Privacy Policy | BTC Spares - BTC Spares
BTC Spares — Trading Ltd.

Search parts

Search by part name, SKU or OE reference

Legal

Privacy policy.What we collect, and why.

This policy explains what personal data BTC Spares collects when you shop, contact us or use our website, how we use it, and the rights you have over it.

This is a summary. The full policy below applies.

  • We collect only what we need to process your order, deliver it and answer your questions.
  • We never see or store your full card details; Stripe and PayPal handle payments.
  • We don't sell your data, and we don't send marketing emails.
  • You can ask to see, correct or delete your data at any time (section 9).

1.1 BTC Spares is the trading name of Bhesania Trading Co Limited, a company registered in England and Wales under company number 13600971. Our registered office is at 407 Stratford Road, Birmingham B11 4JZ, and we trade from London.

1.2 We're the "controller" of the personal data described in this policy. That means we decide how and why it's used, and we're responsible for looking after it.

1.3 For any privacy question or request, email sales@btcspares.co.uk, call or WhatsApp 07459 209297, or write to us at our registered office. We haven't appointed a data protection officer; [name or role] handles data protection for us.

1.4 [We're registered with the Information Commissioner's Office under registration number [number].]

2.1 We collect the following personal data:

Type of dataExamplesWhere it comes from
Contact detailsName, email address, phone numberYou, when you order, create an account or contact us
Delivery and billing detailsDelivery and billing addressesYou, at checkout
Order detailsParts ordered, prices paid, returns and order historyOur website and records
Payment detailsPayment method, card type, last four digits and payment status. We never receive your full card numberStripe or PayPal
Vehicle detailsMake, model, year, engine, OE numbers and, if you choose to give it, your registration numberYou, when you order or contact us
Messages and photosContact form messages, emails, WhatsApp messages, notes of phone calls, photos of partsYou, when you contact us
Account detailsLogin email, password (stored scrambled), saved addressesYou, if you create an account
Technical dataIP address, browser and device type, pages visitedYour device, through our website and cookies (section 10)

2.2 Photos you send may show more than the part, such as a number plate. Please try not to include anything we don't need.

2.3 We don't ask for sensitive information, such as health details, and you don't need to give it to us.

3.1 We use your personal data for these purposes:

What we use it forData usedLawful basis
Taking and processing your order, including paymentContact, delivery, order and payment detailsContract
Delivering your order and sending its tracking numberContact, delivery and order detailsContract
Calling you if a part is out of stockContact and order detailsContract
Helping you find the right part before you orderVehicle details, messages and photosSteps you've asked us to take before a contract
Answering questions and complaintsContact details and messagesLegitimate interests (giving good customer service), or contract where it's about an order
Handling cancellations, returns, refunds and faulty partsContact, order and payment details, photosContract and legal obligation (consumer law)
Running your accountAccount detailsContract
Keeping accounting and tax recordsOrder, payment and contact detailsLegal obligation
Preventing fraud and keeping the website secureTechnical, order and payment detailsLegitimate interests (protecting our customers and business)
Understanding how our website is used [if analytics are used]Technical dataConsent, through the cookie banner

3.2 Where we rely on legitimate interests, we've weighed our interests against yours. You can object to this use at any time (section 9).

3.3 If you don't give us information we need, such as a delivery address, we won't be able to complete your order.

4.1 We don't send marketing emails or texts. We contact you only about your orders, enquiries and account.

4.2 If we start sending marketing in future, we'll ask for your permission first, and every message will include a simple way to unsubscribe.

5.1 We share personal data only with organisations that help us run the business, and only what they need:

WhoWhat they do for usData they receive
StripeCard paymentsPayment and contact details, order total
PayPalPayPal payments. PayPal also uses your data under its own privacy noticeContact details, order total
Our couriers: DHL, Royal Mail, FedEx, Evri and DPDDelivering parcels and sending delivery updatesName, delivery address, phone number and email
[Hosting provider]Hosting our website and databaseData stored on the website
[Email provider]Our business email on btcspares.co.ukEmails you send us and our replies
WhatsApp (Meta)Messaging, if you contact us on WhatsAppYour phone number, messages and photos
[Analytics provider, if used]Website statisticsTechnical data, only with your consent
Our accountant and professional advisersAccounting, tax and legal adviceOrder and payment records

5.2 We may also share data when the law requires it, for example with HM Revenue & Customs or the police, or to protect our legal rights.

