Privacy Policy — Autoparts Returns

This privacy policy explains how Autoparts (S.Wales) Ltd ("Autoparts", "we", "us", "our") collects and uses your personal information when you use the Autoparts Returns mobile app (the "App"), and the rights you have over that information. We are the "data controller" responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The App is provided solely for existing Autoparts trade account holders. There is no public sign-up: accounts are created by Autoparts. If you do not have a trade account and would like one, please contact us at [email protected].

1. Who we are & how to contact us

Autoparts (S.Wales) Ltd is a company registered in England and Wales 0829529, with its registered office at Ynysangharad Road, Pontypridd CF37 4DA.

For any questions about this policy or your personal data, contact us at:
Email: [email protected]

2. The information we collect

When you use the App, we process the following categories of personal data:

Account & identity information

Your name
Your email address
Your mobile telephone number
Your trade account number and associated business/branch
The collection address held against your trade account

Returns information

The part numbers and quantities you return
The reason for each return and whether it is a warranty claim
The returns reference numbers and the date and time each return was raised

Sign-in information

Sign-in to the App is handled on our behalf by our authentication provider, Auth0 (see section 4). We do not see or store your password. We retain a secure identifier that links your sign-in to your trade account.

Technical information

Our systems automatically record limited technical data needed to operate and secure the service — such as log records of requests to our servers (which may include an IP address) and basic error diagnostics. We do not use advertising identifiers and the App does not contain third-party advertising or analytics trackers.

3. How we use your information, and our legal basis

What we do	Lawful basis (UK GDPR)
Authenticate you and give you secure access to your trade account in the App	Performance of our contract with your business; our legitimate interest in keeping the service secure
Record the returns you raise and display your account details and returns history	Performance of our contract with your business
Arrange collection of returned parts from your premises	Performance of our contract with your business
Send you a confirmation email when a return is logged	Performance of our contract with your business
Maintain records, prevent misuse, and meet our legal and accounting obligations	Legal obligation; our legitimate interests in running our business properly

4. Who we share your information with

We do not sell your personal data. We share it only with the service providers ("processors") that help us run the App, each of which acts on our instructions:

Provider	Purpose
Auth0 (Okta, Inc.)	Secure sign-in and identity management
Amazon Web Services (AWS)	Hosting of our app servers and database
DeTrack Systems	Arranging and tracking the collection of returned parts
Mailchimp / Mandrill (Intuit Inc.)	Sending your returns confirmation emails

We may also disclose information where required by law, or to establish, exercise or defend legal claims.

5. International transfers

Some of our providers process data outside the United Kingdom. Where personal data is transferred outside the UK, we rely on appropriate safeguards — such as UK adequacy regulations or the International Data Transfer Agreement / Standard Contractual Clauses — to ensure your data receives an equivalent level of protection.

6. How long we keep your information

We keep your account information for as long as your trade account remains active. We keep records of returns for as long as necessary to fulfil the return, handle any related queries or warranty claims, and meet our legal, accounting and tax obligations, after which they are deleted or anonymised.

7. How we protect your information

Data is encrypted in transit using HTTPS. Sign-in tokens are held in protected, hardware-backed storage on your device and are removed when you log out. Access to our systems is restricted to authorised personnel. While no system can be guaranteed completely secure, we maintain technical and organisational measures appropriate to the risk.

8. Your rights

Under UK data protection law you have the right to:

access the personal data we hold about you;
have inaccurate data corrected;
have your data erased in certain circumstances;
restrict or object to our processing in certain circumstances;
data portability in certain circumstances.

To exercise any of these rights, contact us at [email protected]. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk.

9. Children

The App is a business tool intended for trade account holders and is not directed at, or intended for use by, children.

10. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Significant changes will be communicated through the App or by email where appropriate.

11. Contact us

If you have any questions or concerns about this policy or how we handle your personal data, please contact:
Autoparts (S.Wales) Ltd
Email: [email protected]