Cookies and Privacy-Policy
If Customer is using the www.oemstar.co.uk services via our application (Further as "App") or via our website www.oemstar.co.uk (Further as "Website"), which are brought to Him by AV AUTOPARTS LTD, with its registered office at 97 Ridgeway Drive Bromley London BR1 5DB United Kingdom and Company Number 11640035 ("Company").
This privacy policy (Further as "Privacy Policy"), together with our terms of use ( Further as "Terms") sets out important information about the ways in which we collect and use your information when Customer browse or use the AV AUTOPARTS LTD service or order goods (Further as "Service") through the Website or App (or "Service"). In this Privacy Policy, when we refer to "Customer" and "His" we mean Customer, the person using or visiting our Website and App or making purchases with us.
If Customer is under the age of 18, please do not use the Service. By using the Service He confirms to us that He is 18 years old or over.
By visiting or using the App or Website, making purchases with us or otherwise interacting with us, Customer consent to our processing of His personal data in accordance with this Privacy Policy.
When we collect information from Customer or about Him, we need to identify the lawful basis (the legal reason) for doing this. This can be one of six lawful basis: Consent, Contract, Legal Obligation, Protecting Vital Interests, Public Task or Legitimate Interest. We indicate in each of the next sections which lawful basis applies.
Information Customer gives us
We will collect any information Customer provide to us when He: (i) download the App (if such exists) from an electronic marketplace, (ii) access or use the App or Website, (iii) register for an account with us via the Website or log-in via a social networking site, (iv) place an order with us via the Website, (v) enter one of our promotions or surveys, or (vi) subscribe to our mailing list. This information might include His name, addresses, email address, phone number, username, password, His likeness (by way of photograph He upload to His profile account), His social networking profile, His location, car registration, car details, payment information and other information relevant to the purchase He is making, or account that He is registering for.
We collect this information with His Consent, and this is the identified lawful basis. When He consent to us collecting and using your information Customer does have the option to withdraw consent at any time. This may impact our ability to provide Him with certain services or information. If He do wish to withdraw consent Customer can do this by contacting us at [email protected] at +447463071801.
Information we collect about Customer:
We will collect any information contained in any correspondence between He and us.
We may also collect certain information about His visits to and how He uses our Website. This may include His IP address, geographical location, device information, browser type, referral source, length of visit (including date and time), operating system, number of page views, which Services Customer has viewed or searched for, what quotes He has requested, purchases He has made and similar information. This information may be collected by a third-party website analytics service provider on our behalf and/or may be collected using cookies. For more information on cookies please refer to paragraph 6 below.
We have a Legitimate Interest to collect this information as this enables us to present up-to-date information to Customer and enables us to ensure that our website is meeting the needs of our customers and clients.
Information we receive from third parties:
We may collect information about Customer from third parties that we work closely with for the purposes of delivering to Him the Services that He requests from us.
By collecting information from third parties that we work with, we can fulfil contractual obligations with both the third parties and Customer. This falls within the lawful basis of Contract and performance of a Contract.
We may also engage third parties to operate websites on our behalf; these entities may collect information directly from Him about His visits to the Site on our behalf. We contract with such parties and as part of the performance of these contracts we required them to collect certain information and share this with us as part of that contract.
We may also receive information about Him from third parties where He has consented to such third-party sharing His information with us for specific purposes. For example, we might receive information about Him from third parties if Customer has indicated to that third party that He would like to hear from us, with more information about our services. Again, where He provide consent for such contact or sharing, His Consent is the lawful basis for processing this information. As before, you have the right to withdraw consent and can do so by contacting us at [email protected] or at +447463071801.
Customer agrees that we may use His information for the following purposes:
- To provide Him with access to our Website, to provide Him with Goods that He has purchased any other information that He may have requested from us;
- To contact Him with the collection, delivery or other information about Goods that He has ordered or purchased;
- To keep in contact with Customer about other products or services of ours that we believe may interest Him, provided that He has been a customer previously and He don't opt-out of receiving such communications;
- To provide Him with information about products or services of ours that we believe may interest Him, where He has opted-in (given you consent) to receive such communications;
- Where He gives us His consent to do so, to share His information with other selected third parties, to enable them to contact Customer with information about goods or services that may interest Him;
- To provide customer service and support, deal with enquiries or notify Customer of changes in relation to the Goods He has ordered or purchased;
- To improve our Website and the App and ensure that content is presented in the most effective and optimal manner;
- To carry out aggregated and anonymised research about general consumer engagement with our Goods and Services;
- To enable us to enforce our legal rights, or to protect the rights, property or safety of our employees; and
- For security purposes.
