Privacy Policy - Crustello (Brand of RaceBox Motorsport LLC)
Last updated: January 8, 2026
Crustello ("Crustello", "we", “our", or “us"), operating under the brand RaceBox Motorsport LLC, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and related services.
-
Information We Collect
We collect information to provide better services to all our users.
- Personal Information: Name, email address, shipping address, and phone number.
- Payment Information: We utilize third-party payment processors (e.g., Stripe, PayPal) to process payments. We do not store full credit card details on our servers.
- Device Information: IP address, browser type, operating system, and device identifiers.
- Usage Data: Pages visited, time spent, clicks, and interactions.
- Location Data: Approximate location (derived from IP address) for service optimization and tax calculation purposes.
- User Content and Images: We may collect images, photographs, or other media files that you voluntarily upload to our services (e.g., for profile customization, product reviews, or specific feature usage).
-
How Do We Use Your Information?
We process your data based on the following legal grounds (GDPR/UK GDPR):
- Contractual Necessity: To process transactions, ship products, and manage your orders.
- Legitimate Interests: To improve our website, prevent fraud, and ensure security.
- Consent: To send marketing communications (which you can opt-out of at any time).
- Legal Obligation: To comply with tax laws and other regulatory requirements.
-
International Data Transfer
Important for EU/EEA Users:
RaceBox Motorsport LLC is located in the United States. Information we collect is processed and stored on servers in the USA. The data protection laws in the United States may differ from those in your jurisdiction.
By using our services, you acknowledge that your information will be transferred to and processed in the United States. We take appropriate measures to ensure your data is treated securely, utilizing mechanisms such as Standard Contractual Clauses (SCCs) where applicable for data transfers from the EU/EEA.
-
Sharing Your Information
We do not sell your personal data. We may share your information with:
- Service Providers: Third-party vendors who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, and customer service.
- Legal Authorities: If required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
- Business Transfers: Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
-
Data Retention
We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations (for example, keeping billing records for tax laws), resolve disputes, and enforce our legal agreements and policies.
-
Your Rights (GDPR & CCPA)
Depending on your location (including the European Economic Area), you have the following rights:
- Right to Access: Request copies of your personal data.
- Right to Rectification: Request that we correct any information you believe is inaccurate.
- Right to Erasure: Request that we erase your personal data ("Right to be Forgotten"), under certain conditions.
- Right to Restrict Processing: Request that we restrict the processing of your personal data.
- Right to Object: Object to our processing of your personal data.
- Right to Data Portability: Request that we transfer the data that we have collected to another organization, or directly to you.
- Right to Withdraw Consent: Withdraw your consent at any time where we relied on your consent to process your personal information.
- Right to Complain: You have the right to lodge a complaint with a supervisory authority (Data Protection Authority) about our collection and use of your Personal Data.
- To exercise any of these rights, please contact us at support@crustello.com.
-
Children's Privacy
Our services are not intended for children under 13 (or under 16 in certain EU jurisdictions). We do not knowingly collect personal data from minors. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.
-
Security
We implement reasonable administrative, technical, and physical security measures to protect your personal information. However, please remember that no method of transmission over the internet, or method of electronic storage is 100% secure.
-
Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with a revised "Last updated" date. Continued use of our services implies acceptance of the updated policy.
-
Cookies Policy
We use cookies and similar tracking technologies to track the activity on our Service and store certain information. For detailed information on the cookies we use, the purposes for which we use them, and how you can manage your preferences, please visit our dedicated Cookies Policy.
-
Contact Us
For questions or concerns, contact us.