Last updated: 9 October 2026
This policy explains what information RJAutoParts ("we") collects through this website and our Facebook Messenger chat, why, and what you can do about it.
Who we are
RJAutoParts. [Owner to complete: registered business name and trade licence number, if different from the shop name.]
What we collect and why
When you place an order
Your name, phone number, delivery address, optional email address and any order note, plus the items, prices, delivery zone and any coupon used. We need these to deliver the order and collect payment on delivery. If you give an email address we send an order confirmation to it.
When you create an account
Your name, phone number (used to sign in), email address and password. The password is stored only as a one-way hash. You can also save delivery addresses, a wishlist and a profile photo. Order status updates are emailed to your account address.
When you write a review
The name you give, your rating and your comment. Reviews are checked by us before they appear, and the name is shown with the review.
Campaign pages
Some offers have their own page with an order form or a download form. These collect the details the form asks for (name, phone and, if asked, email). For download requests we also record your IP address and browser type to prevent abuse. If you arrive from an advertisement, the tracking tags in the link (such as utm_source or fbclid) are kept for your visit and saved with any order you place, so we know which advertisement it came from.
Facebook Messenger
If you message our Facebook page, our chat assistant receives your Messenger ID and name from Meta, the messages you send, and any phone number, email or order details you share in the chat. Messenger itself is run by Meta and covered by Meta's privacy policy.
Technical information
When you use the site, your session record (stored on our server) includes your IP address and browser type, which helps keep accounts and checkout secure.
Cookies and local storage
Besides the cookies the site needs to work, two first-party cookies count visits to product and offer pages: one lasts for a visit (it expires after 30 minutes without activity), the other remembers the browser for up to 13 months. They are not shared with anyone and are not used for advertising.
If enabled, this site also uses Google Analytics, Google Tag Manager or Meta (Facebook) measurement cookies to understand how it is used. They are set by Google or Meta, not by us, and their own privacy policies apply.
- rjautoparts-session: keeps your cart, language and sign-in during your visit. Expires after 120 minutes of inactivity.
- XSRF-TOKEN: protects forms against cross-site request forgery.
- remember_web_…: set only if you tick "Remember me" when signing in.
- pv_sid: counts the pages you view during one visit. Expires after 30 minutes without activity.
- pv_vid: recognises the same browser coming back. Expires after 13 months.
For these visits we record the page, where the visit came from (for example a search engine, social network or ad link), the browser and device type, the IP address, and, if signed in, the account. IP addresses are erased after 30 days; visit records are deleted after about 13 months. Staff can see this to understand which pages and adverts work.
Orders keep the IP address and browser of the device used to place them, to help spot fraudulent orders and, if Meta advertising measurement is enabled, as described under "Who we share it with", to measure our adverts with Meta.
If the browser sends "Do Not Track" or "Global Privacy Control", no visit cookies are set and no IP or account is stored with the visit.
Your browser's local storage (not cookies, and never sent to us) holds your light/dark theme choice, the products you added to Compare, and the fact that you have seen our cookie notice.
Who we share it with
- The delivery service that brings your order receives your name, phone number and address.
- Our email provider sends order emails. [Owner to complete: name of the email provider.]
- ZendSMS receives your phone number to send password-reset codes by SMS.
- Meta processes Messenger conversations, as described above.
- If Meta advertising measurement is enabled: when we confirm your order, Meta receives your phone number and email (hashed), and the IP address and browser of the device you ordered from, to measure how our adverts perform.
- If Google reCAPTCHA is enabled: Google reCAPTCHA receives your IP address and signals from your browser when you use a protected form (sign-in, registration, newsletter or an enquiry), to tell people from automated spam.
We do not sell your information. We may disclose it if the law requires us to.
How long we keep it
[Owner to complete: how long order records, accounts, campaign leads and Messenger conversations are kept.] Session records expire on their own.
Your choices
- You can update your name, email, phone, password and addresses from your account pages.
- You can ask us for a copy of the information we hold about you, or ask us to correct or delete it, using the contact details below. We may need to keep order records we are legally required to keep.
Changes to this policy
If we change how we handle your information we will update this page and the date at the top.