Privacy Policy

Last updated: 7 October 2026

Engine Parts UK Ltd respects your privacy and is committed to protecting your personal information in accordance with applicable data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect and use your personal information, including when you purchase products from us, contact us, hold an account with us or interact with our website.

1. Who We Are

Engine Parts UK Ltd is a company registered in England and Wales. We are the Data Controller responsible for personal information collected through this website and through our business dealings with customers, prospective customers, suppliers and other contacts.

Engine Parts UK Ltd
Units 14-17 Thurrock Commercial Park
Purfleet Industrial Estate
Aveley
South Ockendon
RM15 4YA

Telephone: 01708 890494
Email: judith@enginepartsuk.net

2. What Personal Information We Collect

Personal information means information relating to an individual who can be identified directly or indirectly from that information.

Depending on your relationship with us and the reason for our interaction, we may collect or use:

  • Your name and contact details.
  • Your company or organisation name and job title where applicable.
  • Billing and delivery addresses.
  • Details of enquiries, quotations, orders and purchases.
  • Purchase, account and transaction history.
  • Customer account and registration information.
  • Payment and financial transaction information where required to process payments or manage accounts.
  • Credit reference information where you apply for a credit account.
  • Information relating to guarantees, returns, complaints or claims.
  • Correspondence between you and Engine Parts UK Ltd.
  • Marketing preferences and records of consent where appropriate.
  • Technical information relating to your use of our website, including information collected through cookies where you have provided the appropriate consent.
  • Call recordings where calls are recorded.
  • CCTV images where you visit premises covered by CCTV.
  • Photographs or video recordings where relevant to our business activities.
  • Identification information where required for legal, financial or account purposes.

3. How We Collect Personal Information

We may collect personal information directly from you when you:

  • Contact us through our website or enquiry forms.
  • Contact us by email, telephone, post or other means.
  • Place an order with us online, by telephone or through another sales channel.
  • Request information or a quotation.
  • Apply for or operate a customer or credit account.
  • Contact us regarding an order, return, guarantee, complaint or claim.
  • Subscribe to marketing communications or otherwise ask to receive updates from us.
  • Visit our premises where CCTV is in operation.

We may also collect information automatically when you use our website, such as technical information about your device, browser and use of the website. Where this involves non-essential cookies or analytics technologies, these are controlled by our cookie consent system.

We may receive personal information from third parties where appropriate and permitted by law. This may include suppliers, business partners, payment service providers, delivery providers and credit reference agencies.

4. How We Use Your Personal Information

We may use personal information to:

  • Respond to enquiries and requests for information.
  • Prepare and provide quotations.
  • Process and fulfil orders.
  • Process payments and manage customer accounts.
  • Arrange delivery of products.
  • Manage returns, guarantees and warranty claims.
  • Provide customer service and support.
  • Manage our relationships with customers and suppliers.
  • Assess and administer applications for customer credit accounts.
  • Deal with complaints, disputes or legal claims.
  • Maintain appropriate business, accounting and transaction records.
  • Monitor and improve customer service, including through call recording where applicable.
  • Protect customers, employees, premises and property through CCTV where applicable.
  • Prevent fraud, abuse and other security threats.
  • Send marketing communications where we are permitted by law to do so.
  • Understand how visitors use our website where analytics consent has been provided.
  • Comply with legal, regulatory, taxation and accounting requirements.

5. Our Legal Bases for Processing

Under UK data protection law, we must have a lawful basis for collecting and using personal information. Depending on the circumstances, we may rely on:

  • Contract – where processing is necessary to enter into or perform a contract with you, including processing orders, payments and deliveries.
  • Legitimate interests – where processing is necessary for the legitimate operation of our business, customer service, security or administration and those interests are not overridden by your rights and interests.
  • Consent – where you have specifically given us permission to process your information for a particular purpose, such as certain marketing or website analytics activities.
  • Legal obligation – where we are required to process or retain information to comply with applicable law, taxation, accounting, regulatory or other legal requirements.

Where we rely on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Website Analytics and Cookies

We use essential cookies and similar technologies where necessary for the operation, security and functionality of our website.

With your permission, we also use Google Analytics 4 (GA4) to help us understand how visitors use our website and to improve our website and services.

Google Analytics cookies are only activated where you have provided the appropriate consent through our cookie consent system.

If you decline Analytics cookies, Google Analytics storage remains disabled and Analytics cookies will not be set.

You can change or withdraw your Analytics consent at any time using the Cookie Settings link in the footer of our website.

For full information about the cookies and technologies used on our website and how to manage your choices, please see our Cookie Policy.

7. Website Security and Anti-Spam

We use security and anti-spam measures to help protect our website and enquiry forms from automated abuse, spam, fraud and malicious activity.

