Who we are
This Privacy Policy explains how the operator of roadster-order.us ("Roadster Order", "we", "us" or "our") handles information about visitors to the website at https://roadster-order.us (the "Site").
The Site is an independent information resource about the Tesla Roadster. It is not operated by, affiliated with or endorsed by Tesla, Inc., and it does not sell vehicles, take reservations or process payments.
For any privacy question or request, email [email protected].
The short version
- We do not ask you to create an account, and there are no forms on the Site.
- We do not set cookies, and we use no analytics, advertising, social media pixels or other tracking tools.
- Fonts and images are served from our own server, so your browser does not contact third parties such as Google Fonts when you load a page.
- Our hosting provider keeps standard server logs for security and reliability.
- If you email us, we use your email only to reply.
- We do not sell or share personal information, and we never use it for targeted advertising.
Information we collect
Information you give us
If you contact us by email, we receive your email address, your name if you include it, and whatever you write in your message. Please do not send sensitive information such as payment card numbers, government ID numbers or health information.
Information collected automatically
When your browser requests a page, the server that hosts the Site automatically records technical information in its logs:
- IP address
- date and time of the request
- the page or file requested and the HTTP status code
- the referring page, if your browser sends one
- browser and operating system type (the "user agent")
We do not combine this information with other data to identify you, and we do not use it to build profiles.
Information stored on your device
When you close the storage notice, the Site saves one entry in your browser's local storage (ro_notice_ack) containing the date you closed it, so the notice is not shown again. This entry never leaves your device and we cannot read it. See our Cookie Policy for details.
Information we do not collect
We do not knowingly collect sensitive personal information, precise geolocation, biometric data, financial account information or information about children.
How we use information
| Purpose | Information used | Legal basis (EEA/UK) |
|---|---|---|
| Deliver the Site to your browser | Server log data | Legitimate interests |
| Protect the Site against abuse, attacks and fraud, and diagnose errors | Server log data | Legitimate interests |
| Respond to messages, corrections and privacy requests | Email address and message content | Legitimate interests; legal obligation for privacy requests |
| Comply with law and enforce our Terms of Use | Any of the above, as needed | Legal obligation; legitimate interests |
We do not use personal information for automated decision-making or profiling that produces legal or similarly significant effects.
How we share information
We share personal information only with:
- Service providers that host the Site, deliver its content and provide our email service. They process information on our behalf, under contract, and only to provide their services to us.
- Authorities or other parties when the law requires it, or when we reasonably believe disclosure is necessary to protect the rights, property or safety of the Site, its visitors or others.
- A successor if the Site is transferred to another operator, in which case this Policy continues to apply to information collected before the transfer.
We do not sell personal information, share it for cross-context behavioral advertising, or disclose it to Tesla, Inc., dealers or data brokers.
How long we keep information
- Server logs: no longer than 30 days, unless we need them longer to investigate a specific security incident.
- Emails: as long as needed to handle your message, and no longer than 24 months after our last exchange, unless the law requires otherwise.
- Privacy request records: 24 months, as required by some US state laws.
Security
The Site is served only over encrypted HTTPS connections. We limit access to logs and emails and use reputable service providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Your US state privacy rights
Residents of California and of other states with comprehensive privacy laws (including Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia) may have some or all of the following rights, subject to legal exceptions:
- Know and access: confirm whether we process your personal information and receive a copy of it.
- Correct inaccurate personal information.
- Delete personal information we hold about you.
- Portability: receive your information in a portable format.
- Opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising and profiling.
- Limit the use of sensitive personal information.
- Non-discrimination: we will not treat you differently for exercising your rights.
Do Not Sell or Share My Personal Information
We do not sell or share personal information, and we have not done so in the past 12 months. We do not process personal information for targeted advertising or profiling, and we do not collect sensitive personal information. There is nothing to opt out of, but you can still email us to record an opt-out request, and we will honor it if our practices ever change.
We also honor Global Privacy Control (GPC) signals as a valid opt-out request.
California notice at collection
In the past 12 months we collected the following categories of personal information defined by the California Consumer Privacy Act, as amended (CCPA):
| Category | Examples | Source | Disclosed to |
|---|---|---|---|
| Identifiers | IP address; email address if you write to us | You; your browser | Hosting and email providers |
| Internet or network activity | Pages requested, referrer, user agent | Your browser | Hosting provider |
| Communications | Contents of emails you send | You | Email provider |
Purposes and retention periods are described above. We do not sell or share any of these categories. Under California's "Shine the Light" law (Civil Code § 1798.83) you may ask whether we disclosed personal information to third parties for their direct marketing; we do not.
How to make a request
Email [email protected] with the subject line "Privacy request" and tell us which right you want to exercise. We will confirm receipt within 10 business days and respond within 45 days. We may extend this by another 45 days if reasonably necessary, and we will tell you if we do.
To protect you, we may need to verify your identity by asking for information that matches what we hold, such as confirming you control the email address you wrote from. Because we collect so little, we may be unable to link server log entries to you. An authorized agent may submit a request on your behalf with your signed permission.
Appeals
If we decline your request, you may appeal by replying to our decision with the subject line "Privacy appeal". We will respond within 60 days (45 days in some states). If you are not satisfied, you may contact your state Attorney General.
Rights for visitors in the EEA, UK and Switzerland
If the GDPR, UK GDPR or Swiss data protection law applies to you, you have the right to access, rectify and erase your personal data, to restrict or object to its processing, and to data portability. Where we rely on legitimate interests, you may object at any time. You also have the right to complain to your local data protection authority. To exercise any of these rights, email [email protected].
International transfers
The Site is operated from the United States, and our service providers may process data in the United States or other countries. Where the law requires, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the provider's certification under the EU-US Data Privacy Framework.
Children's privacy
The Site is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13, in line with the Children's Online Privacy Protection Act (COPPA), or from anyone under 16 without appropriate consent. If you believe a child has sent us personal information, email us and we will delete it.
Links to other websites
The Site links to news outlets, Wikipedia, Wikimedia Commons and other websites. Their privacy practices are their own, and we encourage you to read their policies. Following a link to tesla.com or any other site is subject to that site's terms and policies.
Do Not Track
Because the Site does not track visitors across websites, it behaves the same way whether or not your browser sends a "Do Not Track" signal.
Changes to this policy
We may update this Policy when our practices or the law change. We will post the new version on this page and update the effective date at the top. If a change is material, such as adding analytics or a contact form, we will display a notice on the Site before it takes effect.
Contact
Privacy questions and requests: [email protected]
Website: https://roadster-order.us