Privacy policy
Effective date: 9 October 2026
This Privacy Policy explains how Keeper Hill LLC, which sells under the brand OHP Tools ("OHP Tools", "we", "us", "our"), collects, uses, shares and protects your personal information. It applies when you visit ohptools.com (the "Store"), buy from us, contact our support team, subscribe to our emails, or interact with us on social media.
If you have questions, email support@ohptools.com.
1. Who we are
The company responsible for your personal information (the "controller" under EU law) is:
Keeper Hill LLC (brand: OHP Tools)
800 N King Street, Suite 304 #1018, Wilmington, DE 19801, USA (mailing address only, not for product returns)
Email: support@ohptools.com or info@ohptools.com
Phone: +1 702 820 2098
Our owner is based in Estonia (European Union). Customer support and other day-to-day operations may be handled from the EU by OHP OÜ (Estonia). OHP OÜ acts as our service provider and processes personal information on our behalf and on our instructions.
We have not appointed a Data Protection Officer. Send all privacy questions and requests to support@ohptools.com.
2. Information we collect
Information you give us
- Order and account information: your name, billing and shipping address, email address, phone number, account login details (if you create an account), and what you bought.
- Payment information: payment is processed by Shopify Payments (see section 6). We do not see or store your full card number. We receive limited details such as the payment method, the last four digits of the card, and whether the payment went through.
- Support information: what you send us by email, the contact form, chat, phone or social media. For example, your questions, vehicle make/model/year, VIN, photos, screenshots, diagnostic software logs, and any warranty or return details.
- Marketing preferences: your email address and preferences if you subscribe to our newsletter, register for an extended warranty, or sign up through a form on the Store.
- Reviews and feedback: product reviews, survey answers, and comments you post.
Information collected automatically
- Device and usage data: IP address, browser and device type, operating system, language, approximate location (from your IP address), pages viewed, products viewed or added to your cart, referring website, and the date and time of your visit.
- Cookies and similar technologies: see section 8.
Information from other sources
- Amazon: we receive the shipping details Amazon needs to deliver your order (name, shipping address, and sometimes a phone number) when (a) we fulfil a Store order through Amazon Multi-Channel Fulfillment, or (b) you buy our products on Amazon. For purchases made on Amazon, Amazon is responsible for the data it collects under its own privacy notice. We only receive what Amazon shares with sellers.
- Payment and fraud-prevention providers: information about whether a transaction was approved or flagged as possible fraud.
- Social media platforms: if you message, follow, comment on or mention us on Facebook, Instagram or other platforms, we receive your public profile information and your messages.
We do not intentionally collect sensitive personal information, such as health data, precise geolocation, government ID numbers or financial account login details. Please don't send us this kind of information.
Our diagnostic cables and adapters do not send vehicle data or personal information to us. Diagnostic software you use with them (for example FORScan or BMW tools) is provided by third parties under their own terms. We only see vehicle data if you choose to send it to us for support.
3. How we use your information and our legal bases
We do not currently ship to the European Union or the European Economic Area (EEA). However, visitors from the EEA, the United Kingdom or Switzerland may still browse the Store or contact us, and our support team is partly based in the EU. Where the GDPR (or UK GDPR) applies, we must have a legal basis for each use of your data. The table below shows each use and its legal basis.
| Purpose | Examples | Legal basis (GDPR) |
|---|---|---|
| Processing and delivering orders | Taking payment, shipping through Amazon MCF, sending order and shipping emails, handling returns, refunds and warranty claims | Performance of a contract (Art. 6(1)(b)) |
| Customer support | Answering emails, chats and calls, troubleshooting products | Contract (Art. 6(1)(b)) and our legitimate interest in helping customers (Art. 6(1)(f)) |
| Running and securing the Store | Hosting, preventing fraud and abuse, fixing errors, keeping your cart and login working | Legitimate interests (Art. 6(1)(f)) and, where required, legal obligation |
| Marketing emails | Newsletters, product news, offers | Consent (Art. 6(1)(a)). You can unsubscribe at any time. |
| Analytics and advertising cookies | Understanding how the Store is used, measuring and improving ads on Facebook/Instagram and Google | Consent (Art. 6(1)(a)) |
| Social media | Replying to messages and comments, publishing content | Legitimate interests (Art. 6(1)(f)) |
| Legal, tax and accounting | Keeping invoices and records, responding to lawful requests, handling disputes and chargebacks | Legal obligation (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f)) |
| Improving our products and service | Reviewing support requests and feedback to improve products, documentation and FAQs | Legitimate interests (Art. 6(1)(f)) |
Where we rely on legitimate interests, we have weighed those interests against your rights. You may object at any time (see section 10).
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. AI-assisted customer support
We may use AI writing assistants to help us understand and draft replies to support requests faster. When we do, the content of your message (and any order details needed to answer it) may be processed by the AI service provider on our behalf. A person on our team reviews replies before they are sent. We choose providers whose business terms do not allow them to use our customer data to train their models.
5. Phone calls
Calls to our support line (+1 702 820 2098) are handled by a third-party answering service acting for us, and may be recorded where you are told so. The service notes your name, contact details and the reason for your call so that we can call you back.
