Privacy Policy

Effective Date: 15 January 2026

Last Updated: 15 January 2026

Classic Audi Parts is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you visit our website www.classicaudiparts.com, make a purchase, create an account, sign up to marketing, or otherwise interact with our services (the "Site").

We are the data controller for the personal data we process, except where clearly stated otherwise.

Our contact details Business name: C & C Services trading as Classic Audi Parts

Email: sales@classicaudiparts.com

1. Information We Collect

We may collect the following categories of personal data:

Information you provide directly

Name, billing & delivery address, email address, phone number
Payment information (handled securely by our payment processor – we do not store full card details)
Account login credentials (email + password hash)
Order history & product preferences
Information in messages, reviews, customer support tickets, or returned forms
Marketing preferences & subscription choices

Information collected automatically

IP address, browser type/version, operating system, device type
Pages visited, time/date of visit, referral source, time spent on pages
Approximate geographic location (derived from IP)
Cookies, pixels, and similar technologies (see our separate Cookie Policy)

Information from third parties

Shipping / fulfilment partners (delivery status updates)
Payment providers (successful/failed transaction status – not full card details)
Fraud prevention & credit reference agencies (limited checks where necessary)
Marketing / analytics platforms (e.g. behaviour on our Site if you arrived via an advert)

2. How We Use Your Information

We use your personal data only when the law allows us to. Most commonly, we use it:

Purpose Lawful basis (UK GDPR Art. 6) Legitimate interests (where applicable)

Process & fulfill your orders Performance of a contract

Manage your account & order history Performance of a contract

Take payments & prevent fraud Performance of a contract Preventing criminal activity & chargebacks

+ Legal obligation

Send essential service emails Performance of a contract

Send marketing emails Consent (opt-in) OR Soft opt-in

(existing customers)

Show personalised ads & content Consent (non-essential cookies) Promoting relevant products & improving

OR Legitimate interests user experience

Analyse Site usage & Legitimate interests Understanding customer behaviour to improve services improve Site & offerings

Comply with legal obligations Legal obligation

Respond to your enquiries / Legitimate interests Providing good customer service

complaints

Exercise / defend legal claims Legitimate interests Protecting our business

3. Marketing

You can opt out of marketing at any time (each email has an unsubscribe link; you can also update preferences in your account). If you are an existing customer and we are relying on soft opt-in, we will only send marketing about similar products/services you have previously purchased. You can still opt out easily.

4. Who We Share Your Data With

We share personal data only when necessary:

Payment processors (e.g. Stripe, PayPal) — for secure payments
Shipping / logistics companies (e.g. Royal Mail, DPD, Evri) — for delivery
Ecommerce platform provider (e.g. Shopify, WooCommerce) — hosting & order management
Marketing / email service providers (e.g. Klaviyo, Mailchimp)
Analytics providers (e.g. Google Analytics – anonymised where possible)
Fraud detection & prevention services
Professional advisers (accountants, lawyers) when required
Law enforcement, regulators, or courts when legally obliged

We do not sell your personal data to third parties for their own marketing purposes.

5. International Transfers

Some of our processors are based outside the UK (e.g. United States). Where we transfer personal data outside the UK, we ensure an appropriate safeguard is in place, such as:

UK International Data Transfer Agreement / Addendum
Adequacy regulations (e.g. current EU adequacy decision for the UK until at least 2031, and any relevant US frameworks if applicable)
Standard Contractual Clauses (or UK equivalent) + supplementary measures

6. Data Retention

We keep personal data only for as long as necessary:

Order & tax records → 6 years after order (legal obligation)
Account data → until you delete your account + 90 days (backups)
Marketing lists → until you unsubscribe / object
Website logs / analytics → typically 14–26 months (configurable)

7. Your Rights (UK GDPR)

You have the following rights (subject to some exceptions):

Right to be informed
Right of access (subject access request)
Right to rectification
Right to erasure (“right to be forgotten”)
Right to restrict processing
Right to data portability
Right to object (especially to direct marketing & profiling)
Rights related to automated decision-making

To exercise any right, email privacy@yourwebsite.co.uk. We usually respond within one month (free of charge unless manifestly unfounded/excessive).

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint Telephone: 0303 123 1113

8. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, regular security updates, and staff training. However, no method of transmission over the internet is 100% secure.

9. Children’s Data

Our Site is not intended for children under 16. We do not knowingly collect data from children under 16. If you believe we have such data, please contact us immediately.

10. Changes to This Policy

We may update this policy from time to time. The updated version will be posted here with a revised “Last Updated” date. Significant changes will be communicated via email or prominent notice on the Site.

11. Contact Us

Questions, comments and requests regarding this Privacy Policy should be addressed to: privacy@classicaudiparts.com

Thank you for trusting us with your data.