Privacy Policy

PRIVACY POLICY

Effective Date: March 1, 2026

Last Updated: March 1, 2026

1. Introduction and Scope

This Privacy Policy is provided by Cryogenic Plastics Inc, a Texas corporation doing business as P-Ayr Products and Mockup Motors (“Company,” “we,” “us,” or “our”), located at 1098 Windy Hill Road, Kyle, Texas 78640, United States (Phone: (512) 295-2683).

This Policy governs the collection, use, disclosure, retention, and protection of personal data through our website mockupmotors.com (the “Site”) and any related services. It applies to all visitors, customers, and users located in the United States and Canada.

This Site is intended exclusively for use by individuals 18 years of age or older. By accessing or using our Site, you confirm that you are at least 18 years old and that you have read, understood, and agree to this Privacy Policy.

If you need to access this Privacy Policy in an alternative format due to a disability, please contact us at customerservice@cpitx.com and we will accommodate your request.

2. Our Role: Data Controller

Under applicable privacy laws, including the Texas Data Privacy and Security Act (TDPSA), P-Ayr Products / Mockup Motors acts as a data controller — meaning we determine the purposes and means of processing your personal data. Third-party service providers (such as payment processors, shipping carriers, and marketing platforms) act as data processors on our behalf, subject to written data processing agreements consistent with this Policy.

3. Personal Data We Collect

We collect the following categories of personal data:

1. a) Data You Provide Directly

1. Identifiers: Full name, email address, mailing/billing/shipping address, phone number
2. Payment Data: Credit/debit card information processed exclusively by Square (PCI-DSS Level 1 compliant). We do not store full card numbers on our servers at any time
3. Account Data: Username and password if you create an account on the Site
4. Product Reviews: If you submit a written review on our Site, we collect your name, general location (city/state if provided), and the content of your review. We do not collect photos through reviews
5. Communications: Emails, messages, or inquiries you send us through any channel

1. b) Data Collected Automatically When You Visit the Site

1. Device & Technical Data: Browser type and version, operating system, device type, screen resolution
2. Usage Data: Pages visited, time spent on each page, links clicked, referring URLs, and exit pages
3. Network Data: IP address and approximate geographic location (city/state level — not precise geolocation)
4. Cookie & Tracking Data: Session identifiers and behavioral data collected via cookies, web beacons, pixel tags, and similar tracking technologies (detailed in Section 6)

1. c) Data from Third-Party Sources

We may receive limited data from advertising partners (Meta/Facebook, Google) about user interactions with our advertisements prior to visiting our Site, such as ad clicks or impressions. This data is used solely for measuring advertising performance and is not combined with other personally identifiable information without your consent.

1. d) Sensitive Data — What We Do NOT Collect

The TDPSA defines specific sensitive data categories that require explicit opt-in consent before collection. Mockup Motors does not intentionally collect any of the following:

1. Precise geolocation data (within a 1,750-foot radius)
2. Racial or ethnic origin
3. Religious or philosophical beliefs
4. Mental or physical health diagnoses or conditions
5. Sexual orientation or gender identity
6. Citizenship or immigration status
7. Genetic or biometric data processed for the purpose of uniquely identifying an individual
8. Personal data of known children under 13 years of age

If we ever need to collect sensitive data categories in the future, we will obtain your explicit opt-in consent before doing so and update this Policy accordingly.

4. How We Use Your Personal Data

We process personal data only for the purposes disclosed below. We do not use your data for undisclosed secondary purposes, and we limit collection to what is reasonably necessary for each stated purpose.

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals without prior disclosure and a meaningful opportunity to opt out.

5. Third-Party Service Providers

We share personal data with the following trusted service providers only to the extent necessary to fulfill our services to you. Each provider is subject to data processing obligations consistent with this Policy.

We do not sell, rent, trade, lease, or broker your personal data to any third party for their own independent commercial purposes. Sharing data with processors for the sole purpose of fulfilling your orders or providing services does not constitute a “sale” under applicable privacy laws.

Business Transfers

In the event that Mockup Motors or P-Ayr Products is involved in a merger, acquisition, asset sale, reorganization, or bankruptcy proceeding, your personal data may be transferred as part of that transaction. In such cases, we will notify you via a prominent notice on our Site or by email before your personal data is transferred and becomes subject to a different privacy policy. You will have the right to request deletion of your data prior to any such transfer if you do not wish your information to be included.

