{
"lazyNodes": false,
"abFitnotesFlag": false,
"abCrawlReviews": false,
"productOptionsCookie": false,
"orderDelayFlag": false,
"skipSessionCookie": false,
"covidMessage": false,
"fullTitleCookie": false,
"nrLoggerCookie": false,
"checkoutReviewCookie": false,
"productOptionSeqCookie": false,
"maintenanceFlag": false,
"bufferETACookie": false,
"multiShippingDiscountFlag": false,
"newFitmentFlag": false,
"surveyOptInFlag": false,
"crossSellFlag": false,
"skuMappingFlag": false,
"paySplitCookie": false,
"callDisableFlag": false,
"zipPaymentFlag": "u",
"hassleFreeReturn": false,
"lifetimeReplacement": false,
"cpn_off": false
}CarParts.com Data Privacy Policy
Updated January 1, 2023
CarParts.com, Inc. ("we," "us," or "our") is committed to safeguarding the privacy of visitors to our website using generally accepted industry data protection standards. We appreciate that you may have questions about our privacy policy. The following provides information on how we collect, use, and otherwise processes your personal information during your visit of www.CarParts.com, as well as the rights that you have in relation to our processing of that information. This policy applies to all business units and subsidiaries.
In this Privacy Policy, "personal information" means information that enables you to be identified.
If you are a California resident, please click on the California Privacy Notice section for more information. If you are a Virginia resident, please click on the Virginia Privacy Notice section for more information.
If you have any comments or questions in connection with this Privacy Policy, or for further information on our processing activities and your rights in relation to your personal information, please contact us via email at DataProtection@carparts.com or by mail to Data Protection, CarParts.com, Inc., 2050 W 190th Street, Suite 400, Torrance, California 90504. You may also call us toll-free at (866) 230-4653.
You are not required to provide any personal information to view our website. If you choose to send us personal information by email, mail, or some other form, we may keep a record of that information. We are committed to being transparent and collecting information through lawful means.
Additionally, we may collect the following categories of personal information from you in the course of business, including through your use of our website, when you contact or request information from us:
Identification data, such as name, title, job title, or address.
Contact information, including your phone number(s), your email address and social media account or handle where appropriate.
Event registration or mailing list data, such as dietary requirements (which may reveal information about your health or religious beliefs), preferences and interests, subscriptions, downloads, and username/passwords.
Job applicant data, such as identification data and contact information, resumé and other data provided by you or third parties (e.g. recruiters) on our website, online recruitment portal (where applicable) or offline in connection with job openings, which may be subject to additional local requirements based on the country for which the position is advertised.
Cookie and device data, such as information about your visit of our website, IP address, device identifier, browser type and version, operating system and network, location, and time zone setting, time spent on our website; referring websites, pages accessed and other actions taken on our site. Calls and chat sessions with our customer service team may be recorded.
We also use third-party session replay services that record user interactions with our websites, including clicks, keystrokes, mouse movements, scrolls, and zooms.
We may supplement the information that you provide to us with information that we receive or obtain from other sources such as from our staff or personnel, clients, professional advisers, partners, and agents of CarParts.com, Inc., third parties with whom we interact, and publicly available sources.
We may use your personal information for the following purposes and, for each purpose, based on the following legal grounds:
Administration of client and vendor relationships.
Addressing client inquiries/feedback. It may also be necessary for our legitimate interests to establish or maintain a relationship with you; it is also in your interest to receive a response from us when you contact us.
Sending relevant marketing messages and inviting you to events/seminars – we use identification data, contact details, cookie, and device data, and mailing list data to communicate with you by way of email alerts and post to provide you with information about our events, seminars, or services that may be of interest to you.
Improving our website – we use cookie and device data to improve the functionality and user-friendliness of our website.
Keeping our website and IT systems and processes safe.
Preventing or detecting fraud.
Supporting our marketing and data analytics.
Order processing.
Complying with legal or regulatory inquiries/requests.
Recruitment – personal information about job applicants is collected and processed for purposes of screening, identifying, and evaluating candidates for positions; record-keeping related to hiring processes; analyzing the hiring process and outcomes; and conducting background checks, where and to the extent permitted by applicable law, which may also be subject to relevant local recruitment privacy policy. If you are hired by us, this data will be transferred to our employee record files for the purpose of your employment. This processing is necessary in order to take steps at the request of the job applicant in the context of recruitment prior to entering into a contract.
