Privacy Policy
This policy explains what information Mechman Alternators collects when you visit mechman.com, place an order, or contact us; what we do with it; who receives it; and the choices you have. It is written to be read, not skimmed, so it is longer than most. The short version: essential functions always run, everything else waits for your permission, and you can change your mind at any time.
1. Who we are and what this policy covers
mechman.com is operated by Honest Solutions, LLC, doing business as Mechman Alternators ("Mechman," "we," "us"), 1035 Data Lane, Knoxville, Tennessee 37932. We manufacture and sell high-output alternators and related products.
Honest Solutions, LLC also operates enginestand.com, which has its own privacy policy describing that site. The two sites use different tools and collect different things, so the policies differ. Your rights, the company you are dealing with, and the process for making a request are the same either way, and a request sent to either site reaches the same company.
This policy covers information collected through mechman.com, through orders placed on it, and through our customer service channels (email, phone, and support tickets). It does not cover other websites we link to, or the separate websites of our resellers.
2. Information we collect
Information you give us
- Order and account information: name, email address, billing and shipping address, phone number, and the products you buy. Payment card numbers are entered directly with our payment processor and are not stored by Mechman.
- Vehicle and application details you provide when asking for a recommendation or submitting a support ticket — year, make, model, engine, electrical accessories, and similar.
- Communications: what you write in a support ticket, contact form, product review, or email; what you tell us when you call; and, because calls to our phone line are recorded, the recording and transcript of the call. You are told at the start of the call that it is being recorded.
- Account credentials if you create an account, stored in hashed form by our platform.
Information collected automatically
- Standard request data that every web server receives: IP address, browser type and version, device type, operating system, the page requested, the page you came from, and the time of the request.
- Site activity such as pages viewed, products viewed, items added to the cart, and searches — collected by our platform to run the store, and by analytics and advertising services only if you allow them (see Section 4).
- Cookies and similar identifiers, described in Section 4.
Information from other sources
- Fraud-screening results from our fraud-prevention provider, which evaluates orders using the order details and standard request data.
- Advertising platform reporting — aggregate campaign performance from Google, Meta, and Microsoft. We do not receive individual profiles from them.
We do not knowingly collect sensitive personal information such as government ID numbers, precise geolocation, health information, or biometric data, and we do not ask for it.
3. How we use information
- To process, fulfill, ship, and support your orders, including warranty and return handling
- To answer your questions and give product recommendations
- To screen orders for fraud and protect the security of the store
- To run and improve the website, including analytics if you allow it
- To measure and improve our advertising, and to show you relevant ads on other sites, if you allow it
- To invite you to review a purchase, if you allow it
- To send order confirmations, shipping updates and other emails about a purchase, and — if you started a checkout and left before completing it — a reminder about the items in your cart, which you can stop at any time. We do not send a marketing newsletter.
- To comply with law, enforce our terms, and resolve disputes
We do not use your information to make automated decisions that have legal or similarly significant effects on you.
4. Cookies, tracking technologies, and your consent choices
When you first visit mechman.com, a banner asks which categories of data collection you allow. Nothing outside the Essential category runs until you allow it. The categories are:
| Category | What it does | Who receives data | Default |
|---|---|---|---|
| Essential | Makes the site work: your cart, checkout, login, fraud screening, the consent banner itself, and the delivery of fonts and code libraries. | BigCommerce (our platform), payment and fraud-screening providers, static-asset delivery networks | Always on |
| Functional | Enhanced features: customer review displays, financing messaging, embedded videos, and post-purchase review invitations. | Shopper Approved, Affirm, YouTube (the video player loads only when you press play; a thumbnail image is fetched from Google's image server when the page loads) | Off until you allow it |
| Analytics | Statistics about how the site is used so we can improve it. | Google Analytics | Off until you allow it |
| Targeting / Advertising | Measures our ads and lets our advertising partners show you relevant ads elsewhere. Shares identifiers about your visit with those partners. For California residents this is the "sale or sharing" of personal information described in Section 7; under other states' laws it is "targeted advertising." Declining this category is your opt-out, wherever you live. | Meta, Google Ads, Microsoft Advertising, Google Merchant Center | Off until you allow it |
To change your choices at any time: visit Your Privacy Choices (also linked in the footer of every page) or use the Manage Website Data Collection Preferences link at the bottom of every page. Your choices are stored in a cookie named bc_consent and apply on your next page load. Clearing your browser's cookies resets them and the banner will appear again.
Some content only contacts a third party when you ask for it: the YouTube video player loads only when you press play (a static thumbnail image is fetched from Google's image server, i.ytimg.com, when the page loads — it sets no cookies and runs no player code), and our support ticket form loads from Freshdesk only when you open it. These are not gated by the banner because your click is the request.