This includes the use of CleanTalk anti-spam technology. Information necessary to identify and prevent spam or malicious activity may be processed for website security purposes.

8. Call Recording and CCTV

Telephone calls may be recorded for monitoring, training, customer service and dispute resolution purposes.

Where CCTV is operated at our premises, recordings may be used for the legitimate purposes of protecting our employees, customers, premises and property, and for the prevention and investigation of crime or incidents.

9. Marketing

We may contact existing or prospective customers about products, services, news or promotions where we have an appropriate lawful basis to do so.

Where consent is required for marketing, we will obtain that consent before sending the communication.

You can ask us to stop sending marketing communications at any time by contacting us at judith@enginepartsuk.net or by using any unsubscribe facility provided in the communication.

Stopping marketing communications will not prevent us from contacting you where necessary in relation to an enquiry, quotation, order, account or other existing business relationship.

10. Sharing Your Personal Information

We do not sell or rent your personal information and we do not share customer information with third parties for their own marketing purposes without appropriate consent.

We may share personal information with trusted third parties where necessary to operate our business, provide products or services, fulfil orders, comply with our legal obligations or protect our legitimate interests.

These may include:

  • Payment and financial service providers used to securely process transactions.
  • IT, software, website hosting and technology service providers.
  • Anti-spam and security service providers.
  • Delivery, courier and logistics providers.
  • Credit reference agencies where relevant to a credit application or account.
  • Professional advisers such as accountants, auditors, insurers, HR professionals and legal advisers.
  • Government authorities, regulators, courts or law enforcement agencies where disclosure is required or permitted by law.

Where organisations process personal information on our behalf, we take appropriate steps to ensure that the information is protected and processed only for the appropriate purpose.

We may also disclose personal information in connection with a sale, transfer, merger or restructuring of all or part of our business. Where this occurs, personal information will continue to be subject to appropriate data protection requirements.

11. International Transfers

Some of the technology and service providers we use may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure that suitable safeguards are in place where required by applicable UK data protection law.

12. How Long We Keep Personal Information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, contractual, accounting, taxation and reporting requirements.

Our normal retention periods include:

  • Customer records: retained for the duration of the customer relationship and for applicable limitation, taxation and accounting periods afterwards.
  • Financial and accounting records: normally retained for at least six years where required for HMRC, accounting and legal purposes.
  • Unsuccessful recruitment records: normally destroyed after six months.
  • Marketing preferences: retained for as long as necessary to manage your marketing choices and ensure that opt-out requests are respected.
  • CCTV and call recordings: normally deleted after 31 days unless they are required for the investigation of an incident, complaint, dispute, legal claim or other legitimate purpose.

When personal information is no longer required, it will be securely deleted, destroyed or anonymised as appropriate.

13. How We Protect Your Information

We take appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

Access to personal information is restricted to employees, contractors and service providers who have a legitimate need to access it.

Although no internet transmission or electronic storage system can be guaranteed to be completely secure, we maintain reasonable safeguards appropriate to the nature of the information we process.

14. Your Data Protection Rights

Depending on the circumstances, UK data protection law gives you rights in relation to your personal information. These may include the right to:

  • Request access to the personal information we hold about you.
  • Request correction of inaccurate or incomplete personal information.
  • Request erasure of your personal information in certain circumstances.
  • Request restriction of processing in certain circumstances.
  • Object to certain processing, including processing for direct marketing purposes.
  • Request certain information in a structured, commonly used and machine-readable format where the right to data portability applies.
  • Withdraw consent at any time where processing is based on your consent.

These rights are subject to the conditions and exemptions contained in applicable data protection law.

You will not normally have to pay a fee to exercise your data protection rights. However, where permitted by law, we may charge a reasonable fee or refuse to act on a request that is manifestly unfounded or excessive.

We may need to request information from you to confirm your identity before responding to a request. This helps ensure that personal information is not disclosed to somebody who is not entitled to receive it.

We normally respond to valid data protection requests within one month. Where a request is particularly complex, or where permitted by law, additional time may be required and we will keep you informed.

To exercise any of your rights, please contact us using the details below.

15. Complaints

If you have concerns about how we handle your personal information, please contact us first so that we have an opportunity to investigate and resolve the matter.

Email: judith@enginepartsuk.net
Telephone: 01708 890494

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: www.ico.org.uk/make-a-complaint

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, processing activities or legal requirements.

The latest version will always be published on our website. Material changes will be communicated where appropriate.

17. Contact Us

If you have any questions about this Privacy Policy, how we use your personal information or wish to exercise your data protection rights, please contact:

Engine Parts UK Ltd
Units 14-17 Thurrock Commercial Park
Purfleet Industrial Estate
Aveley
South Ockendon
RM15 4YA

Telephone: 01708 890494
Email: judith@enginepartsuk.net