Privacy policy

Effective date: November 5, 2026 · Last updated: November 5, 2026

This policy explains what AutoPartsNearMe.com (the “Site”, “we”, “us”) collects, why, who we share it with, and the choices and rights you have. The Site is operated by AutoPartsNearMe.com, which is the business / “controller” responsible for your personal information.

1. Information we collect

Information you give us, only when you choose to submit a form:

• Claim / correction form: store details, your name, email, role, and any message, plus whether you’re interested in a Featured listing.
• Used / hard-to-find part quote form: vehicle year, make, model, trim, VIN (optional), the part you need, ZIP code, name, email, phone (optional) and notes.
• Contact and privacy-request forms: your name, email, topic and message.

With each submission we also record the time, the country your request came from (derived from your IP address by our host), and your browser’s user-agent string, to prevent spam and abuse. We don’t store your IP address with the submission.

Information collected automatically. Like every website, our hosting provider, Cloudflare, receives your IP address, browser and device information, the pages requested and the referring page in order to deliver the Site and protect it from attacks. Cloudflare may keep this in short-lived request and security logs. We do not run advertising trackers, social-media pixels or cross-site analytics. Advertising is currently turned off.

Paid Featured listings (future). If we offer paid Featured listings, payments will be processed by Stripe, Inc. We will receive billing contact details and payment status, but never your full card number. Stripe’s use of your information is governed by the Stripe Privacy Policy.

Under the California Consumer Privacy Act categories, in the last 12 months we have collected: identifiers (name, email, phone); commercial information (the vehicle and part you’re looking for); internet or network activity (user-agent, pages requested, held by our host); and approximate geolocation (used transiently, see below). We collect precise geolocation only when you ask us to use it, and use it only to answer that request.

2. How location works

• Approximate location: when a page loads, Cloudflare derives an approximate city/region from your IP address. Our code uses it only to pick the stores closest to you for that page. We don’t save it.
• Exact location (optional): if you tap Use my exact location, your browser asks for permission. If you allow it, your device coordinates are sent once to /api/nearby, used to calculate distances, and discarded. They are not logged by our code or stored, and they are not shared with anyone. You can revoke the permission in your browser settings at any time.
• Directions: “Directions” buttons open Google Maps (or your device’s map app) with the store’s coordinates. When you click one, you’re leaving our Site and Google’s privacy policy applies. We don’t send your location to Google.

3. How we use information

• To provide the Site: show nearby stores, run searches, display listings.
• To respond to you: process listing claims, corrections and removals; answer messages; handle privacy requests.
• To fulfil your part-quote request by passing it to parts sellers and salvage yards (see below).
• To keep the Site secure and reliable: spam filtering, abuse prevention, debugging.
• To comply with law and enforce our Terms.

We don’t use your information for automated decision-making that has legal or similarly significant effects, and we don’t build advertising profiles.

4. Who we share it with

We share personal information only as follows:

• Service providers (processors) that act on our instructions: Cloudflare, Inc. (hosting, content delivery, security, logs, and Workers KV storage of form submissions). If we add other providers (for example an email-delivery service, Supabase database, or Stripe for payments), we will list them here.
• Parts sellers, at your direction. When you submit the part-quote form and tick the consent box, we pass your request and contact details to parts sellers and salvage yards so they can quote you. This is a disclosure you direct, not a sale. They may contact you only about your request.
• Retailers you click through to. Affiliate and store links (RockAuto, Amazon Automotive, AutoZone, Advance Auto Parts, CarParts.com) take you to third-party sites. We don’t send them your personal information, but they and their affiliate networks may set cookies or record that you came from us. See our affiliate disclosure.
• Open map data providers. Our store listings come from OpenStreetMap, Overture Maps Foundation and Foursquare Open Source Places (see Data sources). We receive listing data from them. Street maps load directly from OpenStreetMap when a store map becomes visible or you select the Map view. Your browser sends its IP address, browser information and the Site referrer to the tile servers; the requested tiles identify the displayed store area, not your exact device coordinates. See the OpenStreetMap Foundation privacy policy.
• Legal and safety. If required by law, subpoena or court order, or to protect rights, safety and property.
• Business transfer. If the Site is sold or merged, information may transfer to the new owner, who must honor this policy.

5. Cookies and similar technologies

We don’t set cookies. The Site has no non-essential cookies, no advertising or analytics cookies, and no browser storage of personal information, which is why there is no cookie banner. Cloudflare may set a strictly necessary security cookie (such as __cf_bm or cf_clearance) when it needs to tell people from bots; these are exempt from consent requirements and aren’t used for tracking. Retailers you click through to may set their own cookies on their sites. Details: Cookie notice.

If we add analytics later, we intend to use cookieless Cloudflare Web Analytics, which doesn’t use cookies or fingerprinting. If we ever add advertising or other non-essential cookies, we’ll update this policy and ask for consent where the law requires it before they load.