We may share your personal information with the following categories of recipients:
Vendors that will process your personal information on our behalf and under our written instructions to carry out their services during the course of our business, such as IT service providers, customer relationship management databases and other cloud-based solutions, third party companies providing us with business analytics and statistics to assist with our marketing campaigns, shipping carriers, product suppliers with whom we place orders for direct shipment to customers, and third party venues in which we may host events and seminars.
Law enforcement, regulatory, or government agency requesting personal information in connection with any inquiry, subpoena, court order, or other legal or regulatory procedures, with which we would need to comply. We may also share personal information to establish or protect our legal rights, property, or safety, or the rights, property, or safety of others, or to defend against legal claims.
Any third party connected with business transfers; we may transfer your personal information to third parties in connection with a reorganization, restructuring, merger, acquisition, or transfer of assets of our firm, provided that the receiving party agrees to treat your personal information in a manner consistent with this Privacy Policy.
We are not responsible for the data policies or procedures or content of any linked websites. We recommend that you check the privacy and security policies of each website you visit.
We may send you direct marketing messages including by way of email alerts and mail provided that we have a lawful ground to do so. If you no longer wish to receive our email alerts, to be part of a mailing list, or to receive any marketing communications, you can opt-out of such communications at any time by clicking on the unsubscribe link in the relevant communication or contacting us at DataProtection@carparts.com.
Third-Party Web Analytics Services
We use third-party web analytics services, including Google Analytics, to analyze the use of our website and our marketing activities. These services use automatically collect information about users (including IP addresses, cookies and device identifiers). To learn more about Google Analytics or how to opt out, please visit www.google.com/analytics/learn/privacy.html.
We endeavor to take reasonable steps to protect your personal information but cannot guarantee the security of any data you disclose online. Please note that email is not a secure medium and should not be used to send confidential or sensitive information. By providing information online, you accept the inherent security risks of providing information over the Internet and will not hold us responsible for any breach of security. If a data breach occurs, we will aim to notify affected users of the breach in a timely manner, as required by applicable law.
We complete yearly independent security assessments and yearly independent penetration tests. We also conduct quarterly independent vulnerability scans.
Links
Links to websites that are not operated by or for CarParts.com, Inc.("Third Party Sites") are provided solely as a convenience to you. This Privacy Policy does not apply to Third-Party Sites. We have not reviewed the Third Party sites, do not control, and are not responsible for any of their content or their privacy policies, if any. We do not endorse or make any representations about them, or any information, software or other products or materials found there, or any results that may be obtained from using them. If you decide to access any of the Third Party Sites listed on or linked to from our website, you should understand that you do so at your own risk.
The term "cookies" refers to a method of storing information about your activity on our website. When you visit our website, our computer system reads the cookie created by your browser to identify whether you are one of our customers and, if so, help you recall orders or preferences you have selected. The cookie also enables us to recall other past activities on the website, post your account data, send email to you, and tailor other parts of our website to your visit.
We also use information stored in cookies to analyze website usage trends, administer the website, track users' movements around the website, gather demographic information about our user base, and conduct our marketing campaigns.
Most web browsers accept cookies by default but allow users to reject cookies by changing the browser preferences. If you have set up your browser to reject cookies, some aspects of our website may not work properly for you. Note that this Privacy Policy only covers the use of cookies by us. It does not cover the use of cookies by any Third-Party Sites.
Please note that we do not support "Do Not Track" browser settings at this time.
We will only retain your personal information for as long as necessary for the purposes for which that information was collected as set out in this Privacy Policy or for longer as required under any applicable legal, regulatory, accounting, or reporting requirements. Should you opt out or no longer wish to receive marketing messages from us, we will securely delete your personal information from the relevant mailing list(s).
Deletion of Data
Users may request the deletion of their personal data regardless of geographic location.
Our website is not directed to children and we do not knowingly collect personal information from children under the age of 16. If you learn that a child has provided us with personal information, please contact us at DataProtection@carparts.com.
We reserve the right to change this Privacy Policy at any time. If we make any material changes to this Privacy Policy, we will post the revised version to www.carparts.com and update the "Effective Date" at the top of this Privacy Policy. Except as otherwise indicated, any changes will become effective when we post the revised Privacy Policy on our website.
California Privacy Notice
Updated: January 1, 2023
Scope
This California Privacy Notice is part of our Privacy Policy and is provided to California residents and addresses our collection and use of Personal Information relating to them. This California Privacy Notice does not apply to our independent contractors, employees or job applicants. This California Notice uses certain terms that have the meanings given to them in the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (the “CPRA”).
