Privacy Policy

1. Data Controller

The data controller responsible for your personal data is CarParts247, operated by Č. Majausko IĮ (company code 149902110, VAT no. LT499021113), registered at Kepyklos g. 15A, LT-62117 Alytus, Lithuania. If you have any questions about this Privacy Policy or our data practices, please contact us at info@carparts247.co.uk.

2. Information We Collect

We may collect the following categories of personal data:

• Identity data: name, billing address, delivery address.
• Contact data: email address, telephone number.
• Transaction data: details of products purchased, payment method, order history.
• Technical data: IP address, browser type, device information, pages visited.
• Marketing data: your preferences for receiving marketing communications.

3. How We Use Your Data

We process your personal data for the following purposes:

• To fulfil and deliver your orders.
• To process payments and prevent fraud.
• To communicate with you about your orders and account.
• To send marketing communications where you have opted in.
• To improve our website, products, and services.
• To comply with legal obligations.

4. Legal Basis for Processing

We rely on the following legal bases under the UK GDPR: performance of a contract (order fulfilment), legitimate interests (fraud prevention, site improvement), consent (marketing communications), and legal obligation (tax and accounting records).

5. Data Sharing

We may share your personal data with trusted third parties who assist us in operating our business, including payment processors, courier and logistics partners, and IT service providers. Where you have consented to advertising cookies, we also share limited personal data (such as IP address, device information, and pages visited) with our advertising and analytics partners, Google and Microsoft, to measure and improve our advertising. We do not sell your personal data to third parties. All third-party providers are contractually obligated to handle your data securely and in accordance with applicable data protection laws.

Google Customer Reviews. After you place an order, our order confirmation page may invite you to take part in Google Customer Reviews, a survey programme run by Google. To show that invitation, your order number, email address, delivery country and estimated delivery date are passed to Google's opt-in module on that page. Taking part is optional: if you opt in, Google uses these details to email you a short survey about your purchase after your order is expected to arrive; if you decline, Google does not send you the survey. Google handles this information under the Google Privacy Policy.

6. Cookies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse site traffic, and personalise content. Where you consent to advertising cookies, third-party advertising tags on our site collect or receive personal data: Microsoft collects or receives personal data through Microsoft Advertising Universal Event Tracking (see the Microsoft Privacy Statement), and Google through Google tags (see the Google Privacy Policy). These tags are used for advertising measurement and, where consented, ad personalisation. You can manage your cookie preferences or withdraw consent at any time using the cookie banner or the Cookie Settings link in our footer. For full details on which cookies we use and why, please see our Cookie Policy.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Order data is typically retained for 6 years in line with HMRC requirements.

8. Your Rights

Under the UK GDPR, you have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to withdraw consent at any time — every marketing email we send includes an unsubscribe link, and cookie consent can be withdrawn via Cookie Settings in our footer. To exercise any of these rights, please contact us at info@carparts247.co.uk. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ico.org.uk).

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All payment transactions are encrypted using SSL technology.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.