5.3 We don't sell your personal data.

5.4 If our business is sold or restructured, customer data may pass to the new owner, who must use it in line with this policy.

6.1 Some of these organisations, such as Stripe, PayPal and WhatsApp, may process your data outside the UK. Where they do, your data is protected by safeguards recognised under UK law, such as UK adequacy regulations, or the UK International Data Transfer Agreement or Addendum.

6.2 Contact us if you'd like more information about these safeguards.

7.1 We keep personal data only as long as we need it:

DataHow long we keep itWhy
Orders, invoices, payments, returns and refunds6 years from the end of the financial year the order falls inTax and accounting law, and to deal with any claims
Customer accountsWhile your account is open. If it's unused for [3] years, we delete it, apart from the order records aboveTo run your account
Enquiries, messages, call notes and photos linked to an orderAs long as the order recordsTo deal with questions about that order
Other enquiries, messages, call notes and photos[2 years] from our last contactTo follow up and answer further questions
Technical data and cookiesSee section 10To run and protect the website

7.2 When a period ends, we delete the data or make it anonymous so it can no longer identify you.

8.1 We use appropriate security measures to protect your data, including:

  • secure, encrypted (HTTPS) connections across our website;
  • card payments handled entirely by Stripe and PayPal, so we never see or store full card details;
  • account passwords stored in a scrambled (hashed) form; and
  • access to customer data limited to the people who need it.

8.2 No website can be completely secure. If a data breach is likely to put you at risk, we'll tell you, and we'll report it to the Information Commissioner's Office where the law requires.

9.1 Under UK data protection law, you have the right to:

  • access your data: ask for a copy of the personal data we hold about you;
  • correct it: ask us to fix anything inaccurate or incomplete;
  • delete it: ask us to erase your data where we don't need to keep it (we must keep order records for tax purposes, for example);
  • restrict it: ask us to limit how we use your data;
  • object: object to any use based on our legitimate interests;
  • move it: receive data you gave us in a common digital format, or have it sent to another organisation, where we use it under a contract or with your consent; and
  • withdraw consent: for example, for analytics cookies, at any time. This doesn't affect anything we did before you withdrew it.

9.2 To use any of these rights, contact us using the details in section 1.3. We may need to confirm your identity first. We'll reply within one month, and there's normally no charge.

9.3 If you're unhappy with how we've handled your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.

10.1 Cookies are small files stored on your device when you visit a website. We use them as follows:

TypeWhat they doDo we need your consent?
Strictly necessaryKeep your basket, sign you in, remember the vehicle you've selected while you browse, and protect checkout from fraud, including cookies set by Stripe and PayPalNo, because the website can't work without them
Analytics [if used]Show us how visitors use the website, so we can improve itYes. We set them only if you accept them

10.2 We don't use advertising or cross-site tracking cookies.

10.3 When you first visit, a banner lets you accept or reject non-essential cookies. You can change your choice at any time through the "Cookie settings" link at the bottom of every page.

10.4 You can also block or delete cookies in your browser settings. If you block the strictly necessary ones, parts of the website, such as the basket and checkout, won't work.

10.5 Cookie list: a table under this section with each cookie's name, provider, purpose and how long it lasts. [The developer completes it from the live site before launch.]

11.1 Our website isn't aimed at children, and we don't knowingly collect data from anyone under [16]. If you think a child has given us their data, contact us and we'll delete it.

11.2 We don't make decisions about you using only automated processing, such as automated credit scoring. Our payment providers run their own fraud checks, described in their privacy notices.

12.1 We may update this policy from time to time, for example if we start using a new supplier. The "Last updated" date at the top shows when it last changed. If a change affects you significantly, we'll tell you by email.

12.2 Questions or complaints about how we use your data: contact us first using the details in section 1.3. You can also contact the ICO, as explained in section 9.3.

Questions about your data?

Email sales@btcspares.co.uk or call 07459 209297 to ask a question or make a data request.