Privacy Policy
Last updated: 12 June 2024
1. Introduction
Northern Auto Parts ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your personal information when you visit our website, create an account, or place an order with us. It also sets out your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website, you acknowledge that you have read and understood the practices described in this policy.
2. Information We Collect
We collect and process the following categories of personal data in order to provide our products and services to you:
- Account details: your name, email address, telephone number, and password when you register an account.
- Order information: delivery and billing addresses, the products you purchase, and details relevant to fitment such as vehicle registration or make and model.
- Payment data: payment card details are collected and processed securely by our third-party payment processor. We do not store your full card number on our systems.
- Browsing and cookie data: your IP address, device and browser type, pages viewed, and interactions with our site, collected through cookies and similar technologies.
3. How We Use Your Information
We use your personal information to:
- Process, fulfil, and dispatch your orders, including arranging delivery through our courier partners.
- Manage your account and provide customer support, returns, and warranty assistance.
- Send order confirmations, dispatch notifications, and service-related communications.
- Verify part compatibility with your vehicle and improve the accuracy of our fitment tools.
- Detect and prevent fraud, and keep our website and transactions secure.
- Send marketing communications where you have consented, which you can opt out of at any time.
4. Legal Basis for Processing
Under the UK GDPR, we rely on the following lawful bases to process your personal data:
- Performance of a contract: to process and deliver the orders you place with us.
- Legal obligation: to comply with our accounting, tax, and consumer protection duties.
- Legitimate interests: to improve our products, secure our site, and prevent fraud, provided these interests are not overridden by your rights.
- Consent: for optional marketing communications and non-essential cookies, which you may withdraw at any time.
5. Sharing Your Information
We share your personal information only where necessary to provide our services. This may include our courier and delivery partners to fulfil your orders, and our payment processors to handle transactions securely. All third parties are required to protect your data and use it only for the purposes we specify.
We never sell your personal information to third parties. We may disclose your data where we are legally required to do so, or to protect our rights, property, or the safety of our customers.
6. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Order and transaction records are typically retained for six years to comply with UK tax and consumer law. Where data is no longer required, we securely delete or anonymise it.
7. Your Rights
Under UK data protection law, you have the following rights in relation to your personal data:
- Right of access: to request a copy of the personal data we hold about you.
- Right to rectification: to have inaccurate or incomplete data corrected.
- Right to erasure: to request deletion of your data where there is no compelling reason for us to keep it.
- Right to object: to object to processing based on our legitimate interests or for direct marketing.
- Right to restrict processing and the right to data portability in certain circumstances.
To exercise any of these rights, please contact us using the details below. If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk.
8. Cookies
We use cookies and similar technologies to keep our site working, remember your preferences, and understand how our site is used. Some cookies are essential, while others require your consent. For full details on the cookies we use and how to manage them, please see our Cookie Policy.
9. Contact & Data Protection Queries
If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact our Data Protection team:
Northern Auto Parts Email: privacy@northernautoparts.co.uk Post: Data Protection, Northern Auto Parts, Unit 4 Trade Park, Manchester, M17 1AB