Privacy Policy

Last updated: 8 June 2026

This Privacy Policy explains how SASAUTO PARTS & ACCESSORIES LTD collects, uses, stores and protects personal data when you visit our website, place an order, contact us about an order, or use our online store.

We are committed to protecting your privacy and handling your personal data fairly, lawfully and transparently.

1. Who we are

This website is operated by SASAUTO PARTS & ACCESSORIES LTD, a company registered in England and Wales.

Registered office:
185 Forum House,
Empire Way,
Wembley,
HA9 0HL,
United Kingdom

Company Number: 09282676

UK VAT Number: GB247166789

Email: sales@sasauto.eu

For the purposes of UK data protection law, SASAUTO PARTS & ACCESSORIES LTD is the data controller for the personal data we collect and use in connection with this website and our online store.

2. What personal data we collect

We collect only the personal data that is necessary to operate our online store, process orders, take payment, arrange delivery, provide customer support, handle returns, comply with legal obligations and protect our website from misuse.

When you place an order or attempt to place an order, we may collect the following information:

  • your name;
  • billing address;
  • delivery address;
  • email address;
  • telephone number, where provided or required for delivery;
  • order details, including products purchased, prices, quantities and order history;
  • payment method and payment status;
  • limited payment-related information provided by Stripe, PayPal or our payment systems, such as transaction reference, payment confirmation, fraud checks or payment status;
  • VAT, invoice and accounting information where required;
  • customer service correspondence relating to your order, return, refund, delivery or product enquiry;
  • technical data such as IP address, browser type, device type, operating system, approximate location based on IP address, pages visited and security logs.

We do not intentionally collect special category personal data, such as health information, religious beliefs, political opinions or biometric data, through this website.

3. WordPress and WooCommerce data

Our store runs on WordPress and WooCommerce. When you use the store, WooCommerce may process information needed to manage the shopping basket, checkout, customer account, order history, payment status, delivery details, tax calculation, invoices, refunds and related store functions.

If you create a customer account, we may store your name, email address, billing address, delivery address and order history so that you can view previous orders and place future orders more easily.

If you check out as a guest, we still need to store order information for order processing, delivery, returns, accounting, tax and legal record-keeping purposes.

4. Payment data

We use third-party payment providers, including Stripe and PayPal, to process online payments securely.

When you pay through Stripe or PayPal, your payment data is processed by the relevant payment provider. We do not store your full card number on our website. We may receive and store limited payment-related information, such as payment status, transaction ID, fraud check result, payment method type, refund status and billing details required to process and manage your order.

Stripe and PayPal may process your personal data as independent controllers or processors depending on the payment method and transaction. Their own privacy policies apply to the personal data they collect and process through their payment services.

5. How we use your personal data

We use your personal data for the following purposes:

  • to process and fulfil your order;
  • to take payment and confirm payment status;
  • to send order confirmations, invoices, dispatch updates and service messages relating to your order;
  • to arrange delivery and provide your details to couriers or shipping partners;
  • to handle customer support, order questions, returns, refunds, complaints and warranty-related matters;
  • to keep accounting, VAT and business records;
  • to prevent fraud, abuse, unauthorised access and other security risks;
  • to maintain, troubleshoot and protect our WordPress/WooCommerce website;
  • to comply with legal obligations and respond to lawful requests from authorities, regulators, courts or enforcement bodies where required.

We do not use your personal data for newsletter marketing unless you separately choose to subscribe to a newsletter in the future.

We do not use the website comment system and we do not collect personal data for public comments or product discussions through comments.

We contact customers only where necessary to process, deliver, support or resolve matters relating to an order, enquiry, return, refund, warranty issue, payment issue, delivery issue or legal requirement.

6. Our lawful bases for processing

We process personal data under the following lawful bases:

Contract

We process your personal data where it is necessary to take steps at your request before entering into a contract, to process your order, accept payment, arrange delivery, provide customer support, handle returns and fulfil our obligations under the sale contract.

Legal obligation

We process and retain certain personal data where we are legally required to do so, including for accounting, VAT, tax, business record-keeping, legal claims, consumer law obligations and compliance with lawful requests.

Legitimate interests

We may process personal data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include website security, fraud prevention, resolving disputes, maintaining business records, responding to customer enquiries, improving order handling, protecting our legal position and ensuring the proper operation of our online store.

Consent

Where we use non-essential cookies, analytics tools, marketing tools or similar technologies that require consent, we will ask for your consent before using them. You can withdraw or change your consent where applicable.

7. Who we share personal data with

We share personal data only where necessary for the operation of our business, fulfilment of orders, payment processing, delivery, legal compliance or website security.