Information for California Residents
This Privacy Notice provides the following information to California Consumers:
Categories of Personal Information we collect;
Purposes for which we use Personal Information;
Categories of Personal Information we disclose to third parties;
Categories of third parties to which we disclose Personal Information; and
How Consumers can exercise their rights under the CPRA:
The rights to access, correct, or delete Personal Information;
The right to limit the use of sensitive Personal Information in certain circumstances; and
The rights to opt out of the sharing of Personal Information for behavioral advertising, sales of Personal Information, or certain profiling.
For the purposes of this California Privacy Notice, “Personal Information” means information that is linked or reasonably linkable to a particular individual or household. However, the following categories of information are not Personal Information:
Publicly available information
Deidentified or aggregated data
Information otherwise excluded from the scope of the CPRA.
Categories of Personal Information We Collect
The following table identifies information we've collected over the last 12 months and what we continue to collect from California residents.
|
Category |
Examples |
Collected |
|
Identifiers |
Name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers. |
YES |
|
Personal information categories |
A name, signature, physical characteristics or description, address, telephone number. |
YES |
|
Protected classification characteristics |
Characteristics of protected classifications under California or federal law, including: Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth, and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). |
NO |
|
Commercial Information |
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
YES |
|
Biometric Information |
An individual’s physiological, biological or behavioral characteristics, used to establish identity. |
NO |
|
Internet or other electronic network activity |
Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. |
YES |
|
Geolocation data |
Physical location (non-precise). |
YES |
|
Sensory data |
Audio, electronic, visual, thermal, olfactory, or similar information. |
YES |
|
Professional or employment-related information |
Current or past job history or performance evaluations. |
NO |
|
Education Information |
Records maintained by an educational agency or institution that pertain to a student, such as grades and transcripts. |
NO |
|
Sensitive Personal Information |
A social security or tax identification number security, driver’s license, state identification card. Account log-in, financial account, credit or debit car numbers in combination with security or access codes, passwords, social security number, driver’s license, state identification number, financial information, personal information collected and analyzed concerning health, or other similar information. |
We do not collect this information for profiling or for general marketing purposes and do not store complete payment card information. |
|
Inferences |
Inferences drawn from any of the above categories to create a profile about a consumer reflecting their preferences, characteristics, predispositions, behavior and attitudes. |
YES |
We may also collect other categories of personal information that you choose to share with us.
Sources of Personal Information. During the 12-month period prior to the last updated date of this California Notice, we may have obtained personal information about you from the following categories of sources:
Directly from you or the devices you use to access our services, including when you use our website, purchase products from us, provide information to us, interact with customer service, and participation in events from joint marketing partners and event sponsors when they share this information with us.
From our Service Providers, including data analytics vendors, internet service providers, information security providers and payment processors.
From our Affiliates and subsidiaries.
From our Business Partners, such as drop ship vendors, e-commerce marketplaces, repair shops and mobile mechanics.
From our Advertising Partners and Data Analytics vendors.
Inferences from your activity.
Sensitive Personal Information
We limit our collection and sharing of Sensitive Personal Information (“SPI”) for purposes of complying with legal and financial reporting obligations, facilitating payments through our websites, fraud detection and prevention and identity verification. You have the right to limit the use and disclosure of your SPI, if we are using your SPI beyond what is reasonable and proportionate to provide the Services. Please see the Tables “Categories of Personal Information” and the section “How We Share Your Personal Information” for more details about our practices around SPI. If you have questions about our use of your SPI, you may contact us via email at DataProtection@carparts.com or by mail to Data Protection, CarParts.com, Inc., 2050 W 190th Street, Suite 400, Torrance, California 90504. You may also call us toll-free at (866) 230-4653.
How We Share Personal Information
We may disclose for business purposes all of the categories of personal information described above with the following categories of third parties:
Online services. If you use our website, or social media properties that we operate or any services provided through them (collectively, "online services"), we use your general identifiers, online identifiers, internet activity information (as described above) and other information that you submit through the online services for:
Hosting and events. If you register for our events, we use your general identifiers, online identifiers, food allergy information and commercial information (as described above) to fulfill your registration requests, communicate with you about the event, and to host you at the events. If you visit our offices, we collect your name and organizational affiliation to register and host you.
Research and development. We may use your general identifiers, online identifiers, internet activity information, and commercial information (as described above) for research and development purposes, including to analyze and improve our client services, online services, events, and our business. As part of these activities, we may create aggregated, de-identified, or other anonymous data from personal information we collect. We make personal information into anonymous data by removing information that makes the data personally identifiable to you. We may use this anonymous data and share it with third parties for our lawful business purposes.
