Privacy Policy

Effective Date: February 2025

CARNPART SEARCH SYSTEM LIMITED ("we", "us", "our", or "the Company") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website www.carnpart.ie ("the Website") and our services.

This Privacy Policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Data Protection Act 2018 (Ireland).

1. Data Controller Information

The data controller responsible for your personal data is:

CARNPART SEARCH SYSTEM LIMITED
Company Number: 780864
Registered Address: 51 Bracken Road, Sandyford, Dublin 18, D18 CV48, Ireland
Email: info@carnpart.ie

2. Information We Collect

We collect and process the following categories of personal data:

2.1 Information You Provide to Us

Account Registration Information

  • Full name

  • Email address

  • Phone number

  • Password (encrypted)

  • Location / address (if provided)

Advertisement Information

  • Vehicle or parts details (make, model, year, condition, price, etc.)

  • Photographs and images

  • Description text

  • Location of the item

Payment Information

  • Payment card details (processed securely through third-party payment providers)

  • Billing address

  • Transaction history

Communication Data

  • Messages sent through our platform

  • Customer support inquiries

  • Feedback and reviews

2.2 Information We Collect Automatically

Technical Data

  • IP address

  • Browser type and version

  • Device type and operating system

  • Referring / exit pages and URLs

  • Date and time of visit

Usage Data

  • Pages viewed and links clicked

  • Search queries

  • Time spent on pages

  • Interaction with advertisements

Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your experience. Please refer to our Cookie Policy for detailed information.

3. How We Use Your Information

We process your personal data for the following purposes and legal bases under GDPR:

3.1 To Provide Our Services

Legal Basis: Performance of a contract

  • Create and manage your account

  • Process and publish your advertisements

  • Process payments for advertisement fees

  • Facilitate communication between buyers and sellers

  • Provide customer support

3.2 To Improve and Personalize Our Services

Legal Basis: Legitimate interests

  • Analyze usage patterns and trends

  • Improve website functionality and user experience

  • Personalize content and search results

  • Conduct research and analytics

3.3 For Marketing and Communications

Legal Basis: Consent (you can withdraw at any time)

  • Send promotional emails about new features or offers

  • Provide updates about your advertisements

  • Send relevant recommendations based on your activity

3.4 For Security and Legal Compliance

Legal Basis: Legal obligation and legitimate interests

  • Detect and prevent fraud, spam, or illegal activity

  • Enforce our Terms and Conditions

  • Comply with legal obligations and regulations

  • Respond to legal requests from authorities

  • Protect the rights, property, and safety of our users

4. Sharing Your Information

4.1 Other Users

When you post an advertisement, certain information (name, contact details, location) may be publicly visible to facilitate transactions.

4.2 Service Providers

We work with third-party service providers such as:

  • Payment processors (e.g., Stripe, PayPal)

  • Hosting and cloud storage providers

  • Email service providers

  • Analytics providers (e.g., Google Analytics)

  • Customer support platforms

These providers are contractually obligated to protect your data.

4.3 Legal Authorities

We may disclose your information to law enforcement or regulatory bodies when required by law.

4.4 Business Transfers

In case of merger, acquisition, or sale of assets, your data may be transferred to new owners.

5. International Data Transfers

Your personal data may be processed outside the European Economic Area (EEA). We ensure safeguards such as:

  • Standard Contractual Clauses

  • Transfers to countries with adequacy decisions

  • Certified service providers under approved frameworks

6. Data Retention

We retain personal data only as long as necessary:

  • Account Information: While active + 6 months after deletion

  • Advertisement Data: 12 months after expiry or removal

  • Transaction Records: 7 years (tax/legal compliance)

  • Communications: 3 years

  • Technical Data: Anonymized after 24 months

7. Your Rights Under GDPR

You have the right to:

  1. Access your data

  2. Correct inaccurate data

  3. Request deletion (Right to be Forgotten)

  4. Restrict processing

  5. Data portability

  6. Object to processing

  7. Withdraw consent anytime

  8. Lodge a complaint with the Irish Data Protection Commission

To exercise rights: info@carnpart.ie
Response time: Within 30 days

8. Data Security

We implement security measures including:

  • SSL/TLS encryption

  • Secure password hashing

  • Security audits and vulnerability assessments

  • Access controls and authentication

  • Staff data protection training

  • Incident response procedures

9. Cookies and Tracking Technologies

We use cookies to:

  • Remember preferences

  • Keep users logged in

  • Analyze traffic

  • Improve performance

  • Deliver personalized content and ads

Types of Cookies

  • Essential Cookies

  • Functional Cookies

  • Analytics Cookies

  • Marketing Cookies

You can manage cookies through browser settings.

10. Third-Party Links

We are not responsible for privacy practices of external websites.

11. Children's Privacy

Our services are not intended for individuals under 18. We do not knowingly collect children's data.

12. Changes to This Privacy Policy

We may update this policy. Significant changes will be notified via website notice or email.

13. Contact Us / Data Protection Queries

CARNPART SEARCH SYSTEM LIMITED
51 Bracken Road, Sandyford
Dublin 18, D18 CV48
Ireland

Email: info@carnpart.ie

14. Supervisory Authority

Data Protection Commission (Ireland)
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland

Phone: +353 (0)761 104 800
Email: info@dataprotection.ie
Website: www.dataprotection.ie

By using our Website, you acknowledge that you have read and understood this Privacy Policy.

Last Updated: February 2025