Our platform, BigCommerce, sets cookies that are necessary to run the store (session, cart, and security cookies). These are Essential and cannot be turned off without breaking the site.
5. Global Privacy Control and Do Not Track
Global Privacy Control (GPC). If your browser or extension sends the Global Privacy Control signal, we treat it as an opt-out of the sale or sharing of your personal information: the Targeting / Advertising category is denied automatically on your first visit, without you having to do anything. You can still allow Functional and Analytics if you wish. If you later choose "Accept All Cookies" on the banner, that explicit choice is honored over the automatic signal until you change it again. GPC is detected through the browser's navigator.globalPrivacyControl property; we cannot read the corresponding request header on our hosting platform, so a small number of tools that send only the header may not be detected.
Do Not Track. Our platform does not respond to browser "Do Not Track" signals, which have no agreed-upon meaning. Use GPC or the consent banner instead.
6. Third parties that receive personal information
This is the complete list of companies that receive information from or about visitors to mechman.com, what they receive, and when. "Standard request data" means IP address, browser and device information, the page requested, and the referring page — what any server receives when a browser requests something from it.
A service provider works for us under a contract that limits how it may use the information. A third party may use the information for its own purposes, including advertising.
| Company | What they do for us | Information they receive | When | Role |
|---|---|---|---|---|
| Always on — Essential | ||||
| BigCommerce, Inc. | Hosts the store, processes orders and checkout, runs the consent banner | Everything you enter on the site and standard request data | Always | Service provider |
| Payment processors — Braintree (a PayPal service) for card payments, PayPal, Google Pay, Affirm | Process payment at checkout; Affirm also offers financing | Payment details you enter with them, order amount, billing name and address | At checkout, when you choose that method | Service provider for the transaction; each also operates under its own privacy policy for any account you hold with it |
| Google LLC — reCAPTCHA Enterprise and Google Pay assets | Bot protection and the Google Pay button, loaded by our payment provider inside the checkout page | Standard request data | On the checkout page, in every consent state — this is part of the payment system and cannot be turned off separately | Service provider (payment infrastructure) |
| Shipping carriers — FedEx, UPS, USPS | Deliver your order | Name, shipping address, phone number | When we ship | Service provider |
| Subuno | Screens orders for fraud | Order details, billing and shipping address, email, phone, IP address, device information | When you place an order | Service provider |
| Static-asset delivery — Cloudflare (cdnjs), Google Fonts, and a SecurityMetrics PCI badge image on the About and Cart pages | Deliver fonts and code libraries the site uses | Standard request data only; no cookies | Every page | Service provider (infrastructure) |
| SEOKart | Generates structured data for search engines. Its code runs on our pages but contacts no SEOKart server; SEOKart's own policy states it does not access or store any information about our customers. | None from visitors. SEOKart holds our product catalogue information (names, descriptions) as a merchant tool. | — | Service provider (merchant tool; no visitor data) |
| Only when you contact us | ||||
| Freshworks (Freshdesk) | Runs our support ticket system | Whatever you type into a ticket — name, email, order number, vehicle details, your question | Only when you open and submit the ticket form | Service provider |
| Smith.ai | Answers our phone line. Calls are recorded and transcribed; you are told at the start of the call. Smith.ai keeps recordings and transcripts for 90 days, does not share them with anyone else, and does not use them for marketing. | Your name, phone number, the reason for your call, and the recording and transcript of the call | When you call | Service provider |
| BigCommerce (order and cart emails) | Sends order confirmations, shipping updates, and — if you entered an email address at checkout and left before completing the order — a reminder about the items in your cart | Email address, name, order details, and the contents of an abandoned cart | After an order, or after an abandoned checkout. Cart reminders include an unsubscribe link. | Service provider |
| Functional — only if you allow it | ||||
| Shopper Approved | (a) Displays our customer ratings and reviews on the site (b) Sends you an invitation to review your purchase |
(a) Standard request data (b) Your name, email address, order number, and the products you bought |
(a) When you allow Functional (b) After an order, only if you allowed Functional |
Service provider |
| Affirm (via the Affirm Marketing app by MiniBC) | Shows financing options on product and category pages | Standard request data and the product or price viewed | When you allow Functional | Third party — Affirm's own privacy policy applies to financing decisions |
| YouTube (Google LLC) | Plays embedded videos | On page load: standard request data only, for the thumbnail image (i.ytimg.com, no cookies). On play: standard request data and what you watch, through youtube-nocookie.com | Thumbnail on page load; player only when you press play | Third party |
| Analytics — only if you allow it | ||||