We will share His personal information for the following reasons:
- Any other selected third parties that we work with where necessary for the purposes of delivering Him with the Goods that He has purchased or any other services that He request from us, and we share His information as part of the contractual obligations with the selected third parties delivering services to Customer;
- We work closely with Stripe who helps us to process purchases that Customer makes with us. We will need to share His information with them to enable them to take payments. Sharing His information in this way enables us to fulfil our legal obligation to ensure that any payments are made in accordance with relevant financial regulations including tax regulations;
- We might also engage other third-party subcontractors or service providers to help us host our Site or manage our services for example; When He uses our service He will be asked about data usage that these third-party subcontractors may collect through the online settings and He can choose the settings through His browser;
- Any other selected third party that His consent to our sharing His information with for marketing purposes;
- Any prospective seller or buyer of our business or assets, in the event that we decide to sell or buy any business or assets as this will form part of any contract agreed with any seller or buyer. We will ensure that any such contract includes warranties and assurances for the protection of His personal information as part of the performance of such contract. For any sales of the business or assets, He can exercise His rights and gain clarification concerning the protection and processing of His information by the acquirer (buyer) by contacting them directly. We will provide contact details where this is applicable;
- Any other third parties where necessary to enable us to enforce our legal rights or to protect the rights, property or safety of our employees or where such disclosure may be permitted or required by law.
- We use cookies to ensure that Customer get the most out of our Website. Cookies are small amounts of information in the form of text files that we store on the device He use to access the Website. Cookies allow us to monitor His use of the software and simplify His use of the Website. For example, a temporary cookie is also used to keep track of His "session". Without that temporary cookie (which is not stored after He quit His browser) He would have to log on every time you access a new page.
- If He do not wish for cookies to be installed on His device, He can change the settings on His browser or device to reject cookies. For more information about how to reject cookies using His internet browser settings please consult the "Help" section of His internet browser (or alternatively visit http://www.aboutcookies.org). Please note that, if He does set His Internet browser to reject cookies, He may not be able to access all of the functions of the Website and His experience may be less satisfying without using cookies.
- The names of the cookies used by the Website and the purposes for which these cookies are used are set out in this policy.
- Our Website may also contain content and links to other sites that are operated by third parties that may also operate cookies. We don't control these third-party sites or cookies and this Privacy Policy does not apply to them. Please consult the terms and conditions and Privacy Policy of the relevant third party site to find out how that site collects and uses His information and to establish whether and for what purpose they use cookies.
- For more information check our Cookie Policy.
- We use appropriate technological and operational security measures to protect your information against any unauthorised access to or unlawful use.
- Transmission of information over the internet can be insecure, and although we employ measures to protect His information from unauthorised access, Customer acknowledge that we cannot always guarantee the security of information sent over the internet.
- We will retain His information for as long as is necessary to provide Customer with the services that He has requested from us or for as long as the law otherwise permits. We have a Retention Schedule that outlines the individual retention periods for the different data we collect, for example, financial information will be retained for 6 years after the current financial year to comply with financial and tax regulations (this means we have a legal obligation to retain this information). Contact us at [email protected] for a copy of the retention schedule.
- Customers purchase transaction data is stored only as long as is necessary to complete His purchase transaction. After that is complete, His purchase transaction information is deleted.
- If Customer provides us with His credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with AES-256 encryption. Your card data is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). PCI-DSS requirements help ensure the secure handling of credit card information by our payment provider, Stripe and its service providers. PCI-DSS is managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.
- For more insight, Customer may also want to read Stripe's Terms and conditions at www.stripe.com/en
Our servers are www.serveriai.lt and all of the information that we collect about Customer will be stored on these servers.
Storing and keeping Customer’s information
Keeping His information safe and secure is important to us. We have policies, procedures, and technical security to do this, and our staff and associates all understand data protection and confidentiality.
