How We Handle Information You Share With Us.

01 / WHO AND WHAT THIS COVERS

Who Is Responsible for This Website?

This preview identifies the brand as TURBO TOP. The legal entity that operates the production website has not been confirmed. The brand name may not be the legal entity that decides how information is processed.

Until those details are approved, this page is a development disclosure, not a complete production privacy notice. It covers the public website, product and Insights pages, Build Your Car, Request a Quote, Contact, factory-visit requests, Support, Warranty, Spare Parts, dealer and venue forms, event inquiries, file selection and request-related communications.

It does not govern a third-party website, social network, map, carrier or other service reached through a link. Those services publish their own privacy information.

02 / INFORMATION YOU PROVIDE

Information You Choose to Share.

Depending on the route and fields you complete, information may include your name, email address, phone or WhatsApp number, company, role, country or city, website, project requirements, product interest, quantity, timeline and any optional budget or message.

A field shown as optional is not required to use the form. Do not send information that is not needed to explain your question.

03 / FILES & PROJECT MATERIALS

Files You Select or Upload.

Project references can include vehicle photographs, drawings, venue layouts, logos, brand guides, artwork, PDFs, component labels, support videos or warranty evidence. Those materials may contain personal, commercial or confidential information.

When a production service is connected, files should be used only to review the request, evaluate a technical or commercial project, provide support or handle a warranty or parts inquiry. The production operator must configure private storage, access restrictions, file validation, malware scanning where implemented and a deletion schedule before accepting uploads.

Please avoid unnecessary sensitive personal information. Do not upload passports, government IDs, payment-card data or unrelated personal files. A submitted logo or project image is not automatically approved for marketing, publication or a case study. Separate permission is required for public use. No confidentiality agreement is created merely by selecting or submitting a file.

04 / WEBSITE USAGE

Technical Information Collected When You Use the Site.

A production web host and security service may process standard request information such as IP address, browser and device characteristics, operating system, referring page, pages requested, time and date, and error or security events. Approximate region may be inferred from network information by a service. This website does not request precise GPS location or use a browser geolocation permission.

The production hosting provider and its log settings are not yet identified in this preview. The local development server used to view this package is not a production hosting or logging configuration. Confirm the real host, log fields and retention before launch.

05 / PURPOSES & BUSINESS GROUNDS

Why Information May Be Used.

If a live service is configured, information may be used to understand a project, prepare or follow up on a quotation, route a general message, review a factory-visit request, identify a vehicle or part, assess technical or warranty information, communicate about a request, maintain business records, prevent misuse, protect the website and improve the buyer experience.

Project and support information may be organized in business systems so the relevant sales, project, support or technical staff can review it. The site does not automatically approve a quotation, warranty claim or commercial project based solely on form processing. A business team must review the request.

Where privacy law requires a legal basis, the responsible entity must determine and document the basis for each activity in the markets it serves. The entity, markets and processing arrangement have not been approved for this preview, so this draft does not assign a final legal basis.

An inquiry is not a marketing subscription. If product or company updates are offered, the option must be separate, optional and unchecked by default, with an applicable way to withdraw consent or unsubscribe.

No email delivery or CRM system is connected in this package. If a production service sends a receipt or response about a submitted inquiry, the operator should describe the live channel and actual service provider here. Marketing messages require a separate choice where required by applicable law.

The preview does not make an automated decision about quotation approval, warranty eligibility, vehicle fit or commercial acceptance. The interactive tools provide planning guidance; a responsible business reviewer must confirm any production decision.

06 / COOKIES & DEVICE STORAGE

Cookies and Browser Storage.

The current site code does not set first-party cookies or include a cookie-consent manager. It uses browser storage in a few interactive flows. Browser storage stays on the device/profile where the page is opened; it is not itself a submission to the company.

Support, warranty and parts forms show local previews and do not save form entries through their current handlers. Selecting a file in those forms does not persist the file. If you use a shared device, clear a draft in the relevant tool or clear this site’s storage through your browser settings. A private browsing session may also limit storage.

No advertising or analytics cookie is configured in this package. If a consent manager, analytics tag or advertising technology is added, the owner must update this notice and verify that the control actually changes network behavior.

07 / ANALYTICS & CAMPAIGN SOURCES

Analytics and Advertising Attribution.

This package does not load Google Analytics 4, Google Tag Manager, Google Ads conversion tags, Meta Pixel, Microsoft Ads tags or a remarketing service. Several page scripts expose non-personal event names and selected categories through an in-memory data layer or a browser event hook. Without an analytics or tag script connected, those hooks do not send the event to an analytics provider.

