Last updated on 9 November 2026.
This notice explains what personal information Car Parts Warehouse LTD collects when you use carpartswarehouse.co.uk, why we use it, who we share it with, how long we keep it and what your rights are.
Who We Are
Car Parts Warehouse LTD, Amtri House, Hulley Road, Macclesfield SK10 2NE, United Kingdom, is the controller of your personal information. For anything about this notice or your information, email info@carpartswarehouse.co.uk.
How Our Service Works
We list car parts from sellers on eBay, show them on our website at our price and take your payment. We then source your part from the seller, who sends it directly to you. This is why some of your information has to go to eBay and the seller, as described below.
Information We Collect
When you look for parts:
- Your vehicle registration and the vehicle details we find for it (such as make, model, year, engine and body style). We keep these on your device in a cookie so you do not have to enter them again, and with your basket and order.
- What you search for on the website.
- Your delivery postcode, when we get a delivery cost for you.
When you place an order:
- Your name, email address, phone number (optional), delivery address and, if different, billing address.
- The parts you ordered, the prices and the vehicle you chose.
- Your payment details. You type your card details into a secure form provided by Square, our payment provider. Your card number never reaches our systems. Square tells us whether the payment worked and gives us a payment record, which can include the card type, the last four digits and expiry date of the card, your billing address and email address, and Square's assessment of the fraud risk.
- That you agreed to our terms, and our record of what happens to your order.
When you ask for a return:
- Your name, email address, phone number (optional), order number, the item, the reason for the return and the photos you upload.
- We remove location and camera details from photos. If your browser cannot convert a photo (for example a HEIC photo on some phones), it is kept as you sent it and may show where it was taken, so you may prefer to send a screenshot or a JPEG. We also keep each photo's file name.
When you contact us: what you write to us and our replies.
When you use the website:
- Technical information such as your IP address, browser and the pages you request, which our hosting provider records for security and to keep the website working. To prevent misuse of our checkout and returns forms, we count requests using a scrambled (hashed) form of your IP address and, for returns, your email address, and delete these counts within a day or two. Each return request also keeps a hashed form of the IP address it came from, so we can spot repeated misuse. We still treat these as personal information.
- Cookies and similar technologies. Analytics and advertising cookies are only used if you agree to them. See our Cookie Policy.
From others: vehicle details from a vehicle look-up service (normally eBay's) when you enter a registration, and the payment record from Square.
You do not have to give us your information, but we cannot take or deliver an order, or handle a return, without the details the forms ask for.
How We Use Your Information And Why
The law requires us to have a reason, called a lawful basis, for each use.
- To take, source and deliver your order, and keep you updated about it (including order confirmation, progress, refund and cancellation emails): because it is needed for our contract with you.
- To take payment and handle refunds and chargebacks: because it is needed for our contract with you.
- To handle returns, faulty parts and complaints, including emails about your return request: because it is needed for our contract with you, and to meet our legal duties to consumers.
- To keep accounting and tax records: because the law requires it.
- To find parts for your vehicle and show delivery costs: because you asked us to, as a step towards a contract with you.
- To prevent fraud, misuse and attacks, and to keep the website secure and working (including error and performance monitoring, with personal details removed as far as we can): in our legitimate interests, and yours, in a safe and reliable service.
- To count visits and orders without cookies: Google's tags load on every page and, until you agree to cookies, send Google limited information without storing anything on your device (see below). We do this in our legitimate interest in knowing how many people use the website and place orders.
- To understand how the website is used and to measure our advertising: only with your consent, given through the cookie banner. If you agree to advertising cookies, we record which advert brought you to us and, when you order, tell Google Ads that an order came from that advert. We also send Google a scrambled (hashed) form of your email address and phone number so it can match the order to your Google account. We never send them in plain text. Google may also use this information to show you our adverts on other websites and to personalise the adverts you see.
We do not send marketing emails, and we do not sell your information.
How We Share Your Information
We share your information only as needed for the uses above:
- eBay and eBay sellers, to fulfil your order: your part is sourced from a seller on eBay, so your name and delivery address are passed to eBay and to the seller, who sends the part to you. When you look up a registration, your registration is sent to eBay (or, if eBay's look-up is unavailable, to another vehicle data provider). Your delivery postcode is sent to eBay whenever we get a delivery cost or check a part is still available, in your basket and at checkout. Part pictures on our website load from eBay's servers, which can see your IP address.