6. Cookies, Web Beacons, and Tracking Technologies

Our Site uses the following tracking technologies:

Cookies are small text files stored on your device that help our Site function and remember your preferences.

Web Beacons (also called clear GIFs, pixel tags, or tracking pixels) are tiny, invisible image files embedded in web pages or emails that allow us and our partners to detect when a page has been viewed or an email has been opened. They are used in conjunction with Meta Pixel, Google Ads, and MailBluster email campaigns.

Pixel Tags embedded by Meta and Google track user behavior across our Site to build advertising audiences and measure the effectiveness of ad campaigns.

Types of Cookies We Use

Essential Cookies (Required — cannot be disabled)

1. Maintain your shopping cart and session between pages
2. Enable secure checkout
3. Remember your login status

Analytics Cookies (Google Analytics)

1. Track pages visited, session duration, traffic sources, and navigation behavior
2. Data is aggregated and anonymized before reporting
3. Opt-out: Install the Google Analytics Opt-Out Browser Add-on at tools.google.com/dlpage/gaoptout

Advertising & Retargeting Cookies (Meta Pixel + Google Ads)

1. Track Site interactions to build advertising audiences on Meta (Facebook/Instagram) and Google
2. Enable display of ads to past Site visitors on external platforms
3. Measure which ads result in purchases (conversion tracking)
4. Opt-out: Facebook Ad Settings at facebook.com/settings/?tab=ads | Google Ad Settings at myadcenter.google.com

Managing Your Cookie Preferences

You may control cookies at any time through your browser settings or through the cookie consent banner presented upon your first visit to the Site. Note that disabling essential cookies may impair Site functionality such as the shopping cart. Disabling analytics or advertising cookies will not affect your ability to browse or purchase.

7. Global Privacy Control (GPC) — Universal Opt-Out Signals

As required by the Texas Data Privacy and Security Act (TDPSA), effective January 1, 2025, Mockup Motors recognizes and honors Global Privacy Control (GPC) signals transmitted by your browser or browser extension.

When our Site detects a valid GPC signal from your device:

1. All advertising and targeting scripts, including Meta Pixel and Google Ads, are immediately suppressed before any personal data is transmitted to those platforms
2. Your opt-out preference is honored in real time — not merely logged for future processing
3. No additional action, form submission, or account creation is required on your part

To enable GPC, use a supporting browser or extension such as Firefox, Brave, or Privacy Badger. More information is available at globalprivacycontrol.org.

We do not use dark patterns, confusing design elements, or deceptive interface flows that make exercising your privacy rights more difficult than exercising other options. Our opt-out process is designed to be as simple and straightforward as opting in.

8. Email Marketing — CAN-SPAM & CASL Compliance

We use MailBluster to manage our subscriber list and send marketing communications.

For U.S. Subscribers — CAN-SPAM Act Compliance

1. Every marketing email clearly identifies Mockup Motors / P-Ayr Products as the sender
2. Every marketing email includes our physical mailing address: 1098 Windy Hill Road, Kyle, Texas 78640, United States
3. Every marketing email includes a clear, functional Unsubscribe link
4. We will process all unsubscribe requests within 10 business days as required by the CAN-SPAM Act
5. We do not use deceptive subject lines, false headers, or misleading sender information

For Canadian Subscribers — CASL Compliance

We comply fully with Canada’s Anti-Spam Legislation (CASL) for all recipients located in Canada:

1. We only send commercial electronic messages with your express or implied consent
2. Express consent is obtained through a clear opt-in checkbox at checkout or sign-up — pre-checked boxes are not used
3. Implied consent applies to existing customers for up to 24 months following their most recent purchase
4. Every email clearly identifies our business name and includes our full mailing address
5. Every email includes a functional unsubscribe mechanism honored within 10 business days
6. We maintain records of all consents as required by CASL

9. Your Privacy Rights by State and Region

Texas Residents — TDPSA Rights

If you are a Texas resident, you have the following rights under the Texas Data Privacy and Security Act (TDPSA), Chapter 541, Texas Business & Commerce Code, effective July 1, 2024:

1. Right to Confirm & Access: Confirm whether we are processing your personal data and request a copy of what we hold about you
2. Right to Correction: Request correction of inaccurate personal data we maintain
3. Right to Deletion: Request deletion of personal data we have collected from you, subject to legal retention requirements
4. Right to Portability: Obtain a portable, machine-readable copy of your personal data to transfer to another service
5. Right to Opt Out of Targeted Advertising: Stop the use of your data to serve ads tailored to your interests on third-party platforms (Meta, Google)
6. Right to Opt Out of Sale of Personal Data: We do not sell personal data; however, you may formally document this opt-out preference
7. Right to Opt Out of Profiling: Opt out of automated profiling that produces decisions with legal or similarly significant effects

How to Submit a Request:

You must use one of these two methods:

1. 📧 Email: customerservice@cpitx.com
2. 📋 Web Form: mockupmotors.com/privacy-request

You may also designate an authorized agent to submit requests on your behalf. Authorized agents must provide written proof of authorization signed by you, and we may verify the identity of both the agent and the consumer before processing the request.

Response Timeline:

1. We will respond within 45 days of receiving a verifiable request
2. For complex or numerous requests, we may extend the response period by an additional 45 days — we will notify you in writing before the initial 45-day period expires
3. If we deny your request in whole or in part, we will provide a written explanation of the reasons for the denial

Right to Appeal:

If we deny your data rights request, you may appeal our decision by submitting a written appeal to customerservice@cpitx.com with the subject line “PRIVACY REQUEST APPEAL.” We will respond to your appeal within 60 days. If your appeal is denied, we will provide instructions for contacting the Texas Attorney General’s Office to file a complaint.

File a Complaint with the Texas Attorney General:

🌐 texasattorneygeneral.gov | 📞 1-800-621-0508

California Residents — CCPA/CPRA Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

1. Right to know what personal data is collected, used, shared, or sold
2. Right to delete personal data we hold about you
3. Right to correct inaccurate personal data
4. Right to opt out of the sale or sharing of personal data for cross-context behavioral advertising
5. Right to limit the use and disclosure of sensitive personal information
6. Right to non-discrimination — we will not deny you services, charge different prices, or provide a lower quality of service because you exercised your privacy rights

A “Do Not Sell or Share My Personal Information” link is available in the footer of our website. All California requests will be processed in a frictionless manner without unnecessary barriers or confusing steps.

California Shine the Light (Civil Code §1798.83):

California residents may request information once per year about personal data we have shared with third parties for their direct marketing purposes during the prior calendar year. To make this request, contact us at customerservice@cpitx.com with the subject line “California Shine the Light Request.” We will respond within 30 days.

Other U.S. State Residents

Residents of the following states have privacy rights under their respective state laws. We apply the same rights request process described above (email or web form) for all:

1. Colorado — Colorado Privacy Act (CPA)
2. Connecticut — Connecticut Data Privacy Act (CTDPA)
3. Delaware — Delaware Personal Data Privacy Act
4. Florida — Florida Digital Bill of Rights
5. Indiana — Indiana Consumer Data Protection Act
6. Iowa — Iowa Consumer Data Protection Act
7. Kentucky — Kentucky Consumer Data Protection Act
8. Maryland — Maryland Online Data Privacy Act
9. Minnesota — Minnesota Consumer Data Privacy Act
10. Montana — Montana Consumer Data Privacy Act
11. Nebraska — Nebraska Data Privacy Act
12. New Hampshire — New Hampshire Privacy Act
13. New Jersey — New Jersey Data Privacy Act
14. Oregon — Oregon Consumer Privacy Act
15. Tennessee — Tennessee Information Protection Act
16. Utah — Utah Consumer Privacy Act
17. Virginia — Virginia Consumer Data Protection Act (VCDPA)

In each case, applicable rights may include access, correction, deletion, portability, and opt-out of targeted advertising. We will process all requests in good faith and in compliance with the applicable law for your state.

Canadian Customers — PIPEDA Rights

If you are located in Canada, your personal data is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to:

1. Access the personal information we hold about you
2. Challenge its accuracy and request correction
3. Withdraw consent for processing (subject to legal or contractual limitations)
4. File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca

Submit your request to customerservice@cpitx.com.

