Legal
Privacy policy.What we collect, and why.
This policy explains what personal data BTC Spares collects when you shop, contact us or use our website, how we use it, and the rights you have over it.
This is a summary. The full policy below applies.
- We collect only what we need to process your order, deliver it and answer your questions.
- We never see or store your full card details; Stripe and PayPal handle payments.
- We don't sell your data, and we don't send marketing emails.
- You can ask to see, correct or delete your data at any time (section 9).
1.1 BTC Spares is the trading name of Bhesania Trading Co Limited, a company registered in England and Wales under company number 13600971. Our registered office is at 407 Stratford Road, Birmingham B11 4JZ, and we trade from London.
1.2 We're the "controller" of the personal data described in this policy. That means we decide how and why it's used, and we're responsible for looking after it.
1.3 For any privacy question or request, email sales@btcspares.co.uk, call or WhatsApp 07459 209297, or write to us at our registered office. We haven't appointed a data protection officer; [name or role] handles data protection for us.
1.4 [We're registered with the Information Commissioner's Office under registration number [number].]
2.1 We collect the following personal data:
| Type of data | Examples | Where it comes from |
|---|---|---|
| Contact details | Name, email address, phone number | You, when you order, create an account or contact us |
| Delivery and billing details | Delivery and billing addresses | You, at checkout |
| Order details | Parts ordered, prices paid, returns and order history | Our website and records |
| Payment details | Payment method, card type, last four digits and payment status. We never receive your full card number | Stripe or PayPal |
| Vehicle details | Make, model, year, engine, OE numbers and, if you choose to give it, your registration number | You, when you order or contact us |
| Messages and photos | Contact form messages, emails, WhatsApp messages, notes of phone calls, photos of parts | You, when you contact us |
| Account details | Login email, password (stored scrambled), saved addresses | You, if you create an account |
| Technical data | IP address, browser and device type, pages visited | Your device, through our website and cookies (section 10) |
2.2 Photos you send may show more than the part, such as a number plate. Please try not to include anything we don't need.
2.3 We don't ask for sensitive information, such as health details, and you don't need to give it to us.
3.1 We use your personal data for these purposes:
| What we use it for | Data used | Lawful basis |
|---|---|---|
| Taking and processing your order, including payment | Contact, delivery, order and payment details | Contract |
| Delivering your order and sending its tracking number | Contact, delivery and order details | Contract |
| Calling you if a part is out of stock | Contact and order details | Contract |
| Helping you find the right part before you order | Vehicle details, messages and photos | Steps you've asked us to take before a contract |
| Answering questions and complaints | Contact details and messages | Legitimate interests (giving good customer service), or contract where it's about an order |
| Handling cancellations, returns, refunds and faulty parts | Contact, order and payment details, photos | Contract and legal obligation (consumer law) |
| Running your account | Account details | Contract |
| Keeping accounting and tax records | Order, payment and contact details | Legal obligation |
| Preventing fraud and keeping the website secure | Technical, order and payment details | Legitimate interests (protecting our customers and business) |
| Understanding how our website is used [if analytics are used] | Technical data | Consent, through the cookie banner |
3.2 Where we rely on legitimate interests, we've weighed our interests against yours. You can object to this use at any time (section 9).
3.3 If you don't give us information we need, such as a delivery address, we won't be able to complete your order.
4.1 We don't send marketing emails or texts. We contact you only about your orders, enquiries and account.
4.2 If we start sending marketing in future, we'll ask for your permission first, and every message will include a simple way to unsubscribe.
5.1 We share personal data only with organisations that help us run the business, and only what they need:
| Who | What they do for us | Data they receive |
|---|---|---|
| Stripe | Card payments | Payment and contact details, order total |
| PayPal | PayPal payments. PayPal also uses your data under its own privacy notice | Contact details, order total |
| Our couriers: DHL, Royal Mail, FedEx, Evri and DPD | Delivering parcels and sending delivery updates | Name, delivery address, phone number and email |
| [Hosting provider] | Hosting our website and database | Data stored on the website |
| [Email provider] | Our business email on btcspares.co.uk | Emails you send us and our replies |
| WhatsApp (Meta) | Messaging, if you contact us on WhatsApp | Your phone number, messages and photos |
| [Analytics provider, if used] | Website statistics | Technical data, only with your consent |
| Our accountant and professional advisers | Accounting, tax and legal advice | Order and payment records |
5.2 We may also share data when the law requires it, for example with HM Revenue & Customs or the police, or to protect our legal rights.
