Privacy policy

How CarSpare collects, uses and protects your personal data.

CarSpare operates the storefront and decides how the personal data you provide is used: it is the data controller. This policy explains what we collect, why, how long we keep it and how to exercise your rights. Contact: [email protected].

Account data (name, e-mail, password hash and phone number if you add one), delivery and billing addresses, orders and their payment status, saved vehicles, cart and wishlist, messages you send to support, and the technical data described below.

To create and secure your account, process and deliver orders, answer your requests, prevent fraud and abuse, keep the service running and meet legal obligations. We rely on the contract with you, our legitimate interest in a secure service and, where required, your consent.

For security we identify your device with a fingerprint and log each visit (page, time, device identifier, IP address). Your browser also stores small settings locally — language, theme, session, cart, wishlist and vehicle selection — which you can clear at any time from your browser.

Only providers acting on our behalf and the sellers who fulfil your orders: Amazon Web Services (file storage and secrets, EU region), Cloudflare Turnstile (bot protection), Google (sign-in with Google, only if you use it), Twilio (SMS codes) and our e-mail provider (transactional messages). We never sell your data.

Account data while your account exists and up to three years after your last activity; order data for the period required by tax law; security logs for twelve months; support messages for two years.

Data travels over TLS, passwords are stored hashed, credentials live in an encrypted secrets store and each service only gets the access it needs. No system is perfectly secure: report any concern to [email protected].

You can access, correct, export or delete your data, restrict or object to some processing, and withdraw consent at any time — from your account or by writing to [email protected]. You may also complain to your data protection authority.

Data protection questions: [email protected]. We answer within one month. This policy may change; the date at the top tells you when, and material changes are announced on the storefront.