Privacy policy

Who is responsible for your data

The data controller is Company name: to be confirmed (trading as MBL Parts), registered in England and Wales under company number Company number: to be confirmed, registered office Registered address: to be confirmed, VAT number VAT number: to be confirmed. For anything about your data, contact us by email Support email: to be confirmed.

What we collect

• Account and order details: name, email, phone, delivery and billing addresses, what you ordered and your order history.
• Your vehicles: registration or VIN, and the make, model, engine, year, colour and MOT date we look up for it. We use these to check parts fit and, if you ask, to remind you before the MOT is due.
• Fitting bookings: the partner garage and time you choose.
• Questions to the mechanic assistant: what you type and the vehicle it is about.
• Payment: handled by Stripe. We receive confirmation of payment and the last four digits of the card, never the full number.
• Technical data: the cookies described in our cookie policy, and server logs (IP address, browser, pages requested) kept for security.

Why we use it, and on what basis

• To take, deliver and support your order, handle returns and keep your account: to perform our contract with you.
• To keep VAT invoices and accounting records: legal obligation.
• To prevent fraud, keep the site secure and improve the fitment check: our legitimate interests.
• To send MOT reminders, offers or newsletters, and to measure advertising: your consent, which you can withdraw at any time.

Who we share it with

• Stripe, to take payment.
• MBL Connect and our other delivery partners, to deliver your parts (name, address, phone, delivery notes).
• The partner garage you choose, so they can fit your parts (name, phone, vehicle, booking time).
• The vehicle data service we use to look up your registration.
• Anthropic, which provides the AI behind the mechanic assistant. Your questions are sent to it to generate an answer.
• The companies that host our website and systems, under contract and only on our instructions.

Some of these providers are based outside the UK. Where data leaves the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement to protect it. We never sell your data.

How long we keep it

• Orders and invoices: 6 years after the end of the financial year, as UK tax law requires.
• Your account and garage: until you close the account, or after 3 years without activity.
• Mechanic assistant conversations: 12 months.
• Server logs: 30 days.

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Where we rely on consent you can withdraw it at any time. Contact us by email Support email: to be confirmed; we reply within one month.

If you are not happy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.