Last updated: August 3, 2026
1. Overview
3GEN Export started out on a WordPress storefront. Since then we've grown into a fully self-built platform — our website, our order system, and our customer accounts now run on infrastructure we operate ourselves — and we've added a dedicated B2B Partner Program for wholesale buyers alongside our retail store. This policy has been rewritten from the ground up to reflect who we are today, not who we were on our old website.
It explains, in plain language, what personal information 3GEN Group LLC ("3GEN Export," "we," "us," or "our") collects when you visit 3genexport.com, place an order, or apply to our B2B Partner Program — and what we do, and don't do, with it.
One thing worth knowing up front: because we built our own platform instead of relying on a third-party e-commerce service, most of what you share with us stays on servers we run ourselves rather than passing through an outside storefront provider. Where we do rely on outside companies — Stripe for payments, for example — we name them specifically in Section 5 below, rather than hiding behind a vague "trusted partners" phrase.
This policy is written to meet the standards of the General Data Protection Regulation (GDPR) for customers in the EU/EEA and UK, the California Consumer Privacy Act (CCPA/CPRA) for California customers, and Turkey's KVKK for our customers and operations in Turkey. By using our website, you agree to the practices described here.
2. Data We Collect
We collect the following types of information:
Information You Give Us
- Full name
- Email address
- Phone number
- Billing and shipping address
- Company name (if applicable)
- Account password (stored as a one-way cryptographic hash — we never see or store your actual password)
- Payment information (handled directly by our payment processor — see Section 5; we never see or store your full card number)
Information Collected Automatically
- IP address (used for security, fraud prevention, and approximate geolocation)
- Browser type, version, and language
- Device type and operating system
- Pages visited, time spent, and navigation paths
- Referring website or search engine
- Cookies and similar technologies — see Section 6 for the full, honest list of what we actually use
Communication Data
- Messages sent through our contact form — since August 2026 these are stored on our own servers (your name, email, optional phone, subject, part number and message) so that we can track and answer them; if that fails, the form falls back to opening your own email client instead — or sent to us directly by email
- WhatsApp inquiries
- Customer support interactions
3. B2B Partner Program Data
If you apply to our B2B Partner Program, we collect some additional information beyond a standard retail account, because we need it to verify your business and extend trade terms:
- Company name and business type (dealer, contractor, workshop, distributor, etc.)
- Country of operation
- Business phone number
- Tax ID / VAT number (optional)
- Business description (optional)
- Quote requests, order inquiries, and messages exchanged with our team through your partner account
We use this information solely to review your application, determine wholesale eligibility, administer your partner account including any member pricing that applies to it, and communicate with you about quotes, orders, and account status. We don't use it for anything else, and we don't share it outside 3GEN Export except where Section 5 says a service provider is involved (for example, if your inquiry involves a payment or shipment).
4. How We Use Your Data
We use the collected information for the following purposes:
To process, fulfill, and ship your orders and send order confirmations and tracking information.
To review partner applications and manage your ongoing business account, including any member pricing that applies to it.
To respond to your inquiries, resolve issues, and provide technical support for parts identification.
To detect and prevent fraudulent transactions and protect the security of our website and users.
To understand website usage and improve the site — only for visitors who accept analytics cookies (see Section 6).
We don't currently send marketing emails. If we introduce a newsletter or promotions in the future, it will be opt-in only, and this section will be updated first.
To comply with applicable laws, regulations, and legal processes, including tax and accounting record-keeping.
For readers who want the formal legal basis for each use above: order processing and B2B account management rely on our contract with you; fraud prevention and basic site security rely on our legitimate interest in running a safe store; analytics cookies rely on your consent, given (and revocable) through our cookie banner; and record-keeping relies on our legal obligations under tax and commercial law.
7. Data Security
We take the security of your data seriously, and we've built specific technical measures around it — not just a generic promise:
- TLS/SSL encryption for all traffic between your browser and our servers
- PCI-DSS compliant payment processing through Stripe — your full card number never touches our servers
- Database-level access controls so your account and order records are only readable by you or by staff whose role requires it — enforced at the database itself, not just in our application code
- Turnstile bot protection on our forms to block automated abuse without tracking you
- Encrypted, access-controlled backups, stored in two geographically separate locations
- Least-privilege internal access — staff can only see the customer data their job actually requires
While we take every reasonable precaution, no method of transmission or storage is 100% secure, and we can't guarantee absolute security. If we ever experience a data breach that puts your rights at risk, we will notify affected users and the relevant data protection authorities as required by law.
8. Data Retention
We keep personal data only as long as we have a genuine reason to, and no longer. In practice:
- Account data: kept while your account is active; if you request deletion, we anonymize your record in our system (see Section 9) and remove the anonymized stub entirely after one further year
- Order & invoice data: kept for 7 years, the minimum required for U.S. and Turkish tax and accounting law — this applies even after an account deletion request, since financial records can't be erased on demand under those laws
- B2B partner records: kept while your partner account is active or until you request deletion
- B2B inquiries & messages: kept for 3 years from the date of the inquiry, then automatically deleted
- Analytics data: retained by Google under its own standard policy (see Section 6) — we don't separately store analytics data ourselves
- Server & security logs: kept briefly (on the order of a few weeks) purely for security troubleshooting, then automatically overwritten
- Backups: rolling 30-day retention, so a request processed today is fully cleared from backups within 30 days
We publish the full internal version of this schedule, including the automated cleanup rules that enforce it, in our data retention policy for anyone who wants the underlying detail.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right to Access — Request a copy of the personal data we hold about you
- Right to Rectification — Request correction of inaccurate or incomplete data
- Right to Erasure — Request deletion of your personal data ("right to be forgotten")
- Right to Restriction — Request that we limit how we use your data
- Right to Portability — Request your data in a machine-readable format
- Right to Object — Object to processing of your data for marketing purposes
- Right to Withdraw Consent — Withdraw consent at any time where processing is based on consent (see the Cookie Settings link in our footer for the cookie-specific version of this)
To exercise any of these rights, contact us at [email protected]. We'll verify your identity and respond within 30 days. For most accounts, deletion requests are handled directly by our system; a small number of older or business-account records may need a manual step by our team, but either way we commit to completing your request within that 30-day window. Financial and order records are anonymized rather than deleted outright, for the tax-law reasons explained in Section 8.
California Residents: under the CCPA/CPRA, you have the right to know what personal information we collect, request its deletion or correction, and opt out of the "sale" or "sharing" of personal information. We do not sell personal information, and as explained in Section 5, we do not share it for cross-context behavioral advertising either.
10. Children's Privacy
Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 18, we will take steps to delete it promptly.
11. International Data Transfers
We operate out of the United States, with additional offices in Turkey and the UAE, and our servers are located in the countries where we run our own infrastructure. If you're contacting us from elsewhere, your data will necessarily be transferred to and processed in one of these locations. We take steps to keep those transfers lawful and your data protected wherever it travels.
For EU/EEA, UK, and Swiss residents specifically: transfers of your data outside those regions are protected using Standard Contractual Clauses (SCCs) approved by the European Commission with the service providers named in Section 5. If you're located in the EEA, UK, or Switzerland, you can use the contact details in Section 13 for any question or request related to this policy, and we will respond as required by applicable law.
12. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any changes will be posted on this page with an updated "Last updated" date, and if a change is significant, we'll make it clearly visible rather than burying it in a routine update.
We encourage you to review this policy periodically. Your continued use of the website after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:
3GEN Group LLC
3731 W Warner Avenue, Office 18
Santa Ana, CA 92704, USA