Privacy Policy

This policy explains how GBK Parts ("we", "us") handles personal information collected through gbkparts.com. It applies to visitors, retail customers, and wholesale account holders.

1. Information We Collect

Information you give us

• Order information: name, billing address, shipping address, email address, and phone number.
• Account information: your username, password (stored as a hash, never in readable form), and order history.
• Wholesale applications: business name, business type, tax identification details, and trade references you submit when applying for a wholesale account or NET 15 terms.
• Correspondence: anything you send us through the contact form, by email, or by phone.
• Newsletter: your email address, if you subscribe.

Information collected automatically

• IP address, browser type, device type, operating system, and screen size.
• Pages viewed, products viewed, time on page, referring website, and search terms used on our site.
• Cookies and similar technologies, as described in section 3.

2. Payment Information

We do not collect, process, or store your full payment card number on our servers. Card payments are handled directly by our third-party payment processor, which is responsible for the security of that data under the PCI-DSS standard.

What we receive back from the processor is limited to what we need to fulfil and support your order: the transaction result, the last four digits of the card, and the card brand.

3. Cookies, Analytics, and Session Recording

We use cookies and similar technologies to keep your shopping cart working, to remember that you are signed in, and to understand how the site is used. The following third-party services run on this website:

• Google Analytics (GA4) — aggregate traffic and behavior statistics. Google's practices are described in the Google Privacy Policy.
• Google Ads conversion tracking and remarketing — measures which advertisements lead to purchases, and may show you GBK Parts advertisements on other websites. You can control this through Google Ads Settings.
• Microsoft Clarity — records how visitors interact with pages, including mouse movement, scrolling, clicks, and page navigation, and aggregates this into heatmaps and session replays. This is used to find usability problems. Clarity masks text input fields by default, and we do not use it to capture passwords or payment details. See the Microsoft Privacy Statement.

Most browsers let you refuse or delete cookies through their settings. Blocking cookies will not prevent you from browsing the catalog, but the shopping cart and sign-in will not function correctly without them.

4. How We Use Your Information

• To process, fulfil, ship, and invoice your orders.
• To provide customer support and answer your enquiries.
• To assess wholesale account and NET 15 credit applications.
• To detect and prevent fraudulent transactions.
• To send order confirmations, shipping notifications, and other transactional messages.
• To send marketing emails, but only if you subscribed. Every marketing email carries an unsubscribe link.
• To improve the website, our catalog, and our advertising.
• To comply with tax, accounting, and other legal obligations.

5. Who We Share It With

We do not sell your personal information. We share it only with parties who need it to do their job for us:

• Shipping carriers (UPS and LTL freight carriers) — your name, address, and phone number, so they can deliver your order.
• Our payment processor — to authorize and settle your payment.
• Analytics and advertising providers named in section 3.
• Our hosting and email providers — who store data on our behalf.
• Professional advisers and authorities — where we are legally required to disclose information, or where disclosure is necessary to protect our legal rights.

6. How Long We Keep It

Order and invoice records are retained for seven years, which is the period we are required to keep them for tax and accounting purposes. Marketing contact details are kept until you unsubscribe. Analytics data is retained according to the default retention period of the provider concerned.

7. Your Rights

You may ask us to show you the personal information we hold about you, correct it if it is wrong, or delete it. Email admin@gbkparts.com and we will respond within 30 days.

Note that we cannot delete records we are legally required to retain, such as completed invoices, until that retention period has elapsed.

California residents: under the CCPA you additionally have the right to know what categories of personal information we collect and disclose, the right to request deletion, and the right not to be discriminated against for exercising these rights. As stated above, we do not sell personal information. Submit requests to the same email address.

8. Security

This entire website is served over an encrypted HTTPS connection. Passwords are stored as one-way hashes. Access to customer records is restricted to staff who need it to perform their duties. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

9. Children

This is a commercial vehicle parts website and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Changes to This Policy

If we change this policy we will update the "last updated" date at the top of this page. Material changes affecting how we use your information will additionally be announced on the website.