Privacy policy
Last reviewed: [Date policy last reviewed]
You can browse FixMyCarPart.com without creating an account. This policy explains what personal data we handle, why, and your rights under UK GDPR and the Data Protection Act 2018.
1. Who we are
The data controller is [Company name] (company number [Companies House number]), [Registered address]. ICO registration number: [ICO registration number]. Contact: [Privacy contact email].
2. What we collect and why
| Data | Why | Lawful basis | Kept for |
|---|---|---|---|
| Account details (name, email, password hash), if you register. Accounts are switched off in the current beta. | To provide your account. | Contract | While the account is open, then deleted. |
| Garage and basket (vehicles and parts you save), if enabled. | To provide the feature you asked for. | Contract | While the account is open. |
| Vehicle and part look-ups (make, model, registration number where a look-up is offered). | To show the right parts. Registration numbers are used for the look-up and are not kept in our analytics. | Legitimate interests (running the service you requested) | Not stored against you unless you save a vehicle. |
| Usage statistics: counts of searches, category choices, part opens and supplier clicks. No IP address, plate, name or persistent identifier. | To decide which cars and parts to add, and to produce aggregated statistics (section 3). | Consent (we only send these if you choose Analytics) | Event records 30 days; daily totals 12 months. |
| Correction reports you submit. Please do not include personal information. | To fix catalogue errors. | Legitimate interests | As long as needed to resolve and evidence the correction. |
| Technical request logs (for example IP address and user agent) held by our hosting providers. | Security, reliability and abuse prevention. | Legitimate interests | Per the provider's log retention, generally short. |
| Your cookie choice. | To remember your preferences. | Strictly necessary | 6 months. |
See the cookie policy for everything stored on your device.
3. Aggregated statistics may be shared or sold
We may share or sell aggregated, anonymised statistics, for example weekly search counts by vehicle model, part category and broad region. These contain no names, email addresses, registration numbers, IP addresses or other information that identifies a person. Any group with fewer than 10 events is removed before anything leaves us. We do not sell or share personal data about identifiable individuals.
4. Who processes data for us
- Vercel Inc.: website hosting and request logs.
- Neon, Inc.: managed PostgreSQL database.
- [Email provider]: transactional email, if and when email features are enabled.
We use these processors only for the purposes above and under data processing agreements. Supplier websites you click through to are separate controllers with their own privacy policies.
Vehicle data sources: DVSA MOT History API and Vehicle Data Global (VDG), where offered — we send the registration number to them to retrieve vehicle details; they process it under their own terms.
5. International transfers
Some providers above are based in, or may process data in, the United States. Where personal data leaves the UK we rely on the UK adequacy regulations (including the UK-US data bridge) or the UK International Data Transfer Agreement or Addendum with standard contractual clauses.
6. Your rights
You can ask us to access, correct, erase or restrict your personal data, to object to processing based on legitimate interests, to receive your data in a portable format, and to withdraw consent at any time (use Cookie settings in the footer). Contact [Privacy contact email]. We aim to reply within one month.
If you have an account you can Export my data or Delete my account yourself.
You can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113) if you are unhappy with how we handle your data.
7. Changes
We will update this page when our processing changes and revise the review date above.