Wherever possible we will store Customer’s information in the UK, however, some service providers that we have contracts with may use storage facilities elsewhere including the EU, USA and countries outside the EU/EEA.
We will ensure that contracts and licences are in place for any service providers used, and that we have undertaken checks on contract clauses. This includes ensuring that any other countries have adequate levels of protection in place for personal data, the country has a UK agreement in place known as an 'adequacy decision', or that any provisions are equivalent to the protection that UK legislation provides.
- The Site may contain content from and links to various websites. This Privacy Policy will not apply to any personal information that is collected by such websites. Customer must consult the terms and conditions and privacy policy of such websites to find out how they collect and use His personal information and to establish for what purposes they may use His personal information.
- In general, the third-party providers used by us will only collect, use and disclose Customer’s information to the extent necessary to allow them to perform the services they provide to us.
- However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for Customer’s purchase-related transactions. For these providers, we recommend that Customer read their privacy policies so He can understand the manner in which your personal information will be handled by these providers.
- In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either Customer or us. So if He select to proceed with a transaction that involves the services of a third-party service provider, then Customer’s information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
- Once Customer leave our Site or are redirected to a third-party website or application, He is no longer governed by this.
Customer has certain rights in respect of the information that we hold about Him. These are:
- The right to be informed about the processing of His personal information (that is why we provide this privacy policy);
- The right to request access to the information that we hold about Customer;
- The right to ask us to rectify any incorrect information that we hold about Customer;
- The right to ask us to erase Customer’s personal data (also called the right to be forgotten);
- The right to restrict processing in some circumstances;
- The right to data portability where He gave provided Him information with consent and we process this automatically;
- The right to object to processing and in particular, the right to object to using your personal information for marketing purposes;
- The right to not be subject to automated decision-making and profiling;
- We have already mentioned this, but where Customer provides His information with consent, He can withdraw this at any time by contacting us at [email protected].
Customer may exercise His rights above by contacting us using the details set out in this Privacy Statement, or in the case of objecting to our marketing activities, by checking certain boxes on forms that we use to collect His data to tell us that He does not want to be involved in marketing.
When He exercise His rights including access to His information, generally we do not charge a fee. We will only consider charging a fee if He asks for a second copy of data we have already provided to Him, or His request is repeated and a reasonable time has not elapsed between requests, or we consider His request to be unfounded (for example, there is no real reason behind it) or it is excessive. If a fee is to be made, we are allowed to charge a reasonable fee and we will tell Customer about this before we continue with His request. We may also refuse His request if it is unfounded, repeated, or excessive but we will explain our reasons if this applies.
Customer can find out more about these rights and more on the Information Commissioner's Office website at www.ico.org.uk or by contacting us using the details set out in this Privacy Statement.
We may make changes to this Privacy Policy from time to time. We will post any changes to our Website or notify Customer of any material changes by e-mail. Any changes will come into effect the next time He engages with us after the changes have been notified.
Subject to the paragraph below, no one other than a party to this Privacy Policy shall have any right to enforce any of its terms.
Notwithstanding any other term of this Privacy Policy, if at any time we wish to appoint any other person (the New Licensee Entity) in our place for the purposes of this Privacy Policy:
- We shall serve written notice on Customer informing Him of that fact and the date (the New Entity Date) on which the appointment of the New Licensee Entity is to take effect;
- We shall procure that the New Licensee Entity shall on or prior to the New Entity Date provide written confirmation to Customer that the New Licensee Entity shall assume our obligations and liabilities under this Privacy Policy with effect from the New Entity Date;
- The New Licensee Entity shall become a party to this Privacy Policy in our place with effect from the New Entity Date and shall from that date be entitled to all of our rights, entitlements, remedies and benefits under this Privacy Policy and shall be obliged to perform or discharge all of our outstanding obligations and liabilities under this Privacy Policy and all references to us in this Privacy Policy shall be read and construed as if they instead referred to the New Licensee Entity as if in each case the New Licensee Entity had always been a party to this Privacy Policy as an original contracting party; and
- With effect from the New Entity Date, we shall be unconditionally and irrevocably discharged from any obligations and liabilities under this Privacy Policy arising on or after the New Entity Date.