- Square, our payment provider, which receives your card details, name, email address, phone number and billing address directly from the payment form, to take the payment, check it and prevent fraud. If you pay with Google Pay or Apple Pay, Google or Apple also handle the payment under their own privacy policies.
- Google Cloud, which hosts our website, database and files in London.
- Microsoft, which provides our email service (Microsoft 365) and sends our emails to you.
- PostHog, which receives error and performance reports from our systems, from which we remove names, contact details, addresses, registrations and card details before they are sent, and, if you agree to analytics cookies, records of searches and part pages viewed that do not identify you. Its servers are in the European Union (Frankfurt).
- Google (Google Tag Manager, Google Analytics and Google Ads). Google's tags load on every page. Until you agree to analytics or advertising cookies they set no cookies, but they still send Google limited information without cookies, such as that a page was viewed or an order was placed (with its number, value and items), along with your IP address. With your consent they also use cookies, as described in our Cookie Policy.
- Microsoft Clarity, only if you agree to analytics cookies. Clarity records how pages are used, including mouse movements and clicks, to help us improve the website; we hide your registration from it.
- Our professional advisers, such as our accountants, and authorities such as HMRC or the police, where the law requires it or to establish or defend legal claims.
- A buyer of our business, if the business is sold, who would have to use your information in line with this notice.
The providers above act on our instructions, except eBay, its sellers, Square, Google and Microsoft Clarity, which may also use the information for their own purposes under their own privacy policies.
Transfers Outside The UK
Our database and files are kept in the United Kingdom. PostHog keeps data in the European Union, which UK law recognises as giving adequate protection. Some of our providers, such as Google, Microsoft, Square and eBay, may also process information in other countries, including the United States. Where they do, the transfer is protected by safeguards recognised under UK law, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Agreement or Addendum.
How Long We Keep Your Information
- Orders, payments and refunds: 6 years after the end of the financial year in which the order was placed, as HMRC requires. Emails about an order are kept for the same time.
- Return requests: for as long as we keep the order they relate to. Return photos are deleted 2 years after they are uploaded. Photos that never became part of a return request are deleted within a few days.
- Order records from our previous website: these were transferred to this website, so that we can help with returns and refunds on earlier orders and keep the records HMRC requires. They are kept for the same time as other orders.
- Baskets and unfinished checkouts: 90 days after last use.
- Vehicle look-ups: 30 days.
- Search records: 13 months.
- Security and server logs: 30 days. Error and performance reports: up to 1 year.
- Cookies: as listed in our Cookie Policy.
After these times we delete your information or make it anonymous, so that it no longer identifies you.
Your Rights
Under UK data protection law you have the right to:
- ask for a copy of your personal information;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information. We may have to keep some of it, such as order and tax records, for as long as the law requires;
- ask us to limit how we use your information;
- object to a use based on our legitimate interests;
- ask for information you gave us in a format you can reuse elsewhere;
- withdraw your consent to analytics and advertising cookies at any time, with the Cookie settings button on the website. This does not affect what happened before you withdrew it.
Your right to object. Where we use your information on the basis of our legitimate interests (see How We Use Your Information And Why), you can object at any time by emailing us, and we will stop unless we have compelling reasons to continue or need the information for a legal claim.
To use any of these rights, email info@carpartswarehouse.co.uk. We may ask you to confirm who you are. We will reply within one month, and there is usually no charge.
We do not make decisions about you by automated means that have legal or similarly significant effects. Our website does apply fixed rules, for example not accepting orders for delivery to areas we cannot deliver to, and limiting repeated payment attempts to prevent fraud. If such a rule stops you ordering and you think it is wrong, contact us and a person will look at it.
Complaints
If you are unhappy with how we use your information, please contact us first so we can try to put it right. You can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Security
We protect your information with access controls, encryption in transit, and by never receiving or storing your full card number or security code. Only staff who need your information for their work can see it. No website can be completely secure, so if you think your information has been misused, please tell us straight away.
Changes To This Notice
We will post any changes on this page and change the date at the top. If a change is significant, we will also show a notice on the website.