookies and similar technologies for essential website functions such as login sessions, cart/checkout, security, language preferences, account features, notification sessions and analytics.

We may use anti-spam and security tools, including CAPTCHA/Turnstile-style checks, IP/device checks and rate limits, to prevent fake accounts, spam registrations, attacks and abuse.

10. Public and Community Content

Some features are public by design, including public profiles, garage showcases, vehicle galleries, social posts, comments, reactions, reviews and follower/following information where enabled. Do not upload or publish content that you do not want other users to see.

Visibility and privacy settings may limit some public display, but content may still be retained for moderation, safety, legal or operational reasons.

11. Uploads and Media

When you upload images or files for reviews, order messages, vehicle profiles, social posts, product customization, repair records or support, we may store and process those files to provide the requested feature. We may compress, resize, moderate or remove media for performance, security, storage, legal or policy reasons.

12. Retention

We keep personal data only as long as needed for the purposes described in this policy. Order, invoice, payment, shipping, tax and accounting records may be retained for the legally required period. Account, profile, garage, social, appointment, repair and support data is generally kept while the account is active or as needed for security, dispute resolution and legal obligations.

Unverified accounts may be removed after a short activation period. Some logs and backups may remain temporarily before deletion.

13. Your Rights and Data Requests

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, object to processing, request portability, withdraw consent, or complain to a supervisory authority.

You may request data export or deletion through available account tools or by contacting us. Some information may need to be retained where required for invoices, tax, fraud prevention, legal claims, consumer protection or legitimate business records.

In Portugal, the supervisory authority is the CNPD – Comissao Nacional de Protecao de Dados. To exercise rights, contact support@x3supremacy.eu.

14. Security

We use technical and organizational measures designed to protect personal data, including access controls, account verification, authentication protections, security monitoring, upload validation and trusted service providers. No online system is completely risk-free, so users should keep passwords secure and notify us of suspicious account activity.

15. International Transfers

Some service providers may process data outside your country or the European Economic Area. Where required, we rely on appropriate safeguards such as contractual protections, adequacy decisions or other legally recognized transfer mechanisms.

16. Changes to This Policy

We may update this Privacy Policy when our services, legal obligations or data practices change. The latest version will be posted on this page with the updated date.

17. Contact

Email: support@x3supremacy.eu
Phone / WhatsApp:+351 938981888
Website: https://x3supremacy.eu