Privacy policy

This policy applies to this storefront, order enquiries and support handled through our business contact channels, and public order tracking. A third-party website or app has its own policy when you leave our service, including WhatsApp, Instagram or map services.

We collect data you provide, data created through your transaction, and limited technical data produced when you use the website.

• Identity and contact data: name, telephone number, email address and your communications with us.
• Order and delivery data: products, quantities, order number, price, payment status, address, location details, delivery instructions, returns, warranty requests and support history.
• Vehicle and fitment data: make, model, year, VIN/chassis or part number and other specifications you choose to provide.
• Technical and usage data: IP address, browser/device information, timestamps, pages or searches used, referral information, diagnostic and security logs, and analytics data where you consent.
• Local browser data: cart contents, wishlist items and your analytics preference stored on your device using local storage.

We receive data directly from you through forms, orders, calls, email or WhatsApp; automatically from your browser and our systems; from Google when you choose Google Sign-In; from delivery or service partners involved in your order; and from analytics providers only when optional analytics is enabled and you consent.

You may create an optional customer account using email and password or Google Sign-In. For email registration, we store your name, email address and a securely hashed password; we do not store the readable password. We also process session and security information needed to keep you signed in, protect the account and support password reset.

When you choose Google Sign-In, Google provides your verified name, email address and a unique Google account identifier. We use this information only to create or identify your Spare Mec customer account, authenticate you and associate orders placed while signed in. We do not receive your Google password and do not request access to Gmail, Google Drive, contacts, calendars or other Google services.

We store the Google account identifier and email with your customer account and share them only with service providers that host, secure or operate the storefront as described below, or where disclosure is legally required. We do not sell Google user data or use it for advertising. You can stop using Google Sign-In or ask us to delete your customer account and associated authentication data by contacting us; legal, tax, fraud-prevention or transaction records may be retained where required.

• To answer enquiries, identify suitable parts, create and confirm orders, take or reconcile payment, deliver products, track orders and provide receipts.
• To handle returns, warranty claims, complaints, safety notices and customer support.
• To operate, secure, troubleshoot and improve the website, catalogue and customer experience.
• To prevent fraud, misuse and security incidents and to establish or defend legal claims.
• To meet accounting, tax, consumer-protection, product-safety and other legal obligations.
• To send marketing only with valid permission or where otherwise permitted by law, and always with an opt-out.

Depending on the activity, we process data with your consent; because it is necessary to take steps at your request or perform a sales contract; to comply with UAE law; to protect rights, safety and security; or under another lawful exception recognised by the UAE Personal Data Protection Law. Where processing relies on consent, you may withdraw it at any time, without affecting processing already carried out lawfully.

The storefront uses local browser storage to remember your cart, wishlist and analytics choice. This information stays on your device until you remove it, clear site data or the website replaces it.

If Google Analytics is configured, it loads only after you accept optional analytics. It may use cookies or similar technology and receive usage, device and network data to produce aggregated reports. We request IP anonymisation. You can accept or decline from the banner and reopen Cookie settings in the footer. Declining analytics does not affect ordering.

We do not sell or rent personal data. We share only what is reasonably needed with:

• hosting, database, IT, communications, analytics and security providers that support our business;
• couriers, suppliers, installers or fulfilment partners involved in your enquiry or order;
• banks, payment providers, accountants and professional advisers where relevant;
• government, regulators, courts, law enforcement or other parties where disclosure is legally required or necessary to protect rights and safety;
• a buyer or successor in a genuine business reorganisation, subject to appropriate confidentiality and legal safeguards.

Some service providers or order recipients may process data outside the UAE, including for GCC delivery, cloud hosting or communications. Where UAE law requires it, we use an approved transfer basis and appropriate contractual, organisational or technical safeguards. Contact us if you would like information about safeguards relevant to your data.

We retain personal data only for as long as reasonably needed for the purposes above, including customer support, warranty periods, dispute handling and legal, tax and accounting records. Retention varies by record and applicable law. We then delete, anonymise or securely isolate the data unless a lawful hold requires us to keep it. Cart and wishlist data stored in your browser remains until you remove it or clear site data.

We use reasonable technical and organisational safeguards designed to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. No internet service is completely secure. Please protect your order number and device, and contact us immediately if you suspect unauthorised use.

Subject to the conditions and exceptions in applicable UAE law, you may ask us to:

• confirm whether we process your data and provide access or information about that processing;
• correct inaccurate or incomplete personal data;
• erase data, restrict or stop processing, or object where the law gives you that right;
• provide or transfer eligible data in a portable form;
• review certain decisions based solely on automated processing;
• withdraw consent and opt out of direct marketing.
• Send a request to contact.smautospares@gmail.com. We may verify your identity and may refuse or limit a request where UAE law permits or requires it. You may also complain to the competent UAE data-protection or consumer-protection authority.

The storefront is intended for people who can lawfully purchase automotive parts and is not directed to children. If a minor’s data is provided, a parent or legal guardian must authorise it where required. Contact us if you believe a child provided data without appropriate authority.

We may update this policy to reflect changes in our services or legal obligations. We will publish the revised version and update the date above. If a change materially affects how we use existing data, we will provide additional notice or seek consent where required.