| Google Analytics 4 (Google LLC) | Tells us how the site is used | A pseudonymous visitor ID, pages and products viewed, device and browser, approximate location derived from IP address (IP itself is not stored by Google Analytics 4) | When you allow Analytics | Service provider under Google's data processing terms. Google Analytics' own advertising features are turned off in our tag, and it is told to treat advertising permission as denied unless you have allowed Targeting / Advertising. |
| Targeting / Advertising — only if you allow it. This is "sharing" under California law. | ||||
| Meta Platforms, Inc. (Meta Pixel) | Measures ads we run on Facebook and Instagram; lets Meta show you our ads there | Cookie and browser identifiers, IP address, pages and products viewed, purchases and order value | When you allow Targeting / Advertising | Third party |
| Google LLC (Google Ads) | Measures ads we run on Google; remarketing | Cookie and browser identifiers, IP address, pages viewed, purchases and order value | When you allow Targeting / Advertising | Third party |
| Microsoft Corporation (Microsoft Advertising) | Measures ads we run on Bing; remarketing | Cookie and browser identifiers, IP address, pages viewed, purchases and order value | When you allow Targeting / Advertising | Third party |
| Google LLC (Merchant Center store badge) | Displays our Google store rating badge | Standard request data | When you allow Targeting / Advertising | Third party |
| Logical Position | Advertising agency that manages our Google and Microsoft campaigns | Does not receive data from the site. Sees campaign reporting inside the Google and Microsoft platforms. | — | Service provider |
We also disclose information when the law requires it, to protect our rights or the safety of others, and as part of any sale or reorganization of our business. We do not sell personal information to data brokers, and we do not give it to anyone not listed here except as this paragraph describes.
7. Sale, sharing, and targeted advertising
We do not sell personal information for money.
California law also counts as a "sale" or "sharing" the disclosure of identifiers to advertising companies for cross-context behavioral advertising — the practice of showing you ads on other sites based on what you looked at here. When you allow the Targeting / Advertising category, the companies listed under that heading in Section 6 receive identifiers and site activity for that purpose. That is the only sale or sharing we engage in. Under our current consent controls, this occurs only with your permission, and you can withdraw it at any time through the links described in Section 4.
Other states with privacy laws treat this same disclosure as "targeted advertising," and some as a "sale," and give you the right to opt out. The Targeting / Advertising choice is that opt-out, wherever you live.
We do not knowingly sell or share the personal information of anyone under 16.
8. How long we keep information
| Information | Kept for | Why |
|---|---|---|
| Order and invoice records (name, addresses, products, amounts) | A minimum of 7 years, and for as long as a product remains under warranty | Tax, accounting, and warranty obligations — the record that proves your purchase is kept for as long as the warranty can be claimed |
| Account information | For as long as the account is open, and afterwards for as long as needed to resolve any open order, warranty claim, or dispute | So you can log in and see your history, and so we can service what you bought |
| Support tickets and correspondence | For as long as needed to resolve the matter and any follow-up, warranty claim, or dispute that arises from it | To handle follow-up questions and warranty claims |
| Phone call recordings and transcripts | 90 days at Smith.ai, then deleted, unless we download a recording to resolve a specific matter, in which case it is kept with that matter's correspondence | Quality, training, and resolving what was discussed on the call |
| Abandoned-cart reminder emails | Sent within a few days of the abandoned checkout, then stop; unsubscribe at any time | To let you finish an order you started |
| Fraud-screening results | Held by Subuno under its own policy; we keep only whether the order was accepted, as part of the order record | To recognize repeat fraud |
Consent choices (bc_consent cookie) | 12 months in your browser | So we remember your choice |
| Analytics data (Google Analytics 4) | Event-level data 2 months; user-level data 14 months, restarting if you return | Set in our Google Analytics account; aggregated reports are retained by Google separately |
| Server logs | Set by BigCommerce; Mechman does not retain them separately | Platform security |
Advertising partners keep the information they receive according to their own policies; the links in Section 6 lead to them. When information is no longer needed for the purpose it was collected for, we delete it or make it anonymous.
9. How we protect information
Every connection to mechman.com is encrypted (TLS). Payment card details are entered directly with our payment processors and never pass through Mechman's systems. Access to order and customer information inside our platform is limited to staff who need it. Our platform, BigCommerce, is certified to the Payment Card Industry Data Security Standard. No method of transmission or storage is perfectly secure; if we learn of a breach affecting your information, we will notify you as the law requires.
10. Children
mechman.com is not directed to children under 13 and we do not knowingly collect information from them. If you believe a child has provided us information, contact us and we will delete it.
