Privacy notice

Value Car Parts Distribution Ltd (trading as Value Car Parts), Unit D, Apsley Centre, Apsley Way, Staples Corner, London NW2 7LZ, is the data controller. Questions about this notice or about your data can be sent to sales@avdl.co.uk or by post to the address above, marked “Data protection”.

• Account details: your name, work email address, phone number, job title, company name, company address, delivery addresses and your trade account number. We collect these when you register or when the branch opens an account for you.
• Login details: a password, which we store only as a one-way hash, and a session cookie that keeps you logged in.
• Orders and invoices: what you ordered, when, the delivery address, prices, your purchase order reference, and the invoices, credits and balance held on your trade account.
• Vehicle lookups: the registration numbers you look up, the vehicle details returned, and which account looked them up. We keep these so you can get back to recent vehicles quickly.
• Searches and browsing: the part numbers and words you search for, the parts you view, and overall page-view counts. Page views are counted in total only and are not linked to you.
• Messages: anything you send us through the contact or garage equipment forms, by email or by phone.

We do not collect payment card details on this website. Orders are invoiced to your trade account and paid under the terms agreed with the branch.

• From you, when you register, order, look up a vehicle, search, or contact us.
• From our branch and accounts system, which holds your trade account, pricing, credit terms and the invoices and credits raised against it.
• From our vehicle data provider when you look up a registration number. The registration data comes from the DVLA under licence and tells us the make, model, year, engine and fuel of the vehicle, not who owns it.

• To run your account and fulfil orders (contract): approving your application, showing your prices and stock, taking and delivering orders, invoicing, and handling returns and warranty claims.
• To run the website (legitimate interests): keeping you logged in, remembering your current and recent vehicles, showing your basket, and keeping the site secure.
• To improve the service (legitimate interests): looking at which parts are searched for and viewed, how long pages take, and where searches find nothing, so we can fix stock, data and the website. Where we can, we do this with counts rather than individual records.
• To contact you about your account (contract and legitimate interests): order confirmations, delivery queries, statements, overdue reminders and replies to your messages.
• To tell you about offers and new lines (legitimate interests, business to business): we may email the work address on your account about products and promotions relevant to the trade. You can opt out at any time using the link in the email or by telling the branch.
• To meet our legal obligations (legal obligation): keeping accounting and tax records, and responding to lawful requests from authorities.

• Our branch management and accounts software provider, which hosts the trade account, stock, pricing, ordering and invoicing system that this website connects to.
• Our vehicle catalogue and registration lookup providers, who receive the registration number or vehicle details needed to identify parts. They do not receive your name or account details.
• Our email delivery provider, which sends account and contact-form emails on our behalf.
• Our hosting provider, on whose servers in the United Kingdom this website and its database run.
• Our drivers and delivery partners, who receive the delivery address and contact name for your order.
• Professional advisers, insurers, debt recovery agents and credit reference agencies where necessary to run the account, recover a debt or assess credit.
• Authorities, where we are required to by law.

We do not sell personal data, and we do not share it with third parties for their own marketing.

• Account details: for as long as the account is open, and for 6 years after it is closed so we can deal with any later query or claim.
• Orders, invoices and credits: 6 years from the end of the financial year they relate to, as required for tax and accounting.
• Vehicle lookups and searches: up to 2 years, after which they are deleted or reduced to counts.
• Messages sent through the website: up to 2 years.
• Applications we decline: 12 months.

Access to the website is by individual login. Passwords are stored as salted hashes and cannot be read back. Connections to the website are encrypted. Access to account data within the business is limited to staff who need it to serve you. Our systems are kept on servers in the United Kingdom.

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you
• ask us to correct anything that is inaccurate or incomplete
• ask us to delete data we no longer need to keep
• object to, or ask us to restrict, processing based on legitimate interests, including marketing
• receive the data you gave us in a portable format

To exercise any of these, email sales@avdl.co.uk. We will respond within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

The website uses a small number of cookies, all of which are needed for it to work. They are described in our cookie policy.

We may update this notice from time to time. The date at the top shows when it was last changed. If a change affects how we use your data in a significant way we will tell account holders by email.