Event designs are intended to use broad categories such as project type, vehicle category, quantity band, route or step number. Names, emails, phone numbers, company details, free-text messages, order or vehicle references, Build IDs and file names should not be sent to ordinary analytics. The configurator’s event handler filters event properties and does not include entered text. Verify this again in the browser network panel whenever tags or conversions are added.

Some inquiry routes can read campaign parameters such as utm_source, utm_medium, utm_campaign, utm_content, utm_term, gclid, gbraid and wbraid. These identifiers help describe a campaign source. In the preview, no live lead endpoint receives them. No Microsoft or Meta click identifier is currently configured for collection.

A production conversion should be recorded only after the connected server accepts a valid request, not simply because someone opened a Thank You URL. The site should not place contact details or free-text form answers in a URL. If advertising measurement, enhanced conversions or remarketing is later enabled, the owner must review consent, data sharing and regional requirements and revise this notice first.

08 / SYSTEMS & RECIPIENTS

Sharing and Service Providers.

The production website’s hosting, CRM, inquiry database, email provider, private file storage, security services and operational providers have not been selected or connected in this package. Do not treat a planned integration as an active recipient. Before a live form is enabled, list the actual provider names and processing roles here.

Web fonts are served from this website’s own assets. Loading a page does not request a Google Fonts stylesheet or font file from Google-hosted servers.

The current package contains no embedded Google Map, YouTube player, chat widget, CAPTCHA, social-media pixel or payment form. A link to an external site opens that service under its own terms. If the operator later embeds media or a map, that may cause a third-party request when the page loads or the embed is activated and this notice must be updated.

If live inquiry processing is enabled, information may be made available to service providers acting for the operator, relevant internal staff who need it to review the request, business partners involved in a requested project where necessary, logistics providers when needed for delivery, professional advisers or authorities where legally required. The actual recipients and safeguards must be confirmed before production. This draft does not make an unverified claim that information is never sold or shared under every applicable legal definition.

09 / INTERNATIONAL VISITORS

International Visitors and Cross-Border Processing.

The site is designed for buyers in multiple markets. When the production site, business systems or service providers are selected, information may be handled in countries other than the visitor’s country. The operator has not confirmed a production hosting region, CRM region, email infrastructure or transfer mechanism for this preview.

Do not assume that a specific adequacy decision, standard contractual clause, certification or other transfer mechanism applies. The responsible company must identify the actual locations and confirm any safeguards required by the laws that apply to its activities before launch.

10 / RETENTION & SECURITY

How Long Information Is Kept and How It Is Protected.

Browser draft periods are described above. The current preview has no production inquiry database, CRM, support system or upload storage, so no server-side retention period can be stated. Before launch, the operator should set and follow retention periods for unqualified inquiries, project and order records, support and warranty cases, marketing preferences, uploaded files, analytics and server logs. Records may need to be kept longer where contract, warranty, tax or legal obligations require it.

When production processing is enabled, reasonable technical and organizational safeguards should be selected for the information and service involved. These may include encrypted connections, role-based access, server-side validation, restricted file storage, malware scanning where implemented, backups and operational monitoring. This preview does not establish that a production backend or those controls are in place. No internet-based system can be guaranteed completely secure.

Production uploads should not be placed in a publicly browsable directory. Access should be limited to staff or providers who need a file for the related project, support, warranty or parts request; analytics users do not need access to customer attachments.

11 / YOUR CHOICES

Your Privacy Choices and Rights.

Depending on where you live and the laws that apply, you may have rights to request access to, correction of or deletion of personal information, or to request restriction, objection, portability or withdrawal of consent. Rights may be subject to legal exceptions, including records that must be kept for a contract, warranty, safety, tax or legal requirement.

The responsible entity and privacy request contact have not been supplied for this development preview. A production operator must publish a monitored contact route, verify requests proportionately and provide the rights required for each applicable market. A government ID should not be requested automatically; if extra verification is genuinely needed, explain why and request the minimum required.

Children’s privacy

This website is intended for adult buyers, business customers and people seeking product or project information. It is not designed to knowingly collect personal information directly from children. A young person should not submit a name, personal email, phone number or home address through a business inquiry form. If the operator learns that a child has sent personal information, it should follow a reviewed process to assess and address the request.

12 / LINKS & POLICY CHANGES

External Links, Legal Requests and Policy Updates.

External websites and platforms have their own privacy practices. Information may also be preserved or disclosed where required by applicable law or legal process, or where reasonably necessary to protect the rights, security and users of the website.

Information may be transferred as part of a merger, acquisition, restructuring, financing or sale of business assets, subject to applicable law. This section does not authorize a recipient to use information outside the applicable transaction or legal purpose.

The policy should be updated when the site’s forms, storage, service providers, advertising or analytics configuration, data uses or legal requirements change. The owner may provide additional notice for material changes where appropriate. An email notice for every wording change is not promised.