Privacy Policy for AutoZone supplies

1. Introduction
   This Privacy Policy explains how AutoZone supplies (“we,” “us,” “our”) collects, uses, stores, and shares your personal information. By using our site, you consent to this policy.
2. Data Controller
   AutoZone supplies acts as the data controller for personal data collected on our website.
3. Personal Data We Collect
   We collect personal data like names, addresses, emails, and payment information for providing our services.
4. Non-Personal Data Collection
   We also collect non-personal data, including browsing patterns and website usage through cookies and analytics tools.
5. How We Collect Data
   Data is collected directly through forms, emails, cookies, and third-party integrations.
6. Purpose of Data Collection
   Your data is collected for order fulfillment, customer support, personalization, marketing, and legal compliance.
7. Legal Basis for Processing
   We process personal data based on contract necessity, legitimate interests, consent, and legal obligations.
8. Consent
   By providing your information, you consent to its processing. You may withdraw consent at any time by contacting us.
9. Data Collection via Cookies
   Cookies track user activity to improve the website experience. For further details, see our Cookie Policy.
10. Cookie Preferences
    You may change cookie settings at any time through your browser, though some features may be affected.
11. Use of Personal Data
    We use data to manage orders, process payments, improve customer experience, and offer relevant promotions.
12. Marketing Communications
    With your consent, we may send you marketing emails. You can unsubscribe anytime via the link in our emails.
13. Sharing Data with Third Parties
    We share your information with trusted partners, such as payment processors, shipping companies, and IT service providers.
14. Third-Party Links
    Our website may link to external websites. We are not responsible for third-party privacy practices.
15. Retention Periods
    We keep your data only as long as necessary for business purposes or as legally required.
16. Data Security Measures
    We use encryption, firewalls, and other technologies to secure your personal data from unauthorized access.
17. Data Access Requests
    Under UK GDPR, you can request access to the data we hold on you by contacting us.
18. Rectification of Data
    You may request correction of inaccurate or incomplete data by contacting us.
19. Data Deletion Requests
    You may request deletion of your personal data, subject to legal and business retention requirements.
20. Right to Restrict Processing
    You can request restriction of processing under certain circumstances, such as contesting data accuracy.
21. Right to Object
    You may object to processing based on legitimate interests or direct marketing.
22. Data Portability
    You have the right to request your personal data in a structured, machine-readable format for transfer to another service.
23. Automated Decision-Making
    We may use automated systems for certain decisions, such as fraud detection, with your explicit consent.
24. Children’s Privacy
    Our website is not intended for children under 16, and we do not knowingly collect personal data from minors.
25. International Transfers
    Data may be transferred outside the UK, but we ensure adequate protections are in place.
26. Data Storage Locations
    Your data is stored on secure servers located within the UK or compliant international locations.
27. Updates to Privacy Policy
    We may update this policy periodically. Significant changes will be posted on our website.
28. How to Contact Us
    For privacy inquiries, please contact us at info@autozonesupplies.uk
29. Complaints
    If you have concerns, you can lodge a complaint with the Information Commissioner’s Office (ICO) in the UK.
30. Financial Information
    We do not store full payment details. Our payment processors handle financial data securely.
31. Data Breach Notification
    In the event of a data breach, we will notify affected users and regulatory authorities as required by law.
32. Opt-Out of Marketing
    You can opt out of receiving marketing communications by adjusting your account settings or contacting us.
33. Behavioral Advertising
    We use behavioral data to show you relevant products and offers based on browsing history.
34. IP Address Collection
    We collect IP addresses for security and analytic purposes, helping us manage user sessions and protect data.
35. Usage Analytics
    We use tools like Google Analytics to understand website usage and improve functionality.
36. User-Generated Content
    Any content submitted to our website, such as reviews, is visible to other users and may be retained indefinitely.
37. Data Anonymization
    Where possible, we anonymize data to protect user privacy while performing analytics.
38. Compliance with Laws
    We comply with UK laws, including GDPR, and ensure data protection across our services.
39. Processing Personal Data on Legal Grounds
    We process data only on valid legal grounds, including contract necessity, legal obligation, and user consent.
40. Direct Messages and Notifications
    By signing up, you agree to receive essential notifications, which may include service updates or account alerts.
41. Special Category Data
    We do not collect special category data unless necessary and with explicit consent.
42. Right to Withdraw Consent
    If you have consented to specific data processing, you may withdraw this consent at any time.
43. Cross-Border Data Processing
    Where data transfers are cross-border, we comply with UK adequacy standards to safeguard data.
44. Dispute Resolution
    Disputes over data privacy are first handled internally. Users may escalate to the ICO if not resolved.
45. Sensitive Data
    We avoid collecting sensitive personal data unless required, and users are advised not to submit sensitive information.
46. Profiling
    We may profile customer data for personalization or fraud prevention, only with explicit consent.
47. Compliance with Requests
    We respond promptly to user requests under GDPR rights within one month.
48. Data Transfer Protocols
    All data transfers comply with GDPR safeguards, including adequacy decisions and binding corporate rules.
49. Account Security
    You are responsible for keeping your login details secure. Contact us immediately if you suspect unauthorized access.
50. Third-Party Payment Providers
    We work with compliant third-party providers to ensure secure processing of payment data.