Legal

Privacy Policy

Synchronised from our store policies on October 5, 2026

Privacy Policy

Last updated: August 24, 2026

MMG Engineering operates this store and website, including all related information, content, features, tools, products and services, to provide you, the customer, with a curated shopping experience (the “Services”).

Our customer-facing website is operated through a custom storefront, and Shopify provides essential e-commerce services including product information, customer accounts, carts, checkout, payment processing and order management.

This Privacy Policy describes how we collect, use and disclose your personal information when you visit or use the Services, make a purchase or other transaction, create an account, submit a request, use our website assistant or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls regarding the collection, processing and disclosure of personal information.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood the collection, use and disclosure practices described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term “personal information,” we mean information that identifies you or that can reasonably be linked to you or another person.

Personal information does not include information collected anonymously or de-identified so that it cannot reasonably identify or be linked to you.

Depending on how you interact with the Services, where you live and what is permitted or required by applicable law, we may collect or process the following categories of information:

  • Contact details, including your name, billing address, shipping address, telephone number and email address.

  • Financial information, including payment-card information, financial-account information, transaction details, method of payment, payment confirmation and other payment details. Payment information may be collected and processed directly by Shopify or the applicable payment provider.

  • Account information, including your username, password, authentication information, preferences and account settings.

  • Transaction information, including products you view, place in your cart, add to a wishlist, purchase, return, exchange or cancel, as well as information about previous transactions.

  • Vehicle and fitment information, including vehicle manufacturer, model, generation, production year, steering position, vehicle identification details when voluntarily supplied, and other information submitted to determine product compatibility or request a custom part.

  • Custom-part request information, including descriptions, measurements, photographs, files and other information you voluntarily provide when requesting a product, quotation or technical assessment.

  • Communications with us, including information contained in customer-support requests, emails, website forms, chat conversations and other communications.

  • Device information, including information about your device, browser, network connection, IP address and other technical identifiers.

  • Usage information, including information about how and when you access, interact with or navigate the Services.

  • Marketing preferences, including your choices concerning promotional communications, cookies, analytics and other optional processing.

  • User-generated content, including product reviews, photographs, installation images or other content you voluntarily submit for publication.

Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you, including when you create an account, place an order, submit a custom-part request, contact us, use the website assistant, upload a file or otherwise provide information to us.

  • Automatically through the Services, including information obtained from your device when you use our website and from cookies, browser storage and similar technologies where permitted.

  • From Shopify, including customer, account, cart, checkout, transaction and order information required to provide the Services.

  • From service providers, including providers that enable payments, delivery, website hosting, analytics, customer support, fraud prevention or other business functions.

  • From business partners or other third parties, where permitted by law.

  • From publicly available sources, where appropriate and permitted by law, such as information used to verify a vehicle part, OEM reference or product application.

How We Use Your Personal Information

Depending on how you interact with us and which Services you use, we may use personal information for the following purposes:

  • Providing and improving the Services. We use personal information to provide products and services, process payments, fulfil orders, remember preferences, manage accounts, arrange shipping, process returns and exchanges, enable reviews, assess product compatibility and improve the customer experience.

  • Processing custom-part requests. We may use vehicle details, product descriptions, measurements, photographs, drawings and other information provided by you to assess feasibility, prepare quotations, manufacture products and provide technical support.

  • Product compatibility and recommendations. We may use vehicle and purchase information to identify compatible products, provide fitment guidance and recommend related products.

  • Marketing and advertising. Where permitted, we may use personal information to send marketing or promotional communications and display information about products or services that may interest you. You may withdraw from direct marketing at any time.

  • Analytics and website improvement. With your consent where required, we use privacy-limited analytics to understand website use, product discovery and shopping journeys.

  • Security and fraud prevention. We use personal information to authenticate accounts, protect checkout and payment processes, detect or investigate fraudulent, illegal, unsafe or malicious activity and secure the Services.

  • Communicating with you. We use personal information to answer questions, provide customer support, give order or production updates and maintain our business relationship with you.

  • Legal reasons. We may use personal information to comply with applicable law, respond to valid legal processes, participate in legal proceedings, enforce our terms and policies and protect our rights or the rights of others.

If you register an account, you are responsible for protecting your account credentials. You should not share your password, authentication link or other access details with another person.

Consent-Based Website Analytics

We use consent-based website analytics to understand how visitors use the MMG Engineering website and to improve product discovery, website performance, customer experience and sales journeys.

Analytics is optional and is switched off by default. Analytics begins only after you provide affirmative consent through our cookie or privacy preferences. You may refuse or withdraw this consent without affecting the essential operation of the website.

How Our Analytics Works

When analytics consent is active, our custom storefront sends a limited set of interaction events to a secure, same-origin MMG Engineering endpoint. These events may then be forwarded securely from our server to Google Analytics 4 (“GA4”).

We do not load Google Tag Manager, the Google Analytics browser script (gtag.js) or Google advertising scripts in your browser for this purpose. Our custom storefront analytics implementation does not use Google Analytics browser cookies or advertising cookies.

Analytics events generated by this system are marked for non-personalized advertising.

A random pseudonymous identifier may be created for the current browser tab so that related events occurring within that tab can be understood as one session. This identifier:

  • Exists only for the current browser tab.

  • Is not intended to identify you personally.

  • Is not linked to your MMG Engineering customer account.

  • Is cleared when analytics consent is withdrawn.

  • Is not used by us for cross-site advertising or profiling.

Information We May Collect Through Analytics

If you consent to analytics, we may collect limited information such as:

  • The type of website page or route viewed.

  • Product and product-list interactions.

  • Product handles and public product-variant identifiers.

  • Product quantity, value and currency.

  • Add-to-cart, cart-view and checkout-start activity.

  • Search-query length and the number of results returned.

  • Selected filter identifiers.

  • Completion of a custom-part request, without including the request’s content.

  • Engagement with the website assistant or chat, without including conversation content in the analytics event.

  • Approved campaign labels, including UTM source, medium, campaign, term and content values.

  • Approved click identifiers.

  • The hostname of the referring website.

  • Technical event information required to process, protect and troubleshoot the analytics service.

Information Excluded From Custom Analytics Events

Our custom analytics system is designed not to collect or transmit the following information as analytics-event fields:

  • Your name.

  • Your email address.

  • Your telephone number.

  • Your postal, billing or delivery address.

  • Customer-account credentials.

  • Order details.

  • Payment or card information.

  • Raw search terms.

  • Form-field content.

  • Custom-part request descriptions.

  • Chat messages or conversation content.

  • Uploaded filenames or attachments.

  • Authentication credentials.

  • Security tokens.

  • Precise location information.

We do not use our custom analytics collection endpoint for the purpose of recording your IP address as an analytics-event field.

Automated safeguards are used to remove unknown fields and reject information that appears to contain personal information, credentials or security tokens before an analytics event is processed.

These statements relate specifically to MMG Engineering’s custom storefront analytics implementation. Shopify and other service providers may independently process device, checkout or transaction information as described elsewhere in this Privacy Policy and in their respective privacy notices.

Campaign Attribution

If you consent to analytics, we may temporarily store approved campaign information so that we can understand how you reached our website. This may include first-touch and last-touch campaign labels, approved click identifiers and the referring website’s hostname.

This campaign-attribution information:

  • Is stored only after analytics consent has been provided.

  • Is retained for no longer than 30 days.

  • Is removed if you withdraw analytics consent.

  • May be passed to our Shopify-hosted checkout to help us understand which marketing activity contributed to a checkout.

Shopify Checkout and Purchase Information

Shopify provides our product, customer-account, cart, checkout, payment and order-management services.

Shopify may separately process checkout, purchase, payment and revenue information on Shopify-hosted pages. Shopify’s processing is governed by its privacy terms and the other relevant sections of this Privacy Policy.

A checkout-start analytics event records only that a visitor intended to begin checkout. It does not confirm that a purchase was completed.

Google Analytics 4

Where analytics consent is active, limited analytics events may be processed by Google through Google Analytics 4.

Google may process this information according to its own privacy terms and applicable data-protection commitments. You can read the Google Privacy Policy.

Withdrawing Analytics Consent

You may change or withdraw your analytics consent at any time through the cookie or privacy preferences available on the MMG Engineering website.

When you withdraw analytics consent:

  • New custom analytics events stop being sent.

  • The temporary identifier for the current browser tab is cleared.

  • Stored first-touch and last-touch campaign-attribution information is deleted.

  • Optional analytics remains disabled unless you provide consent again.

Withdrawing analytics consent does not disable cookies or storage that are strictly necessary for essential website functions, including security, shopping-cart operation, checkout and preferences you expressly request.

For further information, please read our Cookie Policy.

Cookies and Similar Technologies

We and our service providers may use cookies, browser storage and similar technologies to provide and secure the Services, remember your choices, maintain shopping-cart functionality and, where you consent, measure website use.

We organize these technologies according to their purpose:

  • Strictly necessary technologies support essential functions such as security, consent records, shopping-cart operation, checkout and requested preferences. These cannot always be disabled without affecting the Services.

  • Analytics technologies help us understand how the website is used. These are optional and remain disabled until you consent where consent is required.

  • Personalization technologies may remember optional settings or tailor your experience. These remain subject to your choices and the applicable implementation.

  • Marketing technologies may support advertising or campaign measurement. These remain subject to your choices and applicable law.

You can review or change your choices through the cookie or privacy preferences available on the website. Browser controls may also allow you to remove or block cookies, although doing so may affect essential website functionality.

Shopify may use its own cookies and similar technologies when providing storefront, customer-account, cart, checkout and other commerce functions. The operation of Shopify technologies may depend on your region, Shopify’s privacy controls and your consent choices.

How We Disclose Personal Information

In certain circumstances, we may disclose personal information to third parties for legitimate purposes and subject to this Privacy Policy. Such circumstances may include:

  • Shopify and service providers. We may disclose information to Shopify and vendors that provide services on our behalf, including website hosting, information technology, payment processing, analytics, customer support, cloud storage, manufacturing support, fulfilment and shipping.

  • Payment and financial providers. Information may be disclosed to payment processors and financial institutions as necessary to process transactions, prevent fraud and handle refunds or disputes.

  • Shipping and fulfilment providers. We may disclose information required to calculate shipping, prepare customs documents, deliver orders and resolve delivery issues.

  • Analytics providers. Where you consent, limited analytics information may be provided to Google Analytics 4 as described above.

  • Business and marketing partners. We may disclose information to partners that help us provide marketing or advertising services, subject to your choices and applicable law.

  • At your direction or with your consent. We may disclose information when you direct or authorize us to do so, including when arranging shipping or using a third-party integration.

  • Affiliates. We may disclose information to our affiliates or within our corporate group where applicable.

  • Business transactions. Information may be disclosed in connection with a merger, acquisition, restructuring, financing, sale of assets, insolvency or similar business transaction.

  • Legal and protective purposes. We may disclose information to comply with legal obligations, respond to subpoenas, warrants or other valid requests, enforce our policies or protect the Services, our rights and the rights of users or others.

Depending on where you reside, you may have the right to opt out of sharing or processing considered targeted advertising under applicable law. You can exercise applicable rights through our data-sharing opt-out page.

Relationship With Shopify

The Services use Shopify’s platform to provide commerce functionality. Shopify collects and processes personal information concerning access to and use of Shopify services to provide and improve those services.

Information submitted when using Shopify-powered features may be transmitted to and shared with Shopify and relevant service providers, which may be located in countries other than your country of residence.

To help protect, grow and improve our business, we may use Shopify features that incorporate information obtained from interactions with our store, other merchants and Shopify. Where these features apply, Shopify may process personal information regarding your interactions with our store, other merchants and Shopify.

Shopify is responsible for certain processing that it performs for its own purposes, including responding to requests concerning the exercise of rights over that processing.

To learn more, please review the Shopify Consumer Privacy Policy. Depending on where you live, you may also exercise certain rights directly through the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may contain links to websites or online platforms operated by third parties.

If you follow a link to a website that is not controlled by us, you should review that website’s privacy and security policies and its terms and conditions. We do not guarantee and are not responsible for the privacy, security, accuracy, completeness or reliability of third-party websites.

Information you publish in public or semi-public locations, including third-party social networks, may be accessible to other users and may be used by those users or third parties.

Including a link does not by itself mean that we endorse the linked website, its content, owner or operator.

Children’s Data

The Services are not intended for use by children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction.

If you are the parent or legal guardian of a child who has provided personal information to us, please contact us using the details below to request its deletion.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we sell or share, as those terms are defined under applicable law, the personal information of individuals under 16 years of age.

Security and Retention of Your Information

We use reasonable administrative, technical and organizational safeguards intended to protect personal information.

However, no security system is perfect or impenetrable, and we cannot guarantee absolute security. Information transmitted through unsecured communication channels may not be secure. You should not send passwords, complete payment-card details or other highly sensitive information through email, chat or other unsecured channels.

How long we retain personal information depends on factors including:

  • Whether the information is required to maintain an account.

  • Whether it is needed to provide the Services or fulfil an order.

  • Applicable warranty, return, tax, accounting or record-keeping requirements.

  • The need to resolve a dispute.

  • The need to enforce an agreement or policy.

  • Applicable legal or regulatory requirements.

Information is deleted, anonymized or securely retained when it is no longer reasonably required, subject to applicable law and technical limitations.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights described below. These rights are not absolute and may apply only in certain circumstances. We may decline a request where permitted by law.

  • Right to access or know. You may have the right to request access to personal information we hold about you.

  • Right to delete. You may have the right to request deletion of personal information we maintain about you.

  • Right to correct. You may have the right to request correction of inaccurate personal information.

  • Right to portability. You may have the right to receive a copy of personal information we hold about you or request its transfer to another party, subject to applicable conditions and exceptions.

  • Right to object or restrict processing. You may have the right to object to or request restriction of certain processing.

  • Right to withdraw consent. Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing completed before consent was withdrawn.

  • Right to opt out of sale, sharing or targeted advertising. Depending on where you reside, you may have the right to opt out of the sale or sharing of personal information or processing considered targeted advertising under applicable privacy law.

  • Right to manage communications. You may unsubscribe from promotional emails using the unsubscribe option included in those messages. If you unsubscribe from marketing, we may still send transactional or non-promotional messages concerning your account, orders or requests.

  • Right to complain or appeal. Depending on applicable law, you may have the right to complain to a supervisory authority or appeal our response to a privacy request.

You can exercise applicable sale, sharing or targeted-advertising opt-out rights through our data-sharing opt-out page.

If you visit the website with a Global Privacy Control preference enabled, then, depending on your location and the relevant Shopify implementation, the signal may be treated as an opt-out request for the browser and device used. If the device can be associated with a Shopify customer account, Shopify may apply the request to that account. You can learn more at the Global Privacy Control website.

Other than legally recognized signals such as Global Privacy Control where applicable, we do not currently respond to browser “Do Not Track” signals.

You may exercise your rights through options provided in the Services or by contacting us using the details below.

We will not discriminate against you for exercising an applicable privacy right. We may need to verify your identity before processing a request, as permitted or required by law.

Where applicable, you may authorize an agent to submit a request on your behalf. We may require proof of that authorization and may ask you to verify your identity directly.

We will respond within the period required by applicable law.

For information about rights relating to information processed by Shopify, please visit the Shopify Privacy Portal.

Complaints

If you have a complaint concerning how we process personal information, please contact us using the details below.

Depending on where you live, you may have the right to appeal our response or lodge a complaint with your local data-protection authority.

If you are located in the European Economic Area, a list of supervisory authorities is available from the European Data Protection Board.

International Transfers

We, Shopify and other service providers may transfer, store and process personal information outside the country in which you live.

Where required, transfers of personal information from the European Economic Area or the United Kingdom will rely on recognized transfer mechanisms, such as the European Commission’s Standard Contractual Clauses, the United Kingdom’s applicable transfer mechanism or an adequacy decision, as relevant.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our practices, Services or legal and regulatory obligations.

We will publish the revised Privacy Policy on the website, update the “Last updated” date and provide additional notice where required by applicable law.

Please review this Privacy Policy periodically to remain informed about how we handle personal information.

Contact Us

If you have questions about our privacy practices, this Privacy Policy or the exercise of your privacy rights, please contact us:

MMG Engineering
Sharjah Publishing City Free Zone
Business Center
Sharjah, United Arab Emirates
Email: mmg3dengineering@gmail.com

For the purposes of applicable data-protection laws, MMG Engineering is the data controller of personal information processed for its own purposes.