10. Data Protection Assessments

As required by the TDPSA, Mockup Motors conducts and maintains Data Protection Assessments before engaging in processing activities that present heightened risk to consumers, including:

1. Processing personal data for purposes of targeted advertising (Meta Pixel, Google Ads)
2. Any future sale or transfer of personal data
3. Processing activities that involve profiling with significant effects

These assessments document the benefits of the processing activity weighed against potential risks to consumers. They are maintained as internal compliance records and are available for review by the Texas Attorney General upon lawful request.

11. Law Enforcement and Legal Requests

We take your privacy seriously and will not disclose your personal data to law enforcement or government agencies except under the following conditions:

1. In response to a valid court order, subpoena, or search warrant issued by a court of competent jurisdiction
2. When required to comply with applicable federal or state law
3. When necessary to protect the safety of any person or to prevent fraud or illegal activity
4. When disclosure is required to enforce our Terms & Conditions or protect our legal rights

In all cases, we will:

1. Require written documentation and official identification from the requesting agency
2. Review each request individually to verify its validity and legal authority
3. Disclose only the minimum amount of data necessary to comply
4. Notify affected users when legally permitted to do so

We do not voluntarily cooperate with informal requests for user data that lack proper legal process.

12. Data Retention

We retain personal data only as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law:

When personal data is no longer required, we securely delete or anonymize it using industry-standard methods.

13. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal data against unauthorized access, acquisition, disclosure, alteration, destruction, or loss:

1. Payment security: All transactions are processed through Square’s PCI-DSS Level 1 compliant infrastructure — the highest level of payment security certification available
2. HTTPS/SSL encryption: All data transmitted between your browser and our Site is encrypted via SSL/TLS protocols
3. Access controls: Employee and contractor access to personal data is restricted to individuals with a documented, legitimate business need and is subject to access logging
4. Vendor oversight: Third-party processors are contractually required to maintain appropriate security practices consistent with this Policy

Data Breach Notification: In the event of a security breach that may affect your personal data, we will notify affected individuals and applicable regulatory authorities as required by Texas Business & Commerce Code §521.053 and any other applicable state or provincial breach notification laws. Notifications will be delivered within the legally required timeframes using the contact information you provided.

Despite our security measures, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security, and we encourage you to use strong passwords and protect your account credentials.

14. Third-Party Links

Our Site may contain links to external websites, carrier tracking pages, or manufacturer sites not operated or controlled by Mockup Motors. We are not responsible for the privacy practices, content, or security of those third-party websites. The inclusion of any link does not constitute our endorsement of that site. We encourage you to review the privacy policy of every site you visit.

15. Children’s Privacy

Our Site is intended solely for individuals 18 years of age or older. We do not knowingly collect, solicit, or process personal data from children under the age of 13, consistent with the Children’s Online Privacy Protection Act (COPPA). If we become aware that a child under 13 has submitted personal data to us without verifiable parental consent, we will delete that information promptly. If you believe a child has provided personal data to us, please contact us immediately at customerservice@cpitx.com.

16. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

1. Update the “Last Updated” date prominently at the top of this page
2. Post a visible notice on our Site homepage for a minimum of 30 days following the change
3. Where feasible and required, notify registered users or subscribers by email prior to the change taking effect

Your continued use of the Site after the effective date of any revised Policy constitutes your acknowledgment and acceptance of the updated terms. We encourage you to review this Policy periodically.

17. Accessibility

If you need to access this Privacy Policy or exercise any of your privacy rights in an alternative format due to a disability — including large print, audio, or other accessible formats — please contact us at customerservice@cpitx.com or call (512) 295-2683 and we will make reasonable accommodations.

18. Contact Us — All Privacy Inquiries

For all privacy-related questions, rights requests, appeals, complaints, or accessibility accommodations, contact our Privacy Officer:

P-Ayr Products / Mockup Motors

Attn: Privacy Officer

1098 Windy Hill Road

Kyle, Texas 78640

United States

📧 Email: customerservice@cpitx.com

📋 Web Form: mockupmotors.com/privacy-request

📞 Phone: (512) 295-2683