5.3 We don't sell your personal data.
5.4 If our business is sold or restructured, customer data may pass to the new owner, who must use it in line with this policy.
6.1 Some of these organisations, such as Stripe, PayPal and WhatsApp, may process your data outside the UK. Where they do, your data is protected by safeguards recognised under UK law, such as UK adequacy regulations, or the UK International Data Transfer Agreement or Addendum.
6.2 Contact us if you'd like more information about these safeguards.
7.1 We keep personal data only as long as we need it:
| Data | How long we keep it | Why |
|---|---|---|
| Orders, invoices, payments, returns and refunds | 6 years from the end of the financial year the order falls in | Tax and accounting law, and to deal with any claims |
| Customer accounts | While your account is open. If it's unused for [3] years, we delete it, apart from the order records above | To run your account |
| Enquiries, messages, call notes and photos linked to an order | As long as the order records | To deal with questions about that order |
| Other enquiries, messages, call notes and photos | [2 years] from our last contact | To follow up and answer further questions |
| Technical data and cookies | See section 10 | To run and protect the website |
7.2 When a period ends, we delete the data or make it anonymous so it can no longer identify you.
8.1 We use appropriate security measures to protect your data, including:
- secure, encrypted (HTTPS) connections across our website;
- card payments handled entirely by Stripe and PayPal, so we never see or store full card details;
- account passwords stored in a scrambled (hashed) form; and
- access to customer data limited to the people who need it.
8.2 No website can be completely secure. If a data breach is likely to put you at risk, we'll tell you, and we'll report it to the Information Commissioner's Office where the law requires.
9.1 Under UK data protection law, you have the right to:
- access your data: ask for a copy of the personal data we hold about you;
- correct it: ask us to fix anything inaccurate or incomplete;
- delete it: ask us to erase your data where we don't need to keep it (we must keep order records for tax purposes, for example);
- restrict it: ask us to limit how we use your data;
- object: object to any use based on our legitimate interests;
- move it: receive data you gave us in a common digital format, or have it sent to another organisation, where we use it under a contract or with your consent; and
- withdraw consent: for example, for analytics cookies, at any time. This doesn't affect anything we did before you withdrew it.
9.2 To use any of these rights, contact us using the details in section 1.3. We may need to confirm your identity first. We'll reply within one month, and there's normally no charge.
9.3 If you're unhappy with how we've handled your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.
10.1 Cookies are small files stored on your device when you visit a website. We use them as follows:
| Type | What they do | Do we need your consent? |
|---|---|---|
| Strictly necessary | Keep your basket, sign you in, remember the vehicle you've selected while you browse, and protect checkout from fraud, including cookies set by Stripe and PayPal | No, because the website can't work without them |
| Analytics [if used] | Show us how visitors use the website, so we can improve it | Yes. We set them only if you accept them |
10.2 We don't use advertising or cross-site tracking cookies.
10.3 When you first visit, a banner lets you accept or reject non-essential cookies. You can change your choice at any time through the "Cookie settings" link at the bottom of every page.
10.4 You can also block or delete cookies in your browser settings. If you block the strictly necessary ones, parts of the website, such as the basket and checkout, won't work.
10.5 Cookie list: a table under this section with each cookie's name, provider, purpose and how long it lasts. [The developer completes it from the live site before launch.]
11.1 Our website isn't aimed at children, and we don't knowingly collect data from anyone under [16]. If you think a child has given us their data, contact us and we'll delete it.
11.2 We don't make decisions about you using only automated processing, such as automated credit scoring. Our payment providers run their own fraud checks, described in their privacy notices.
12.1 We may update this policy from time to time, for example if we start using a new supplier. The "Last updated" date at the top shows when it last changed. If a change affects you significantly, we'll tell you by email.
12.2 Questions or complaints about how we use your data: contact us first using the details in section 1.3. You can also contact the ICO, as explained in section 9.3.
Questions about your data?
Email sales@btcspares.co.uk or call 07459 209297 to ask a question or make a data request.

