GDPR Compliance
This notice is for people in the UK and the European Economic Area. It sits with the Privacy Policy. The data controller is ARBITBOX LLC, trading as Auto Parts Hall, 8 The Green, Suite A, Dover, DE 19901, United States.
What we process and why
We process name, email, phone, delivery address, order history and technical data (IP, browser) so we can:
- fulfil a contract when you place an order
- answer an enquiry (legitimate interests)
- keep records we are legally required to keep
- send marketing only where you have consented, or where legitimate interests apply to an existing customer and you have not opted out
We do not make solely automated decisions that produce legal effects about you.
Who receives the data
Shopify (store and payments), warehousing and carriers, and the tools we use to run email and the site. We do not sell your data. Transfers outside the UK/EEA happen because the store is hosted in the United States; Shopify’s customer privacy terms apply to those transfers.
How long we keep it
Order data is kept for up to seven years after your last order, then deleted or irreversibly anonymised, unless a longer legal hold applies.
Your rights
You may ask us for access, correction, erasure, restriction, portability, or to object to processing based on legitimate interests or to direct marketing. You may withdraw consent where processing is based on consent.
Email info@autopartshall.com with the subject “GDPR request”. We will respond within one month.
You can also complain to your local supervisory authority. In the UK that is the ICO (ico.org.uk/concerns).
Contact
ARBITBOX LLC trading as Auto Parts Hall
8 The Green, Suite A, Dover, DE 19901, United States
info@autopartshall.com · +1 (520) 442-0197