6. Who we share your information with
We do not sell your personal information for money. We share personal information only as described below.
Service providers (processors) that handle data on our behalf, under contracts that limit how they can use it:
- Shopify – Store hosting, checkout, customer accounts, order management, Shopify Inbox chat and Shopify Email features
- Payment provider – Shopify Payments, including Shop Pay and card wallets such as Apple Pay or Google Pay where offered
- Amazon (Multi-Channel Fulfillment / FBA) – storing, packing and shipping orders, plus the carriers Amazon uses (for example UPS, USPS, FedEx or Amazon Logistics)
- Google Workspace – email and document storage
- Email marketing – MailerLite (newsletter and signup forms), only if you opt in
- Social media and scheduling tools – Meta (Facebook, Instagram) and Metricool
- Analytics and advertising tools – the Meta pixel, and Google tools such as Google Tag Manager and Google Analytics where used (see section 8)
- Website apps and widgets – for example POWR (forms and popups) and embedded YouTube videos
- Phone answering service – handling calls to our support line
- AI assistant providers – helping draft support replies (see section 4)
- OHP OÜ (Estonia) – customer support and operations
- Professional advisers – accountants, auditors and lawyers
Other recipients:
- Legal and safety: authorities, courts or other parties when the law requires it, or to protect our rights, our customers or the public (for example, fraud prevention or chargeback disputes)
- Business transfers: a buyer or successor if our business or assets are sold, merged or reorganized. Any such buyer must continue to protect your information as this policy describes.
- With your consent: anyone else you ask us to share with
7. International data transfers
We are a US company, our owner and support team may be in the EU (Estonia), and many of our service providers are in the United States or elsewhere. This means your personal information may be transferred to, stored in, and accessed from the United States, the European Union and other countries. These countries may have different data protection laws from your own.
When we transfer personal information from the EEA, the UK or Switzerland to a country without an "adequacy decision", we use appropriate safeguards. These include the European Commission's Standard Contractual Clauses (SCCs) (with the UK Addendum where relevant), or a provider's certification under the EU-U.S. Data Privacy Framework where that provider is certified. You can ask us for more information about these safeguards by emailing support@ohptools.com.
8. Cookies and similar technologies
Cookies are small files stored on your device. We and our partners use cookies, pixels and similar technologies for these purposes:
-
Strictly necessary: make the Store work, for example your cart, checkout, login, security and fraud prevention (Shopify cookies such as
_shopify_essential,cart,localization). These cannot be switched off. - Analytics: help us understand how visitors use the Store (for example Shopify analytics and, where used, Google Analytics).
- Marketing: measure and personalize ads and build audiences on platforms such as Facebook/Instagram (Meta pixel) and Google, and support email signup forms (MailerLite).
- Embedded content: YouTube videos and social media widgets may set their own cookies when you play or interact with them.
Your choices:
- Consent where required: where the law requires it (for example for visitors from the EEA, UK or Switzerland), we ask for your consent before using analytics or marketing cookies. Where a cookie or privacy settings link is shown on the Store, you can use it to change your choice at any time.
- Everyone: you can also block or delete cookies in your browser settings. Doing so may stop parts of the Store from working.
- Global Privacy Control (GPC): we treat a GPC browser signal as a request to opt out of the "sale" or "sharing" of your personal information (see section 11).
- Advertising preferences: you can also manage ads at Meta (facebook.com/adpreferences) and Google (adssettings.google.com).
9. How long we keep your information
We keep personal information only as long as we need it for the purposes in this policy:
- Order and transaction records (accounting and tax): 7 years from the end of the financial year of the purchase
- Purchase history for guest checkouts: 3 years after the purchase
- Customer accounts: until you close your account. After that, data is deleted unless we must keep it for accounting, legal claims or dispute resolution.
- Support conversations (email, chat, calls): up to 3 years after the last contact, so we can handle warranty and follow-up questions
- Marketing email lists: until you unsubscribe. After that, we keep your email address on a suppression list so we don't email you again.
- Cookies: for the lifetime set for each cookie, usually from the end of your browsing session up to 2 years
- Disputes and legal claims: until the matter is settled or the limitation period ends
When we no longer need personal information, we delete it or anonymize it.
10. Your rights under the GDPR (EEA, UK and Switzerland)
The Store does not currently ship to the EU/EEA, but if the GDPR or UK GDPR applies to our handling of your information (for example because you browsed the Store or contacted us from there), these rights apply.
If the GDPR or UK GDPR applies to you, you have the right to:
- Access: get a copy of the personal information we hold about you
- Rectification: have inaccurate or incomplete information corrected
- Erasure: have your information deleted, unless we must keep it, for example for tax law
- Restriction: limit how we use your information in certain cases
- Data portability: receive information you gave us in a structured, machine-readable format, or have it sent to another company
- Objection: object to processing based on legitimate interests, and to direct marketing at any time
- Withdraw consent: at any time, for example by unsubscribing from emails or changing your cookie settings. This does not affect processing we did before you withdrew.