Marketing. We may use your general identifiers, online identifiers, internet activity information, and commercial information (as described above) in connection with sending you marketing communications and advertisements as permitted by law, including by mail and email. You may opt-out of marketing communications by following the unsubscribe instructions in marketing emails or by contacting us at DataProtection@carparts.com.
Compliance and protection. We may use any of the categories of personal information described above for other purposes consistent with the California Notice or that are explained to you at the time of collection of your personal information.
Service providers. Companies that provide us with services that help us provide services or operate our business, such as IT and software services, mailing services, marketing services, event management services, eDiscovery services, cybersecurity services, and office security services.
Government authorities, law enforcement, and others. Government authorities, law enforcement, courts, and others as described in the compliance and protection section above.
Transaction participants. Parties to transactions and potential transactions for the sale, transfer or licensing of a portion or all of our business or assets, including your personal information, such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution.
Professional advisors. Our lawyers, accountants, bankers, and other outside professional advisors in the course of the services they provide to us.
We may also share personal information with other categories of third parties with your consent or as described to you at the time of collection of your personal information.
We may use, and during the past 12-months we have used or shared Personal Information for the following business purposes:
Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.
Helping to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for these purposes.
Debugging to identify and repair errors that impair existing intended functionality of our websites.
Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a consumer’s current interaction with the business, provided that the consumer’s personal information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction with the business.
Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business.
Providing advertising and marketing services, subject to applicable legal restrictions and consumer opt-out rights.
Undertaking internal research for technological development and demonstration
Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
Profiling and Use of Deidentified Data
We do not use Sensitive Personal Information to infer characteristics about consumers. We may create profiles based on non-sensitive Personal Information to draw inferences about personal interests order to provide advertisements, promotions and other marketing communications that are relevant to Consumers. To the extent we or our Service Providers process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.
Exercising Your Rights
The rights to access, correct, or delete Personal Information;
The right to limit the use of Sensitive Personal Information in certain circumstances; and
The rights to opt out of the sharing of Personal Information for behavioral advertising, sales of Personal Information, or certain profiling.
If you are a California Consumer, you can submit a request to exercise your personal information rights under the CPRA by visiting https://www.requesteasy.com/63ad-5240 or by calling us at (866) 230-4653. To protect your privacy, we may need to authenticate your identity before we respond to your rights request. We will use commercially reasonable efforts to verify your identity for this purpose. Any information you provide to authenticate your identity will only be used to process your rights request. Please be aware that we do not accept or process rights requests through other means (e.g., via fax or social media).
After submitting your request online, you will receive a follow-up email, which may include a link you must click on in order to verify your identity. If you do not click on that link, we may be unable to complete your request due to lack of verification. It is important that you provide a valid email address in order for us to be able to process your request. We will respond to your rights request within 45 days, though in certain cases we may inform you that we will need up to another 45 days to act on your request. If we suspect fraudulent or malicious activity on or from your account, we will delay taking action on your request until we can appropriately verify your identity and the request as authentic. Also note that each of the rights are subject to certain exceptions. We reserve the right to decline to process, or charge a reasonable fee for, requests from a Consumer that are manifestly unfounded, excessive, or repetitive.
Sales of Personal Information
The CPRA defines a “sale” as the exchange of Personal Information to a third party for money or anything of value. We do not sell Personal Information for monetary consideration, but in certain situations, our disclosure of Personal Information to third parties may constitute a sale under CPRA. You can opt out of the sale of your Personal Information by submitting a rights request as described above.
Behavioral Advertising
The CPRA defines “sharing” as disclosing Personal Information to a third party for behavioral advertising, sometimes referred to as “targeted advertising.” An example of this is displaying advertisements to a consumer where the advertisement is selected based on Personal Information obtained from that consumer's activities over time and across nonaffiliated websites or online applications to predict such consumer's preferences or interests. We share some Personal Information for behavioral advertising. You can opt out of the sharing of your Personal Information for behavioral advertising by submitting a rights request as described above.
Limiting the Use of Sensitive Personal Information
The CPRA provides a right to limit some uses of Sensitive Personal Information. In particular, you may direct companies not to use Sensitive Personal Information except as necessary to provide goods or services you have requested. You may submit a request to limit the use of your sensitive Personal Information by submitting a rights request as described above.
Authorized Agent Requests
The CPRA allows you to designate an authorized agent to make a rights request on your behalf. Your authorized agent may submit such a request by following the same method described above. We may require verification of your authorized agent in addition to the information for verification above for Consumers and households. We will review the information provided and may request additional information to ensure we are interacting with the correct individual. Please also be aware that making any such request does not ensure complete or comprehensive removal or deletion of personal information or content you may have posted, and there may be circumstances in which the law does not require or allow us to fulfill your request.