11. Your privacy rights
Wherever you live, you can:
- Change your cookie and tracking choices at any time (Section 4)
- Stop cart reminder emails using the link in any message
- Ask what information we hold about you, ask us to correct it, or ask us to delete it
- Get a copy of the information you gave us in a usable format
Section 12 describes additional rights for California residents. Residents of other U.S. states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others) have substantially similar rights of access, correction, deletion, portability, and opt-out of targeted advertising, and may appeal a decision on a request as described in Section 13. We honor those rights for all U.S. residents regardless of state.
12. Additional information for California residents
This section supplements the rest of the policy for California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA").
Categories of personal information
In the twelve months before the effective date, we collected the following categories, from the sources and for the purposes described in Sections 2 and 3:
| Category | Examples | Collected | Disclosed to service providers | Sold or shared |
|---|---|---|---|---|
| Identifiers | Name, email, address, phone, IP address, cookie IDs | Yes | Yes | Yes — cookie and device identifiers, to advertising partners (see Section 7) |
| Customer records | Billing and shipping details, order history; payment card details go directly to processors | Yes | Yes | No |
| Commercial information | Products purchased or considered | Yes | Yes | Yes — products viewed and purchased, to advertising partners (see Section 7) |
| Internet or network activity | Pages viewed, browser and device information, interactions with the site | Yes | Yes | Yes — to advertising partners (see Section 7) |
| Geolocation | Approximate location inferred from IP address; no precise geolocation | Yes | Yes | No |
| Audio recordings | Phone calls to our line are recorded and transcribed; you are told at the start of the call | Yes | Yes (Smith.ai) | No |
| Inferences | Advertising partners may draw inferences from the activity they receive; Mechman does not build profiles | No (by Mechman) | No | Advertising partners may, with consent |
| Sensitive personal information | Account password only, stored hashed by our platform | Yes, that item only | No | No |
We do not collect the remaining CCPA categories (protected classifications, biometric information, visual recordings, professional or education information).
Your CCPA rights
- Right to know what personal information we have collected about you, the sources, the purposes, and the third parties we disclosed it to
- Right to delete personal information we collected from you, subject to exceptions (for example, we must keep order records for tax purposes)
- Right to correct inaccurate personal information
- Right to opt out of sale or sharing — exercise it at Your Privacy Choices, through the Manage Website Data Collection Preferences link at the bottom of every page, or by enabling Global Privacy Control in your browser (Section 5)
- Right to limit use of sensitive personal information — we do not use sensitive personal information for any purpose that would trigger this right
- Right to non-discrimination — we will not deny you service, charge a different price, or provide a different quality of service because you exercised these rights
We do not offer financial incentives in exchange for personal information.
Authorized agents
You may designate an agent to make a request on your behalf. We will ask the agent for written permission signed by you and may ask you to verify your identity directly with us. An agent may submit an opt-out of sale or sharing on your behalf without additional verification.
Nevada residents
We do not sell personal information as that term is defined in Nevada law.
13. How to exercise your rights and contact us
Send requests to contact@mechman.com with the subject line Privacy Request, or call 1 (888) MECHMAN. You may also write to the address in Section 1.
Verification. Before acting on a request to know, delete, or correct, we confirm it is you by matching the information you provide (typically name, email, and a recent order number) against our records. We will not ask for more than we need, and we use what you send for verification only. Opt-out requests are not verified.
Timing. We confirm receipt within 10 business days. We respond to requests to know, delete, or correct within 45 days; if we need longer, we will tell you why and take no more than an additional 45 days. Opt-outs take effect within 15 business days. Cookie and tracking choices made through the banner take effect on your next page load.
Appeals. If we decline a request, we will explain why. You may appeal by replying to our response with the word Appeal in the subject line; a different person will review it and respond within 45 days. If you are not satisfied, California residents may contact the California Privacy Protection Agency, and residents of other states may contact their state attorney general.
Questions about this policy go to the same address.
14. Changes to this policy
When we change this policy we update the effective date at the top. For changes that materially affect how we use information you have already given us, we will also post a notice on the site or email account holders. This version replaces the policy dated May 1, 2025 and provides updated and expanded information regarding our current privacy practices, service providers, advertising technologies, and consent controls. The consent banner described in Section 4 went live on September 4, 2026; Global Privacy Control handling described in Section 5 on September 8, 2026; and the last advertising integration operating outside those controls was removed on September 9, 2026.
Honest Solutions, LLC d/b/a Mechman Alternators
1035 Data Lane, Knoxville, TN 37932
contact@mechman.com · 1 (888) MECHMAN