We may share personal data with:

  • payment providers, including Stripe and PayPal;
  • couriers, postal operators and delivery partners;
  • hosting providers and website infrastructure providers;
  • WordPress, WooCommerce and technical service providers used to operate the store;
  • accountants, bookkeepers, tax advisers and professional advisers;
  • IT support, website maintenance and security service providers;
  • fraud prevention, payment security or chargeback management services;
  • HMRC, regulators, law enforcement, courts or public authorities where required by law.

We do not sell your personal data.

We do not share your personal data with third parties for their own direct marketing purposes.

8. International transfers

Some of our service providers, including payment providers, website tools, cloud services or technical service providers, may process personal data outside the United Kingdom.

Where personal data is transferred outside the UK, we expect appropriate safeguards to be used where required by data protection law. These may include adequacy regulations, international data transfer agreements, standard contractual clauses, data processing agreements or other lawful transfer mechanisms.

9. How long we keep personal data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.

Order, invoice, VAT, payment and accounting records are usually kept for at least six years where required for tax, VAT, accounting and business record-keeping purposes.

Customer support messages relating to orders, returns, refunds, complaints or warranty issues may be kept for as long as needed to resolve the matter and for a reasonable period afterwards in case of follow-up questions, disputes or legal claims.

Website security logs are normally kept only for a limited period unless they are needed to investigate fraud, abuse, unauthorised access, technical issues or legal claims.

If you ask us to delete your personal data, we will consider your request in accordance with data protection law. We may not be able to delete information that we are legally required to keep, such as invoice, tax, VAT or accounting records.

10. Cookies and similar technologies

Our website uses cookies and similar technologies to make the online store work properly.

Some cookies are strictly necessary. These may include cookies used for the shopping basket, checkout, customer login, payment security, fraud prevention, website security and remembering essential store actions. Without these cookies, the store may not work correctly.

We may also use cookies or similar technologies from payment providers such as Stripe and PayPal to process payments securely and prevent fraud.

If we use non-essential cookies, such as analytics, advertising, remarketing or behavioural tracking cookies, we will request your consent where required by law before using them.

You can control cookies through your browser settings. Blocking some cookies may affect the functionality of the store, including basket, checkout, login and payment functions.

11. No comments and no public profiles

Our website does not use a public comment system for customers. We do not intentionally collect personal data for public comments, reviews or discussion threads through the website comment system.

If product reviews, comments, forums or similar features are added in the future, this Privacy Policy should be updated before those features are used.

12. Marketing

We do not currently send email newsletters or general marketing messages to customers through this website.

We may send service messages related to your order, such as order confirmation, payment confirmation, delivery updates, return information, refund updates, warranty communication or important product safety information.

Service messages are not marketing messages and are necessary for the management of your order or our legal obligations.

If we introduce newsletter marketing, promotional emails or remarketing in the future, we will update this Privacy Policy and obtain consent where required.

13. Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration or disclosure.

These measures may include secure hosting, access controls, password protection, SSL encryption, payment provider security, software updates, backups, security monitoring and restricted access to customer data.

No website, server, email system or internet transmission is completely secure. You should keep your account login details confidential and contact us immediately if you believe your account or order information has been compromised.

14. Your data protection rights

Depending on the circumstances, you may have the following rights under UK data protection law:

  • the right to be informed about how your personal data is used;
  • the right to access the personal data we hold about you;
  • the right to ask us to correct inaccurate or incomplete personal data;
  • the right to ask us to erase personal data in certain circumstances;
  • the right to restrict processing in certain circumstances;
  • the right to object to processing in certain circumstances;
  • the right to data portability in certain circumstances;
  • the right to withdraw consent where processing is based on consent;
  • the right to complain to the UK Information Commissioner’s Office.

To exercise your rights, please contact us at sales@sasauto.eu.

We may need to verify your identity before responding to a request. This is to protect your personal data and prevent unauthorised disclosure.

15. Complaints

If you have any concerns about how we use your personal data, please contact us first so that we can try to resolve the issue.

You can contact us at:

Email: sales@sasauto.eu

Postal address:
SASAUTO PARTS & ACCESSORIES LTD
185 Forum House,
Empire Way,
Wembley,
HA9 0HL,
United Kingdom

You also have the right to complain to the UK Information Commissioner’s Office if you are unhappy with how we handle your personal data.

16. Children

Our website and products are intended for adults and business customers purchasing vehicle parts and accessories. We do not knowingly collect personal data from children.

If you believe that a child has provided personal data to us, please contact us so that we can review and delete the data where appropriate.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, payment methods, legal obligations, cookies, service providers or data protection practices.

The latest version will be published on this page. The date at the top of this Privacy Policy shows when it was last updated.