1. Who is responsible for your information?
ONE CARPART LIMITED, trading as OneCarPart, is the controller of personal information used to run onecarpart.co.uk and manage our customer relationships. Our company number is 10751139. Our registered office and contact address is Unit 26, Lye Valley Industrial Estate, Stourbridge, England, DY9 8HX.
For privacy enquiries or to exercise your rights, email info@onecarpart.co.uk, telephone +44 7305 049300, or write to the address above.
2. Information we use and where it comes from
- Account and business details: your name, business name, business registration or VAT details where supplied, email address, telephone number, account credentials and account preferences.
- Orders and delivery: products, quantities, prices, billing and delivery addresses, delivery instructions, order history, payment references and payment status.
- Correspondence: enquiries, messages, support requests and information you provide when contacting us.
- Technical and security information: IP address, browser or device information, session identifiers, access records and information needed to detect fraud or misuse.
You provide information through account registration, purchases and enquiries. We may also receive information from your employer or colleagues, marketplaces where you order our goods, payment providers, delivery providers and connected order-management services. Please provide only information relevant to your enquiry, and do not send payment-card details or sensitive personal information through the contact form.
3. Why we use information and our legal bases
| Purpose | Legal basis |
|---|---|
| Manage your account, respond to requested quotations, supply goods and arrange delivery | Take steps at your request before a contract or perform a contract with you. For business contacts acting for an organisation, our legitimate interests in managing that business relationship. |
| Answer enquiries, maintain service records and resolve complaints | Contract where applicable; otherwise legitimate interests in providing customer support and resolving issues. |
| Keep accounting, tax and legally required transaction records | Compliance with legal obligations. |
| Protect accounts, prevent fraud and abuse, maintain our website and establish or defend legal claims | Legitimate interests in security, reliable services and protecting legal rights; legal obligations where applicable. |
| Optional marketing or optional tracking, if introduced | Consent where required by applicable law. Any other permitted basis will be explained when information is collected, with an appropriate opt-out. |
Where we rely on legitimate interests, we must consider your rights and interests. You may object to this processing. Creating an account does not itself give consent to optional marketing.
Information marked as required is needed to administer an account, respond to a request or fulfil an order. If you do not provide it, we may be unable to offer the relevant service. We do not use the website to make solely automated decisions producing legal or similarly significant effects on you.
5. International processing
Our hosting server is in the United Kingdom and hosting backups may be held in Germany. Service providers and authorised support personnel may process or access information in other countries, including Türkiye and countries used by Google or PayPal. This notice does not replace the transfer safeguards required by law. Where processing involves a restricted international transfer, an applicable adequacy decision, approved contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum, or another lawful mechanism is required. Contact us for information about the destinations and safeguards relevant to your data.
6. How long information is retained
Retention depends on why the information is held, our relationship with you, applicable record-keeping duties and any dispute or legal hold. Account details are retained while needed to administer the relationship and afterwards only for justified legal, accounting or service purposes. Enquiries are retained while needed to resolve and evidence the matter. Security records are retained proportionately to investigate misuse and protect the service.
Company accounting records generally need to be kept for six years from the end of the financial year concerned, and sometimes longer where legally required. This does not mean every contact message or technical log is kept for six years. Copies in backups follow the backup cycle and may not disappear immediately when a live record is deleted. Ask us about the retention criteria for a particular record.
7. Your choices and rights
Depending on the law and circumstances, you may request access, correction, erasure, restriction or portability of your personal information, object to processing based on legitimate interests, and withdraw consent without affecting processing that was lawful before withdrawal. Rights may be limited where records must be retained or a legal exception applies. We may need to verify your identity and normally respond within one month, subject to lawful extensions.
You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113. You do not have to contact us first, although we welcome the opportunity to help. Where another jurisdiction’s privacy law applies, you may also have rights to contact its competent authority.
8. Security, cookies and updates
We use access controls and other appropriate technical and organisational measures to protect information. No online service can guarantee absolute security; keep your password private and contact us if you suspect account misuse. Our service is intended for customers seeking automotive parts and is not directed at children.
See our Cookie Policy for session and third-party technologies. This notice may be updated when our services or legal requirements change; the date above identifies this version. Material changes will be brought to your attention where required.