User Privacy Notice - WPARTS LLC

Effective date: October 1, 2025

1. Introduction & Scope

This Privacy Notice explains how WPARTS LLC ("WPARTS", "we," "us," or "our") collects, uses, discloses, and protects personal information when you use the WPARTS website (wparts.com), mobile applications, and related services (collectively, the "Services"). WPARTS LLC is a U.S. company.

This Notice applies to all users of the Services worldwide. Where region-specific laws apply (for example, the GDPR for EU/EEA residents or CPRA/CCPA for California residents), additional rights and notices are described in the dedicated sections below.

Contact: legal@wparts.com

2. Controller

WPARTS LLC is the data controller responsible for the processing described in this Notice, except where another party (e.g., an independent seller on the marketplace) is identified as the controller for certain data. Where multiple controllers apply (e.g., marketplace transactions), we will describe respective responsibilities in the Seller Agreement and other relevant pages.

3. Categories of Personal Information We Collect

We collect categories of personal information including, but not limited to:

Identifiers: name, email, postal address, phone number, account ID.
Commercial information: purchase history, order details, payment method metadata (note: full card PAN is processed by payment processors).
Internet/activity: IP address, device identifiers, browser, cookies, usage data, search queries, viewed listings.
Geolocation: coarse and, if you consent, precise location.
Professional/business: for sellers - business name, tax ID, bank account for payouts, inventory data.
Inferences/Profiling: user preferences and personalized recommendations.
Sensitive personal information (if collected): precise geolocation, government ID, biometric data if provided - see "Sensitive Data" below.

Sources: directly from you (account, transactions), from third parties (payment processors, shipping carriers), and from automated collection (cookies and similar technologies).

4. Purposes of Processing

We process personal information for purposes including:

Providing and operating the Services (account setup, order processing, payments, shipping).
Communicating transactional messages (order confirmations, shipping updates).
Fraud prevention, risk assessment, compliance with law and enforcement requests.
Personalization, search ranking, recommendations and analytics.
Marketing and advertising (where permitted by applicable law and your consent).
Enabling seller operations (payouts, tax reporting, communications with buyers).

Legal bases under GDPR (for EU/EEA users): performance of contract, legitimate interests (fraud prevention, platform security, service improvement), compliance with legal obligations, and consent (for optional services such as marketing or precise geolocation).

5. Disclosure / Recipients

We may disclose personal information to:

Payment processors, banks, and financial institutions for payment and payouts.
Shipping carriers and logistics providers for delivery.
Third-party service providers: hosting, analytics, email/SMS delivery, fraud detection.
Advertising and marketing partners (only where permitted or where you have not opted out).
Law enforcement, courts, or government agencies when required by law.
Buyers and sellers on the marketplace as necessary to complete transactions.

We enter into Data Processing Agreements (DPAs) with processors and maintain a list of subprocessors upon request.

6. International Transfers

Your personal information may be transferred to, stored, and processed in the United States and other countries. For transfers from the EEA/UK we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) and other measures to provide adequate protection. For further information or a copy of the SCCs, contact legal@wparts.com.

7. Cookies & Similar Technologies

We use cookies, web beacons, and similar technologies for functionality, analytics, security, and advertising. Where required, we obtain consent for non-essential cookies. You can manage cookie settings using our cookie tool and via your browser.

For detailed information about the cookies we use, their purposes, duration, and how to control them, please see our Cookie Policy.

8. Data Retention

We retain personal information only as long as necessary to fulfill the purpose collected, or as required by law (for example, tax records). Typical retention periods:

Transaction & billing data: 7 years (tax/compliance).
Account data: until account deletion + 1 year for operational/logging purposes.
Marketing opt-out logs: 5 years.

If you need specific retention details, contact legal@wparts.com.

9. Security

We use industry-standard technical and organizational measures (encryption in transit, access controls, secure hosting) to protect data. However, no security is perfect; in the event of a data breach we will notify affected users and regulators as required by law.

10. Children's Privacy

Our Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such data, contact legal@wparts.com to request deletion.

11. Automated Decision-Making and Profiling

We may use automated systems and machine learning for fraud detection, personalized recommendations and ranking. If such automated decisions produce legal or similarly significant effects for EU users, you may request human review and explanations as described in the GDPR section below.

12. Your Rights - Global Summary

You may have the right to:

Access, correct, delete or port your personal information.
Object to or restrict certain processing.
Withdraw consent at any time (without affecting prior processing).
Lodge a complaint with your local supervisory authority (for EU residents).
For California residents: additional rights described under "California Residents - CPRA/CCPA" below (including right to know, delete, opt-out of sale/sharing, limit use of sensitive data).

To exercise rights, see Section 13 (How to Submit Requests).

13. How to Submit Requests

We provide at least one convenient method for submitting privacy request:

Email: legal@wparts.com.

We will verify requests to the extent necessary and respond within the timeframes required by applicable law (e.g., 45 days for CPRA; 1 month for GDPR, with extensions where lawful).

Verification: We will ask for information reasonably necessary to verify identity (for example, account email, recent transaction ID). We will not ask for unnecessary sensitive identifiers.

14. California Residents - CPRA / CCPA (Supplement)

If you are a California resident, the following additional rights and disclosures apply:

A. Rights (CPRA/CCPA Summary)

Right to Know: You may request the categories and specific pieces of personal information we have collected about you, sources, purposes, and categories of recipients.
Right to Delete: You may request deletion of personal information (subject to exceptions).
Right to Opt-Out of Sale or Sharing: You may opt-out of any "sale" or "sharing" of personal information for cross-context behavioral advertising. We maintain a "Do Not Sell or Share My Personal Information" page and recognize Global Privacy Control (GPC) signals.
Right to Limit Use of Sensitive Personal Information: You may request limitations on the use of sensitive personal information for purposes beyond what is necessary to provide the service.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

B. Methods to Submit Requests

Email: legal@wparts.com

A clear and conspicuous link titled "Do Not Sell or Share My Personal Information" is provided in the website footer and on data-collection pages. On that page you can submit an opt-out or manage preferences. If you opt out, we will stop sharing/selling your data for targeted advertising as required by law.

If you are in the EU/EEA, the GDPR provides the following additional rights and protections:

A. Legal bases

We process EU personal data under legal bases including: performance of contract, legitimate interests (platform security, fraud prevention, service improvement), compliance with laws, and consent (marketing, precise location).

B. Rights

Right to access, rectification, erasure (in certain cases), restriction of processing, objection, portability, and to withdraw consent.
Right to lodge a complaint with a supervisory authority.

C. International Transfers

Transfers outside the EU/EEA (e.g., to the United States) are protected by EU Standard Contractual Clauses and other safeguards. For copies of SCCs or transfer impact assessments, contact legal@wparts.com.

16. Marketplace Specifics (Sellers & Buyers)

Sellers: Sellers provide customer contact and shipment information necessary to complete transactions. Sellers may be controllers for data they collect from their buyers; WPARTS acts as processor for marketplace operations when applicable. The Seller Agreement defines these roles in detail.
Buyers: Buyer personal data is used to complete orders and to contact buyers about orders. We may share buyer information with the seller fulfilling the order (name, shipping address, order details).

17. Changes to this Notice

We may modify this Notice. Material changes will be posted with an updated effective date and, if required, notified to users.

18. Contact

For privacy questions, complaints: legal@wparts.com

Cookie Policy - WPARTS