Privacy policy

Last updated: August 7, 2026

1. Data Controller

Italy Car Parts www.italycar.jp

This policy applies to customers residing in the EU/EEA. Under the General Data Protection Regulation (GDPR), we act as the data controller for your personal data.

2. Personal Data We Collect

  • Order & transaction data: name, billing/shipping address, email address, phone number
  • Payment data: processed by Shopify Payments — we do not store card numbers
  • Account data: email address, hashed password
  • Browsing & behavioral data: IP address, cookies, browsing history (via Google Analytics, etc.)
  • Communication history: inquiry content and correspondence

3. Legal Basis for Processing (GDPR Art. 6)

Purpose Legal Basis
Order processing & fulfillment Performance of a contract (Art. 6(1)(b))
Legal & tax compliance Legal obligation (Art. 6(1)(c))
Marketing emails Consent (Art. 6(1)(a))
Site analytics & improvement Legitimate interests (Art. 6(1)(f))
Fraud prevention Legitimate interests (Art. 6(1)(f))

4. Data Retention

  • Order data: retained for up to 10 years to meet legal obligations
  • Account data: deleted within 30 days of account closure
  • Marketing consent: retained until consent is withdrawn
  • Cookie data: per individual cookie lifespan

5. Data Sharing

We share data only with the following third parties:

  • Shopify Inc. (platform & payment processing) — US, transferred under SCCs
  • Google LLC (Analytics & Merchant Center) — US, transferred under SCCs
  • Shipping carriers (DHL, FedEx, Japan Post, etc.) — limited to what is necessary for delivery
  • Accounting & tax services — within the scope of legal obligations

We do not sell your personal data.

6. International Data Transfers

Our service providers (Shopify, Google, etc.) are based in the United States. All transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Your Rights (GDPR Art. 15–22)

As an EU/EEA resident, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate data
  • Erasure ("Right to be Forgotten") — request deletion of your data
  • Restriction of processing — request that we limit how we use your data
  • Data portability — receive your data in a machine-readable format
  • Object — object to processing based on legitimate interests
  • Withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise your rights: privacy@italycar.jp (or via our contact form) We will respond within 30 days of receipt.

8. Cookie Policy

Type Purpose Consent Required
Essential cookies Cart & session management No
Analytics cookies Google Analytics Yes
Marketing cookies Retargeting ads Yes

A cookie consent banner is displayed on your first visit.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with the data protection authority (DPA) in your country of residence, including:

  • Germany: BfDI
  • France: CNIL
  • Italy: Garante

10. Changes to This Policy

We will notify you of any material changes via email or a prominent notice on our website.

11. Contact

Italy Car Parts — Privacy 
Email: importparts@italycar.jp
Contact form