Privacy Policy
Effective Date: July 31, 2026
Last Updated: July 31, 2026
Land Cruiser Heaven LLC (“LCH”, “we”, “us”, or “our”) operates the landcruiserheaven.com website and related services (collectively, the “Service”). This Privacy Policy describes how we collect, use, disclose, and protect information when you interact with the Service, our online store, our repair shop, and our internal accounting integrations. This policy applies to landcruiserheaven.com, dashboard.landcruiserheaven.com, api.landcruiserheaven.com, and any subdomain we operate.
1. Who We Are
Land Cruiser Heaven LLC is a Maryland limited liability company operating an automotive parts e-commerce store and a repair and restoration shop specializing in Toyota Land Cruiser vehicles. Our principal place of business is:
Land Cruiser Heaven LLC
219 Frederick Street
Hagerstown, MD 21740
United States
Phone: (240) 347-3827
Toll-Free: 1-888-377-0710
Email: [email protected]
2. Information We Collect
2.1 Information You Provide Directly
- Contact information: name, email, phone, mailing and shipping addresses when you create an account, place an order, request a quote, or communicate with us.
- Payment information: credit card and other payment details processed through our payment processors (Authorize.Net, PayPal, Valor PayTech, and Intuit QuickBooks Payments). We do not store full card numbers on our servers.
- Vehicle information: vehicle identification number (VIN), model, year, and service history when you bring your vehicle to our shop or discuss repair services with us.
- Order and repair records: details of purchases, invoices, repair orders, and communications about services performed.
2.2 Information Collected Automatically
- Usage data: pages visited, browser type, device information, IP address, referral source, and interaction data collected through our website analytics.
- Cookies and similar technologies: we use cookies for authentication, cart persistence, and analytics. You can control cookies through your browser settings.
- Log data: our servers automatically record standard access logs, including timestamps, request URLs, response codes, and IP addresses.
2.3 Accounting-Integration Data
To operate our business, we integrate our internal accounting workflow with third-party financial systems, including Intuit QuickBooks Online, Tekmetric shop-management software, and our payment processors. In connection with these integrations, we access, process, and store:
- Customer names, contact information, invoice details, and repair-order details from Tekmetric
- Order, product, and transaction data from our WooCommerce online store
- Vendor lists, chart of accounts, transaction amounts, and dates from QuickBooks Online
- Receipt images and invoice PDFs forwarded to us by staff for expense categorization
- Payment settlement data (batch totals, fees, transaction IDs) from Authorize.Net, PayPal, and Valor PayTech
This data is used solely for our internal accounting, reconciliation, and financial reporting. It is not sold, shared with marketing partners, or used for purposes unrelated to operating our business.
3. How We Use Your Information
We use the information described above to:
- Process and fulfill your orders, quotes, and repair services
- Communicate with you about your orders, appointments, and questions
- Process payments and issue receipts, invoices, and refunds
- Maintain accurate accounting records and comply with tax and legal obligations
- Categorize expenses, reconcile bank transactions, and generate financial reports for internal management
- Detect, investigate, and prevent fraudulent or unauthorized activity
- Improve our website, product offerings, and customer service
- Send transactional emails (order confirmations, shipping updates, appointment reminders); marketing emails are sent only with your consent
4. Legal Bases for Processing
Where applicable law requires a legal basis for processing (for example, under the EU General Data Protection Regulation for EU residents who interact with our online store), we rely on:
- Contract: to fulfill orders and provide services you have requested
- Legal obligation: to comply with tax, financial-reporting, and warranty laws
- Legitimate interest: to operate our business, improve our services, and prevent fraud
- Consent: where you have opted into optional marketing communications or cookies
5. How We Share Information
We do not sell your personal information. We share information only with:
5.1 Service Providers and Sub-Processors
We use a small number of trusted service providers to run our business. Each is contractually bound to protect your information and use it only for the services they perform for us.
