Privacy Policy

This Privacy Policy describes how OREC Imports ("we", "us", "our") collects, uses, and protects information when you visit our website at https://orecimports.com. We've kept it in plain language. If something here isn't clear, give us a call.

OREC Imports is a family-owned auto repair shop based at 3645 Main St, Chula Vista, CA 91911. The website was built by Sky2Screen.

Information you submit. When you use our contact form, you may provide your name, email address, phone number (optional), vehicle information (optional), and a message. When you subscribe to our newsletter, you provide your email address. We collect only what you choose to submit.

Appointment booking. When you book through the SureCritic scheduler embedded on this site, your booking information is submitted to SureCritic, which is the third-party booking platform we use.

Basic server logs. Like most websites, our host (Netlify) records standard request information — IP address, user agent, requested URL, timestamp — for operational and security purposes.

We do not collect payment information on this site.

We use the information we collect to:

• Respond to your inquiries and service requests.
• Schedule appointments and follow up about your vehicle.
• Send the newsletter, if you've subscribed.
• Keep the site running securely.

We do not sell, rent, or trade your personal information.

We're plain about this: this site does not use any advertising or tracking cookies, and we do not run third-party analytics (no Google Analytics, no Facebook Pixel, no ad networks). The cookies and storage this site uses are limited to the items below.

Admin session cookie — Our admin area (used only by site staff, not visitors) sets one HTTP-only cookie called orec_admin after a successful login. It lasts up to 7 days and is used to keep the staff signed in to the admin tools. It is set with SameSite=Strict and is not used for tracking. You will never see this cookie unless you log into the staff admin area.

Login rate-limit storage — To prevent brute-force attempts on the admin login, we record a per-IP attempt counter in our hosting provider's storage (Netlify Blobs). This is server-side, not a browser cookie, and applies only to the admin login page.

SureCritic booking embed — The appointment scheduler on this site is provided by SureCritic and loaded from their domain. SureCritic may set its own cookies on its scheduler to keep your booking session working. We do not control those cookies. See SureCritic's own privacy notice for details.

Newsletter and contact forms — These forms are submitted through Netlify Forms. The submission is processed by Netlify; no cookies are set by the form itself.

You can clear or block cookies in your browser settings. Disabling cookies will not affect normal visits to the site; it will only affect the staff admin area.

We use a small set of third-party providers to run this site:

• Netlify — website hosting, form delivery, and the Blobs storage used for the admin rate-limit counter.
• SureCritic — the online appointment scheduler embedded on the site.
• Google Maps — embedded map / directions link on our contact page (Google may set its own cookies when you load the map).
• Google Fonts — Poppins and Lora typefaces loaded for the site.

We share information with these providers only to the extent necessary to operate the site. We do not authorize them to use your information for their own marketing.

We keep contact-form and newsletter submissions for as long as we need them to respond to you, run the newsletter, and keep reasonable business records. If you'd like us to remove your information, contact us and we will.

You may ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Contact us at the phone or email below and we'll handle it.

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information. To exercise any of these rights, contact us using the information at the bottom of this page.

This site is not directed to children under 13, and we do not knowingly collect information from children under 13. If you believe we have, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we'll update the effective date at the top of this page. Continued use of the site after we update the policy means you accept the updated version.

If you have questions about this Privacy Policy or want to make a request about your information: