Privacy policy

Last updated: 4 August 2026

This policy explains how TM Trading Group LLC, operator of the Injexo store, collects, uses, stores and protects the personal data of users of https://injexo.fr/.

1. Data controller

TM Trading Group LLC
254 Chapman Rd, Ste 208
Newark, DE 19702
United States

E-mail: contact@injexo.fr

2. Data collected

Depending on how the site is used, the following categories of data may be collected:

  • identity and contact details: surname, first name, address, e-mail, telephone;
  • order data: products, part numbers, prices, delivery address, history and returns;
  • vehicle data: make, model, year, engine, engine code, registration number, VIN or a photograph of a part number where this information is sent for a check;
  • account data: login details, preferences and history;
  • payment data: information needed for the transaction, processed mainly by the payment providers;
  • communication data: messages, fitment requests, complaints and exchanges with customer service;
  • technical data: IP address, browser, device, connection logs, pages viewed and cookies;
  • marketing preferences: consents, objections and interactions with communications.

3. Purposes and legal bases

Data is processed for the following purposes:

  • processing and delivering orders, managing payments, returns and guarantees: performance of the contract;
  • responding to requests and checking a part number or fitment: pre-contractual steps, performance of the contract or legitimate interest in providing assistance;
  • complying with legal, tax, accounting, customs and anti-fraud obligations: legal obligation and legitimate interest;
  • securing the site, preventing misuse and improving its operation: legitimate interest;
  • sending transactional communications relating to an order or a request: performance of the contract;
  • sending commercial offers: consent where required, or legitimate interest in the permitted cases, with the possibility to object;
  • measuring audience and personalising the experience through non-essential cookies: consent.

4. Mandatory nature of the information

Information marked as mandatory is necessary to process the order, deliver the products, respond to a request or check a part number. Without it, Injexo may be unable to provide the service requested.

5. Recipients of the data

Data may be disclosed, within the limits of their tasks, to the following categories of recipients:

  • authorised staff of TM Trading Group LLC;
  • Shopify, for hosting and operating the store;
  • payment providers and financial institutions;
  • carriers, logistics providers and delivery service providers;
  • IT, support, security, e-mail or analytics providers;
  • garages, parts manufacturers or technical partners where their involvement is necessary to identify a part number, with the information shared kept to a minimum;
  • administrative, judicial or tax authorities where required by law.

Injexo does not sell its customers' personal data. Any transfer for marketing purposes by a partner is subject to the applicable consent and information rules.

6. Shopify and payment providers

The store is hosted on Shopify. Shopify processes certain data necessary to provide its platform and may act as a processor or, for some services, as a separate controller depending on the features enabled.

Full payment card details are not stored directly by Injexo. They are processed by the secure payment providers offered at checkout.

7. International transfers

As TM Trading Group LLC is established in the United States and some providers may operate outside the European Economic Area, data may be subject to international transfers.

Where the regulations require it, such transfers rely on a recognised mechanism, such as an adequacy decision, standard contractual clauses, binding corporate rules or appropriate supplementary safeguards.

8. Retention periods

  • order and invoicing data: for the duration of the business relationship and then for the period required by the applicable accounting and tax obligations, generally up to 10 years;
  • customer account data: while the account is in use and then for up to 3 years of inactivity, unless a legal obligation or an admissible deletion request applies;
  • contact, quotation or fitment requests without an order: up to 3 years after the last meaningful contact;
  • data used for marketing: for the duration of the business relationship and then up to 3 years after the last purchase or contact;
  • evidence of objection to marketing: for the period needed to honour the objection on a lasting basis, generally 3 years;
  • data relating to a dispute: for the period necessary to handle it and for the applicable limitation periods;
  • cookie preferences: the choice may be kept for around 6 months before being requested again.

Data may be archived with restricted access where it must be kept to satisfy a legal obligation or to defend a right.

9. Cookies and similar technologies

The site uses cookies necessary for the cart, the session, payment, security and the operation of Shopify. Such cookies do not always require consent where they are strictly essential.

Cookies for audience measurement, personalisation or advertising are placed only where consent is required and has been obtained. Consent may be refused or withdrawn at any time using the cookie management tool on the site.

10. Commercial communications

Commercial messages by e-mail, SMS or telephone are sent in compliance with the applicable rules. Where consent is required, it is obtained before sending. Every commercial electronic communication offers an easy way to unsubscribe.

Communications necessary to handle an order, a guarantee, a return or a request are not advertising messages and may be sent without marketing consent.

11. Your rights

Depending on the applicable regulations, you may request:

  • access to your data;
  • its rectification;
  • its erasure;
  • restriction of the processing;
  • to object to certain processing;
  • the portability of the data you have provided;
  • the withdrawal of your consent at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise your rights, write to contact@injexo.fr setting out your request. Proof of identity may be requested only where it is necessary to prevent disclosure to a third party.

If you consider that your rights are not being respected, you may lodge a complaint with the competent data protection authority, in particular the CNIL if you reside in France.

12. Security

Injexo and its providers implement reasonable technical and organisational measures to protect data against destruction, loss, alteration, disclosure or unauthorised access. As no system can guarantee absolute security, these measures are regularly adapted to the risks identified.

13. Children's data

The products sold on Injexo are not intended for minors. An order must be placed by a person with the required legal capacity.

14. Changes

This policy may be updated to reflect legal, technical or commercial developments. The update date shown at the top of the page identifies the applicable version.

15. Contact

TM Trading Group LLC – Injexo
254 Chapman Rd, Ste 208, Newark, DE 19702, United States
contact@injexo.fr