Privacy Policy

1. Who We Are

The Perfect Part Inc. (“we,” “us,” “our”) operates theperfectpart.net. This Privacy Policy explains what personal information we collect, how we use it, and the rights you have over it.

2. Information We Collect

Information you provide:

• Name, email, phone, billing and shipping address (when you order or create an account).
• Payment details (processed by our PCI-compliant payment providers — we do not store full card numbers).
• Account credentials.
• Order history and preferences.
• Communications with our support team.
• Reviews, ratings, and other content you post.

Information collected automatically:

• Device, browser, IP address, and operating system.
• Pages visited, time on page, and referral source (analytics).
• Cookies and similar technologies (see Section 7).

Information from third parties:

• Payment verification, fraud-screening, and address-validation results from our service providers.
• Marketing-attribution data from advertising platforms (where you have consented).

3. How We Use Your Information

• To process and fulfill orders, including shipping, returns, and customer service.
• To create and maintain your account.
• To communicate with you about orders, account activity, and (with your consent) marketing.
• To prevent fraud and secure our Site.
• To improve our products, services, and Site.
• To comply with legal obligations.

4. Legal Bases for Processing (EU/UK Visitors)

If you are in the EU, UK, or EEA, we rely on the following legal bases under GDPR / UK GDPR:

• Contract performance — to process orders and accounts.
• Legitimate interest — for fraud prevention, security, and service improvement.
• Consent — for marketing communications and non-essential cookies.
• Legal obligation — for tax, accounting, and regulatory compliance.

5. Sharing Your Information

We share personal information only with:

• Service providers — payment processors (e.g., Stripe, PayPal), shipping carriers (USPS, UPS, FedEx), analytics providers, email/marketing platforms, fraud-prevention services.
• Legal & regulatory authorities — when required by subpoena, court order, or applicable law.
• Successors — in connection with a merger, acquisition, or sale of business assets, subject to confidentiality.

We do not sell your personal information as that term is defined under the California Consumer Privacy Act (CCPA/CPRA).

6. International Data Transfers

We are based in the United States. If you access the Site from outside the U.S., your information will be transferred to and processed in the U.S. Where required by law (e.g., GDPR), we use appropriate safeguards such as Standard Contractual Clauses for cross-border transfers.

7. Cookies & Tracking

We use cookies and similar technologies for:

• Strictly necessary — login, cart, checkout, security.
• Performance & analytics — understanding how the Site is used.
• Marketing — measuring ad effectiveness (only with consent in regions that require it).

You can manage cookies through your browser settings. Disabling strictly necessary cookies may break checkout.

8. Data Retention

We keep your information only as long as necessary for the purposes set out above, or as required by law (e.g., tax records typically retained for 7 years). When no longer needed, data is securely deleted or anonymized.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your information (subject to legal retention requirements).
• Restrict or object to certain processing.
• Receive a portable copy of your information.
• Withdraw consent at any time.
• California residents (CCPA/CPRA): Right to know, delete, correct, opt-out of sale/sharing, and limit use of sensitive personal information.
• Canadian residents (PIPEDA): Right to access and challenge accuracy.
• EU/UK residents (GDPR): All of the above, plus the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us. We respond within 30 days (or as required by your local law).

10. Children’s Privacy

The Site is not directed to children under 13 (or 16 in the EU/UK). We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Security

We use industry-standard technical and organizational measures (SSL/TLS encryption, PCI-DSS compliant payment handling, access controls, regular security reviews) to protect your information. No system is 100% secure; we encourage strong, unique passwords and prompt reporting of any suspicious activity.

12. Changes to This Policy

We may update this Privacy Policy. Material changes will be posted on this page with a new “Last updated” date.

13. Contact

To exercise your rights, ask questions, or report a concern, please contact us.