Privacy Policy

This is placeholder text prepared as a UK GDPR-style template. It must be reviewed and finalised by the operator's solicitor before PartsYard is made available to the public. Nothing below constitutes legal advice.

1. What we collect

When you use PartsYard we may collect: account information (name, email address, business name); information you enter about vehicles, parts, customers, invoices and transactions; usage data (pages visited, features used, timestamps); technical data (IP address, browser type, device identifiers); and payment information processed via our payment provider (we do not store full card details).

2. How we use it

We use the data we collect to: provide and operate the Service; process payments; send transactional emails (account, billing, security alerts); respond to support requests; improve the product using aggregated, anonymised analytics; and comply with legal obligations.

3. Legal basis (UK GDPR)

We rely on the following legal bases: Contract — to fulfil our agreement with you as a subscriber; Legitimate interests — to operate, secure and improve the Service; Legal obligation — where we are required to process data by law; and Consent — where we ask for it explicitly (for example, optional marketing communications).

4. Sharing

We do not sell your data. We share it only with: sub-processors necessary to run the Service (hosting, email delivery, payment processing, error monitoring) under appropriate data-processing agreements; regulatory or law-enforcement bodies where required by law; and professional advisers under confidentiality obligations. A current sub-processor list is available on request.

5. Retention

We retain your data for as long as your account is active and for a reasonable period afterwards to fulfil legal obligations. On account closure we will provide an export window; after that, your data is deleted or anonymised except where retention is required by law (for example, VAT records for six years).

6. Your rights

Under UK GDPR you have the right to: access the personal data we hold about you; correct inaccurate data; request erasure (subject to legal retention obligations); restrict or object to processing; data portability; and withdraw consent where processing is consent-based. To exercise any right, contact us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Cookies

We use strictly necessary cookies to keep you logged in and to protect against cross-site request forgery. We may use analytics cookies to understand how the Service is used; where we do, we will ask for your consent first. You can control cookies through your browser settings, though disabling necessary cookies will prevent you from logging in.

8. Contact

For privacy questions or to exercise your rights, contact us at [email protected] or write to [OPERATOR REGISTERED ADDRESS].