Exceptions
We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain personal information as permitted by law, such as for tax or other record keeping purposes and to process transactions and facilitate customer requests. If you choose to exercise any of your rights under, you have the right to not receive discriminatory treatment, though we may not be able to provide some services to you without such information.
Virginia Privacy Notice
Updated: January 1, 2023
This Privacy Notice (“State Privacy Notice”) applies to information we collect online and offline from or about Virginia residents who use our website. This State Privacy Notice does not apply to our personnel, job applicants, or other individuals acting in a commercial or employment context.
This State Privacy Notice uses certain terms that have the meaning given to them in the applicable laws and implementing regulations in Virginia. Date of applicability of the applicable regulations may vary across states.
Categories of Personal Information Collected
We may process the categories of personal information listed in the Information Collection section of our Privacy Policy and in the Categories of Personal Information We Collect section of the California Privacy Notice.
Purposes for which Personal Information is collected
We may process the personal information we collect about you for the purposes listed in the Information Usage and Sharing sections of our Privacy Policy.
Sharing of Personal Information:
We share the following categories of your Personal Information with the categories of third parties listed in the Information Sharing section of our Privacy Policy and the How We Share Personal Information section in the California Privacy Notice:
Contact information and other information provide to us (including your name, email address, physical address, shipping address, telephone number).
Internet or other electronic network activity information (including cookies and mobile device IDs, and related browsing information).
Commercial information (including products and services purchased, products and services you are considering purchasing that are placed in your virtual shopping cart, information about products that you have returned, product orders you have cancelled, and product reviews).
Location information.
Transactional information, including information you provide to us via customer service calls, emails, SMS and chats.
Processing Personal Information for Sale and Targeted Advertising
We share your personal information with our Data Analytics Providers, Advertising Partners Services and Advertising Networks and other such third parties for the purposes of targeted advertising.
We do not sell your Personal Information in exchange for monetary consideration.
We will not discriminate against you for exercising any of the rights that are provided to you under applicable law. We do not conduct profiling in furtherance of decisions that produce legal or similarly significant affects for consumers. To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.
Consumer Privacy Rights.
You may have certain rights pursuant to the applicable state laws, as described below.
Right to Delete: You have the right to request that we delete certain personal information we collected from you. To exercise your rights, please see the “Exercise of Your Rights” section.
Right to Know: You have the right to request, twice in a 12-month period, a report that details the categories of personal information collected about you, the categories of sources from which the personal information is collected, the purposes for collecting the personal information, the categories of third parties which whom we share the personal information and the specific pieces of personal information collected about you. To exercise your rights, please see the “Exercise of Your Rights” section.
Right to Correct: You have the right to correct inaccurate personal information we hold about you. For existing customers, you may log in your account to correct your personal information. For non-customers, please see the “Exercise of Your Rights” section.
Right to opt-out of Processing for Purposes of Sale and Targeted Advertising: You have the right to opt-out of sharing information with third parties for the purposes of sale and targeted advertising. To exercise your rights, please see the “Exercise of Your Rights” section.
Exercise of Your Rights
If you are a Virginia Resident, you can submit a request to exercise your personal information rights under the CPRA by visiting https://www.requesteasy.com/63ad-5240 or by calling us at (866) 230-4653. To protect your privacy, we may need to authenticate your identity before we respond to your rights request. We will use commercially reasonable efforts to verify your identity for this purpose. Any information you provide to authenticate your identity will only be used to process your rights request. Please be aware that we do not accept or process rights requests through other means (e.g., via fax or social media).
After submitting your request online, you will receive a follow-up email, which may include a link you must click on in order to verify your identity. If you do not click on that link, we may be unable to complete your request due to lack of verification. It is important that you provide a valid email address in order for us to be able to process your request. We will respond to your rights request within 45 days, though in certain cases we may inform you that we will need up to another 45 days to act on your request. If we suspect fraudulent or malicious activity on or from your account, we will delay taking action on your request until we can appropriately verify your identity and the request as authentic. Also note that each of the rights are subject to certain exceptions. We reserve the right to decline to process, or charge a reasonable fee for, requests from a Consumer that are manifestly unfounded, excessive, or repetitive.
You also can designate an authorized agent to make these requests on your behalf, though we will need to verify the authority of such agent pursuant to our procedures.
We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain personal information as permitted by law, such as for tax or other record keeping purposes and to process transactions and facilitate customer requests. If you choose to exercise any of your rights under the applicable state laws, you have the right to not receive discriminatory treatment by us, though we may not be able to provide some services to you without such information. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.