Privacy Policy
Union Car Parts® Ltd
Company Number: 16643921
Registered Office: 143-145 Broadway, London, England, W13 9BE
Last Updated: 23/01/2026
Contents
- Introduction
- Data We Collect
- How We Use Your Data
- Legal Basis for Processing
- Data Sharing
- International Transfers
- Data Retention and Deletion
- Data Security.
- Your Rights.
- Cookies.
- Changes to This Privacy Policy.
- Contact
1. Introduction
This Privacy Policy explains how Union Car Parts® Ltd (“we”, “us”, or “our”) collects, uses, stores, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy applies to personal data collected through our website, sales channels, communications, and customer interactions. By using our website or services, you acknowledge this Privacy Policy.
2. Data We Collect
We may collect and process the following categories of personal data:
- Identity Data: name, title
- Contact Data: billing address, delivery address, email address, telephone number
- Order & Transaction Data: order history, payment status, returns and refunds information
- Technical Data: IP address, browser type, device information, operating system, cookies, and usage data
- Communication Data: enquiries, emails, messages, and customer support interactions
We do not intentionally collect special category personal data (such as health, biometric, or genetic data).
3. How We Use Your Data
We use personal data only where lawful and necessary, including to:
- Process and fulfil orders, deliveries, returns, and refunds
- Manage customer accounts and respond to enquiries
- Communicate order updates and service-related information
- Comply with legal, regulatory, accounting, and tax obligations
- Prevent fraud and protect the security of our website and systems
- Improve our website, products, and customer experience
We do not sell personal data to third parties.
4. Legal Basis for Processing
We process personal data under one or more of the following lawful bases:
- Contract – where processing is necessary to fulfil an order or provide services
- Legal Obligation – where processing is required to comply with UK law
- Legitimate Interests – for fraud prevention, security, business operations, and service improvement
- Consent – where you have explicitly opted in (e.g. marketing communications, cookies where applicable)
Where consent is relied upon, you may withdraw it at any time.
5. Data Sharing
We may share personal data with trusted third parties where necessary, including:
- Payment service providers
- Delivery and courier companies
- IT, website hosting, and platform providers
- Professional advisers, regulators, or authorities where legally required
All third parties are required to process personal data securely and in compliance with data protection laws.
6. International Transfers
We do not routinely transfer personal data outside the United Kingdom. Where international transfers occur (for example, through third-party service providers), appropriate safeguards will be in place in accordance with UK GDPR.
7. Data Retention and Deletion
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, accounting, and business requirements.
Unless a longer retention period is required or permitted by law, all personal data may be considered for deletion after a period of seven (7) years from the date on which the relevant matter was last closed, completed, or processed. This includes, but is not limited to:
- Purchase and transaction records
- Returns and refunds records
- Warranty claims and dispute records
- Customer service communications and enquiries
- Account-related and order history data
The seven-year retention period reflects statutory limitation periods and record-keeping obligations under UK law. Once this period has expired, personal data will be securely deleted, anonymised, or otherwise disposed of in a manner that prevents further identification, unless retention is required for the establishment, exercise, or defence of legal claims, or to comply with a legal obligation.
8. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. Access to personal data is limited to authorised personnel only.
While we take reasonable steps to protect personal data, no system can be guaranteed to be completely secure.
9. Your Rights
Under UK GDPR, you have the right to:
- Request access to your personal data
- Request correction of inaccurate or incomplete data
- Request erasure of personal data (where legally applicable)
- Request restriction of processing in certain circumstances
- Object to processing based on legitimate interests
- Request data portability
- Withdraw consent at any time where consent is the lawful basis
- Lodge a complaint with the Information Commissioner’s Office (ICO)
We may need to verify your identity before responding to a request.
10. Cookies
We use cookies and similar technologies on our website. For detailed information about the cookies we use and how you can manage them, please refer to our Cookies Policy.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legislation, technology, or our business practices. Any updates will be published on this page and will take effect immediately.
12. Contact
If you have any questions about this Privacy Policy or how your personal data is handled, please contact:
Union Car Parts® Ltd
143-145 Broadway
London, England, W13 9BE
Email: info@unioncarparts.com
Phone: 07990 957942