- Complain: to a data protection supervisory authority, especially in the country where you live or work, or where you think your rights were infringed. In Estonia, this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee). We'd appreciate the chance to resolve your concern first, so please contact us.
11. Your rights under US state privacy laws (including California)
Residents of California and other US states with consumer privacy laws (such as Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others) have the rights described here, subject to the limits in those laws.
Categories of personal information we collected in the last 12 months:
| Category (CCPA) | Examples | Collected? | Disclosed for business purposes to |
|---|---|---|---|
| Identifiers | Name, email, postal address, phone, IP address, account ID | Yes | Shopify (incl. Shopify Payments), Amazon MCF, email and support tools, analytics and advertising partners |
| Customer records (Cal. Civ. Code § 1798.80(e)) | Name, address, phone, limited payment details | Yes | Shopify (incl. Shopify Payments), Amazon MCF |
| Commercial information | Products bought, order history, returns | Yes | Shopify, Amazon MCF, Shopify Payments, accountants |
| Internet or network activity | Pages viewed, browsing on the Store, ad interactions | Yes | Shopify, Meta, Google |
| Approximate geolocation | Country or city from your IP address | Yes | Shopify, analytics providers |
| Audio and electronic information | Call notes or recordings, chat and email content | Yes | Answering service, Google Workspace, Shopify Inbox, AI assistant providers |
| Inferences | Product interests used for marketing | Limited | Email marketing and advertising partners |
| Sensitive personal information | — | No | — |
We collect this information from the sources described in section 2, for the purposes described in section 3. We keep it for the periods in section 9.
Sale and sharing: we do not sell personal information for money. We also do not sell or share the personal information of anyone we know is under 16. However, when we use advertising cookies and pixels (such as the Meta pixel), information like your IP address, device identifiers and browsing activity on the Store may be made available to advertising partners. Under California law this can count as "sharing" for cross-context behavioral advertising, and under some other state laws as "targeted advertising". You can opt out at any time by:
- using the "Do Not Sell or Share My Personal Information" / privacy choices link on the Store
- turning on Global Privacy Control in your browser
- emailing support@ohptools.com
We do not use or disclose sensitive personal information for purposes that would give you a right to limit its use.
Your rights: depending on your state, you have the right to:
- Know / access: the categories and specific pieces of personal information we collected about you, the sources, the purposes, and who we disclosed it to
- Delete personal information we collected from you, with exceptions under the law
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information and of targeted advertising
- Data portability
- Appeal a decision we make about your request, by replying to our decision email with the subject "Privacy appeal"
- Non-discrimination: we will not deny you goods, charge you different prices or give you a lower level of service because you used your privacy rights
Authorized agents: you can use an authorized agent to make a request for you. We may ask for proof that the agent has your permission, and we may ask you to verify your identity directly.
California "Shine the Light": we do not disclose personal information to third parties for their own direct marketing purposes.
12. How to make a request
Email support@ohptools.com with the subject "Privacy request", and tell us which right you want to use. You can also write to us at the postal address in section 1.
To protect your information, we will verify your identity before we act on your request. Usually we do this by matching the email address and order details we hold.
- GDPR requests: we respond within 30 days (one month). Where the law allows, we may extend this by up to two more months for complex requests and will tell you if we do.
- US state law requests: we respond within 45 days. Where the law allows, we may extend this by another 45 days and will tell you if we do.
Requests are free of charge. We may refuse or charge a reasonable fee for requests that are clearly unfounded or excessive, as the law allows.
13. Marketing communications
We send marketing emails only if you have subscribed, or where the law otherwise allows (for example, similar products for existing customers who did not opt out). Every marketing email has an unsubscribe link. You can also email support@ohptools.com to opt out. We will still send you transactional messages about your orders, such as order confirmations, shipping updates and support replies.
14. Children's privacy
The Store is not directed at children. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA, UK and where state law sets that age). We do not sell or share the personal information of anyone we know is under 16. If you believe a child has given us personal information, contact support@ohptools.com and we will delete it.
15. How we protect your information
We use reasonable technical and organizational measures to protect personal information, including:
- encrypted (HTTPS) connections on the Store
- PCI-DSS compliant payment processing through Shopify Payments
- access controls and two-factor authentication on our business accounts
- limiting access to the people and service providers who need it
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal information, we will notify you and the authorities as the law requires.
16. Third-party websites and services
The Store may link to other websites, such as diagnostic software vendors, YouTube, Facebook, Instagram or Amazon. Their own privacy policies apply to them, and we are not responsible for their practices.
17. Changes to this policy
We may update this Privacy Policy from time to time, for example when we add new tools or when laws change. We will post the updated version on this page and change the effective date at the top. If the changes are significant, we will also notify you by email or with a notice on the Store where appropriate.
18. Contact us
If you have questions about this policy or how we handle your personal information, contact us:
Keeper Hill LLC (OHP Tools)
800 N King Street, Suite 304 #1018, Wilmington, DE 19801, USA (mailing address only, not for product returns)
Email: support@ohptools.com (privacy requests) or info@ohptools.com (general)
Phone: +1 702 820 2098