Privacy policy

Last updated 4 October 2026

This is a demo store, and this is a sample policy. It has not been checked by a lawyer.

This policy explains what personal information Autoparel collects when you use this website, why we use it, who we share it with and the rights you have over it. We are the controller of your information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Autoparel, Address to be confirmed. You can contact us about your information at hello@autoparel.co.uk or through our contact page.

What we collect

• Your account: your name, email address, phone number if you give it, and your password (stored scrambled, so we can never read it).
• Your orders: what you bought, your delivery address, your email and phone number, and the order's payment and delivery status.
• Payments: you pay through SumUp or PayPal. They handle your card or account details; we never see or store your card number.
• Messages: anything you send us through the contact page.
• Technical information: your IP address and browser details, which our web server and our anti-spam check (below) receive when you visit.

Why we use it

• To take and deliver your order, and to run your account. We need this to perform our contract with you.
• To keep records of sales for tax and accounting. This is a legal obligation.
• To answer your messages, and to keep the site secure and free of spam and fraud. These are our legitimate interests.

We don't send marketing emails, and we don't sell your information.

Who we share it with

• Couriers (Royal Mail or Evri, whichever you choose): your name, delivery address and, where needed for delivery updates, your email or phone number.
• Payment providers (SumUp or PayPal): the order amount and reference, so you can pay.
• Google reCAPTCHA, which checks that the person registering, resetting a password or sending a message is not an automated program. It collects information about your device and how you use the page, and Google's privacy policy and terms apply to it.
• Bunny Fonts, which supplies the typefaces on this site. Your browser fetches them directly, which shares your IP address with Bunny; no cookies are set.
• Our hosting provider, which stores the website and its database for us.

Some of these companies may process information outside the UK. Where they do, they use safeguards recognised under UK data protection law, such as the UK's International Data Transfer Agreement.

How long we keep it

• Orders: six years after the end of the financial year they were placed in, as tax law requires.
• Your account: until you ask us to close it.
• Messages: up to two years after we last replied.

Cookies

This site only uses cookies it needs to work. There are no advertising or tracking cookies.

• A session cookie remembers your basket and whether you are signed in.
• A security cookie protects forms against being sent from other websites.
• If you tick "Keep me signed in", a cookie keeps you signed in between visits.
• Google reCAPTCHA sets its own cookies on the pages that use it, to tell people from automated programs.

Your rights

You have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct it, or to delete it where we no longer need it;
• object to us using it, or ask us to restrict how we use it;
• ask for it in a form you can take to another company.

Contact us to use any of these. We'll reply within one month. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.

About this demo

Each visitor to this demo gets their own private copy of the store, picked out by a cookie. Anything you enter, such as an account, an order or a message, stays in your copy and is deleted after 24 hours of inactivity, or sooner if the demo is updated. No real orders are taken and no payments are made.

Changes to this policy

If we change this policy, we'll update the date at the top of this page.