| Category | Provider | Purpose |
|---|---|---|
| Cloud hosting & infrastructure | Amazon Web Services (AWS) | Compute, storage, secrets management, receipt-processing pipeline |
| Content delivery & security | Cloudflare | Website acceleration, DDoS protection, TLS termination |
| Email & productivity | Google Workspace | Business email, shared drive, calendar |
| Website analytics | Google Analytics | Aggregate usage statistics |
| E-commerce platform | WordPress + WooCommerce | Online store operation |
| Marketplace channels | BigCommerce | Additional storefront channels |
| Accounting | Intuit QuickBooks Online | General ledger, invoicing, financial reporting |
| Shop management | Tekmetric | Repair-order management for the shop |
| Payment processing | Authorize.Net, PayPal, Valor PayTech, Intuit QuickBooks Payments | Card and ACH payment processing |
| Shipping carriers | UPS, FedEx, USPS, DHL, and freight carriers as applicable | Order fulfillment and tracking |
5.2 Legal and Safety Disclosures
We may disclose information when we reasonably believe it is required to comply with a valid legal process (subpoena, court order, or lawful request from a government authority), to enforce our Terms of Service, to protect the rights, property, or safety of LCH, our customers, or the public, or in connection with an actual or proposed sale, merger, or corporate reorganization.
5.3 No Sale of Personal Information
We do not sell your personal information to third parties, and we do not share it for cross-context behavioral advertising as defined under the California Consumer Privacy Act and similar state laws.
6. Where Your Information Is Stored
We are located in the United States and store data in United States data centers, primarily in the AWS US East (N. Virginia) region. If you interact with our Service from outside the United States, your information will be transferred to, stored in, and processed in the United States. By using the Service, you consent to that transfer.
7. Data Retention
We retain personal information only as long as necessary for the purposes described in this policy and to comply with our legal obligations. Typical retention periods:
- Order and repair records: at least 7 years, to meet accounting, warranty, and tax-record retention requirements
- Customer account data: for as long as your account is active, plus a reasonable period thereafter
- Website analytics data: retained by Google Analytics per our default settings (currently 14 months for user-level data)
- Receipt images and financial-integration data: retained for the same period as related accounting records
- Server logs: typically 30 to 90 days, depending on the system
When information is no longer needed, we delete it or anonymize it. Some data may persist in backup systems for a limited additional period before being cycled out.
8. Data Security
We implement industry-standard technical and organizational safeguards to protect your information, including:
- Encryption in transit using TLS 1.2 or higher
- Encryption at rest for stored data using provider-managed keys (AWS S3 server-side encryption, AWS Secrets Manager, and equivalent controls at other providers)
- Role-based access controls and the principle of least privilege for internal systems
- Multi-factor authentication for administrative access to critical systems
- Audit logging for sensitive operations, including our accounting and financial integrations
- Regular reviews of access, credentials, and third-party integrations
No system is perfectly secure. We cannot guarantee absolute security of information transmitted over the Internet or stored electronically, but we work to protect it in accordance with applicable law and industry practice.
9. Your Choices and Rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a portable copy of your personal information, and to object to certain processing. These rights include, without limitation:
- Access: request a copy of the personal information we hold about you
- Correction: ask us to correct inaccurate or incomplete information
- Deletion: ask us to delete your personal information, subject to legal and legitimate-interest exceptions (for example, we must retain records required by tax law)
- Portability: receive your data in a machine-readable format
- Opt out of marketing: unsubscribe from marketing emails at any time using the link in each email
- Cookies: control cookies through your browser
To exercise these rights, email [email protected] or write to the address in Section 1. We may need to verify your identity before responding. We will respond within a reasonable time and, where required, within statutory deadlines (typically 30 to 45 days).
9.1 California Residents (CCPA / CPRA)
California residents have specific rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to know, delete, correct, opt out of sale or sharing, and be free from discrimination for exercising these rights. As noted in Section 5.3, we do not sell personal information or share it for cross-context behavioral advertising.
9.2 European Union / United Kingdom Residents
EU and UK residents have rights under the GDPR and UK GDPR, including the rights described above and the right to lodge a complaint with a data protection authority.
10. Children’s Privacy
Our Service is not directed to children under 13 (or the equivalent minimum age under applicable local law), and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
11. Third-Party Links
Our Service may include links to third-party websites (for example, shipping carrier tracking pages, product manufacturers, or partner shops). We are not responsible for those sites’ privacy practices. Please review their privacy policies before providing information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The revised policy will be posted at this URL with a new “Last Updated” date. Material changes will be highlighted or communicated more prominently. Continued use of the Service after changes means you accept the updated policy.
13. How to Contact Us
For questions about this Privacy Policy or how we handle your information:
Land Cruiser Heaven LLC
Attn: Privacy
219 Frederick Street
Hagerstown, MD 21740
United States
Email: [email protected]
Phone: (240) 347-3827