GDPR Compliance

Effective date: September 26, 2026

This notice applies to visitors and customers in the European Economic Area, the United Kingdom and Switzerland, and supplements our Cookie & Privacy Policy.

Controller

ARBITBOX LLC, 8 The Green, Suite A, Dover, DE 19901, United States, is the controller of your personal data. Contact: info@autopartshall.com.

Legal bases

• Contract: processing orders, payments, delivery and customer service.
• Legal obligation: tax, accounting and consumer-law requirements.
• Legitimate interests: fraud prevention, site security, service improvement and limited direct marketing to existing customers, balanced against your rights.
• Consent: non-essential cookies, advertising pixels and marketing emails where consent is required. You can withdraw consent at any time.

International transfers

Your data is processed in the United States. Where required, we rely on the European Commission's Standard Contractual Clauses, the UK Addendum, or the EU-US Data Privacy Framework where our providers are certified.

Your rights

You have the right to access, rectify, erase, restrict and port your data; to object to processing based on legitimate interests and to direct marketing; and to withdraw consent. Email info@autopartshall.com with the subject "GDPR Request". We respond within one month. You also have the right to lodge a complaint with your local supervisory authority.

Retention

We retain order data for as long as required by tax and accounting law and delete marketing data when you unsubscribe or withdraw consent.

Automated decisions

We do not make decisions producing legal or similarly significant effects based solely on automated processing, other than automated fraud screening of payments, which you may ask to have reviewed by a person.

Cookies

Non-essential cookies are only set after you consent through our cookie banner. You can change your choices at any time via "Your privacy choices".