Last updated October 2026.
What we collect
When you place an order or contact us, we receive the details you give us: your name, email address, phone number, delivery address, your car, and your build specification. That information reaches us through the order form on this site, through Stripe when you pay, and by email when you write to us. We use it to build your wheel, deliver it, and support your order.
Payments
Card payments are handled by Stripe on their secure systems. We never see or store your card number. Payment is by card through Stripe. In each case we see only that the payment arrived.
Order emails
When you place an order we send a confirmation to the email address you give us, and payment and shipping updates after that. These are order emails, not marketing. We send them through Resend, an email delivery service, which processes your email address for that purpose.
If you start a checkout and do not finish it, you may receive follow-up emails about that checkout. Each one has an unsubscribe link, and you can unsubscribe from any of them.
What we do not do
We do not sell your information to anyone, and we do not share it except where needed to deliver your order, for example giving the courier your delivery address.
Cookies and analytics
We use Google Analytics 4 to understand how the site is used, for example which pages people visit and where orders come from. It sets cookies and collects usage data such as pages viewed and approximate location. Google Analytics 4 uses your IP address to work out that approximate location and does not store it.
When an order is completed we also send Google Analytics the build reference, the order value and the currency, so we can see which pages led to a sale. We do not send your name, address, email address or card details to Google. We use all of this only to improve the site and our advertising, and we do not sell it. Fonts are loaded from Google Fonts, which involves your browser requesting files from Google's servers.
We also use the Meta Pixel, which measures how well our advertising on Facebook and Instagram works and helps us show more relevant ads there. It sets cookies and shares usage data with Meta, such as pages visited, wheels looked at, checkouts started and orders placed. When an order is completed we send Meta the order reference, the order value and the currency. See Meta's privacy policy for how they handle this data.
We also send those same events to Meta from our own server, using the Meta Conversions API. This is the same list of events, sent once rather than twice: each one carries an identifier that lets Meta match the two and count a single event. Along with it we send information that helps Meta recognise a returning customer, and that information is hashed before it leaves our server: your email address, phone number, first and last name, city, state or province, postal code and country are turned into a one way SHA-256 fingerprint that cannot be read back, and we never send any of them in a readable form. Three things are sent as they are, because Meta's system reads its own identifiers rather than facts about you: the IP address and browser user agent of the request, and Meta's two cookies in your browser, one the Meta Pixel sets and one holding the reference Meta adds to the link when you arrive from one of our ads, which our site keeps for ninety days. We send nothing else about you, and no card details ever reach Meta.
We also use the Reddit Pixel, which measures how well our advertising on Reddit works. It sets cookies and shares usage data, such as pages visited and orders placed, with Reddit. See Reddit’s privacy policy for how they handle this data.
We also use the Microsoft UET tag, which measures how well our advertising on Bing and the wider Microsoft network works. It sets cookies and shares usage data, such as pages visited, checkouts started and orders placed, with Microsoft. When an order is completed we send Microsoft the build reference, the order value and the currency, and nothing else about you. See Microsoft's privacy statement for how they handle this data.
We also use the ChatGPT Ads measurement pixel from OpenAI, which measures how well our advertising inside ChatGPT works. If you reach us by clicking an ad in ChatGPT, OpenAI adds a reference to the link, and the pixel stores that reference in a cookie on our site for thirty days along with a randomly generated browser reference that lasts a year. It shares usage data with OpenAI, such as pages visited, wheels looked at, checkouts started and orders placed, and we record the click reference against your order so we can tell which orders came from ChatGPT.
As with Meta, we also send those events to OpenAI from our own server, and each one carries an identifier that lets OpenAI match the two and count a single event. Your email address, phone number and first and last name are hashed into a one way SHA-256 fingerprint before they leave our server, exactly as they are for Meta. Four things are different here, and OpenAI's specification is the reason: your city, your state or province, your postal code and your country are sent as plain text rather than hashed. Meta accepts those four hashed and OpenAI does not, so hashing them would simply stop the matching working. The IP address and browser user agent of the request are also sent as they are, along with the two references described above. No card details ever reach OpenAI, and we send nothing else about you.
If you prefer not to be counted, most browsers let you block analytics cookies, including the Meta Pixel, the ChatGPT Ads pixel, the Reddit Pixel and the Microsoft UET tag, and Google offers an opt out at tools.google.com/dlpage/gaoptout. Blocking cookies stops the pixels in your browser, but not the server side events described above, which are sent when an order is placed. Your Meta ad preferences at accounts.meta.com control how Meta may use that activity for advertising, and your OpenAI data controls at chatgpt.com cover the same ground for ChatGPT. You can ask us to delete what we hold by emailing hello@noonsteer.com.
How long we keep things
We keep order records for as long as we need them to support your wheel and to meet tax and accounting requirements in Canada.
Your choices
You can ask what information we hold about you, ask us to correct it, or ask us to delete what we are not legally required to keep. Email hello@noonsteer.com and we will sort it out.