6. No sale or sharing; Global Privacy Control

We do not sell personal information and do not share it for cross-context behavioral advertising (as those terms are defined under the CCPA/CPRA), and we don’t use it for targeted advertising or profiling (as defined under other state laws). We have not done so in the past 12 months. We have no actual knowledge of selling or sharing information of consumers under 16.

We honor Global Privacy Control (GPC) and similar opt-out preference signals: if your browser sends one, we treat it as a valid request to opt out of sale, sharing and targeted advertising for that browser, and we record the signal with any form you submit. You can also use our Do Not Sell or Share My Personal Information page.

7. Retention

• Claim / correction submissions: up to 730 days, then automatically deleted (store details that become part of a published listing stay published).
• Contact and privacy-request submissions: up to 730 days, then automatically deleted, except records we must keep to show we handled a privacy request (kept for 24 months as required by California regulations).
• Part-quote requests: up to 365 days, then automatically deleted.
• Approximate and exact location: not retained.
• Hosting and security logs: kept by Cloudflare for short periods under its own retention schedule (typically days).
• Payment records (if Featured listings launch): as long as needed for tax and accounting law (typically 7 years).

8. Security

The Site is served only over HTTPS. Form submissions are stored in access-restricted Cloudflare storage that only the operator can reach, and we keep as little as we need. No method of transmission or storage is 100% secure. If a breach affecting your personal information occurs, we’ll notify you and regulators as the law requires.

9. U.S. state privacy rights (CCPA/CPRA and others)

Residents of California and of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island) have some or all of these rights, which we extend to all U.S. users regardless of whether a law’s thresholds apply to us:

• Know / access the categories and specific pieces of personal information we hold, and get a portable copy.
• Delete personal information we collected from you.
• Correct inaccurate personal information.
• Opt out of sale, sharing, targeted advertising and profiling (we don’t do these, but you can still submit a request).
• Limit the use of sensitive personal information. We use precise geolocation only to provide the result you asked for, so this right doesn’t apply, but you can simply decline the location prompt.
• Non-discrimination: we won’t deny service, charge different prices or give a lower quality of service because you used your rights.
• Appeal: if we decline your request, reply to our decision with “Appeal” in the subject line within 60 days. We’ll answer within 60 days (45 in some states). If you’re unhappy with the outcome, you can contact your state Attorney General.

How to submit a request: use the privacy request form or email info@autopartsnearme.com. We’ll confirm receipt within 10 business days and respond within 45 days (we may extend once by 45 days and will tell you why). To protect you, we verify requests by matching the email address used in your original submission. You may use an authorized agent, who must provide your signed permission; we may still ask you to confirm your identity.

California notices. Notice at collection: the categories, purposes and retention periods are listed in sections 1, 3 and 7. Under California’s “Shine the Light” law, we don’t disclose personal information to third parties for their own direct-marketing purposes. Nevada residents: we don’t sell covered information.

10. EEA/UK visitors (GDPR and UK GDPR)

The Site is aimed at U.S. users, but if you visit from the European Economic Area, the United Kingdom or Switzerland, the following applies. The controller is AutoPartsNearMe.com; contact info@autopartsnearme.com.

Lawful bases:

• Delivering and securing the Site and using approximate location to show nearby stores: our legitimate interests (Art. 6(1)(f)) in running a useful, safe directory.
• Exact device location: your consent (Art. 6(1)(a)), given through the browser prompt. You can withdraw it at any time in your browser.
• Claim / correction and Featured-listing requests: steps you ask us to take before a contract, or performing one (Art. 6(1)(b)).
• Part-quote requests passed to sellers: your consent (Art. 6(1)(a)), given with the consent box.
• Answering messages: legitimate interests. Keeping records required by law: legal obligation (Art. 6(1)(c)).

Your rights: access, rectification, erasure, restriction, data portability, objection to processing based on legitimate interests, and withdrawal of consent at any time (without affecting earlier processing). You can also lodge a complaint with your local supervisory authority, or in the UK with the Information Commissioner’s Office (ico.org.uk). We respond within one month.

International transfers: we and our providers process data in the United States and other countries. Where we transfer personal data out of the EEA/UK, we rely on adequacy decisions (including the EU-U.S. Data Privacy Framework and its UK Extension, where the recipient is certified, as Cloudflare is) or on Standard Contractual Clauses and the UK Addendum.

11. Canadian visitors (PIPEDA)

If we expand to Canada, or you use the Site from Canada, we handle personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA). We collect it with your consent (express consent for forms and exact location, implied consent for basic site delivery) and only for the purposes above. You may access and correct your information and withdraw consent by contacting our privacy officer at info@autopartsnearme.com. Your information may be stored and processed in the United States, where it may be accessible to U.S. authorities under U.S. law. You can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

12. Children’s privacy (COPPA)

The Site is a general-audience directory and is not directed to children under 13. We don’t knowingly collect personal information from children under 13 (or under 16 in the EEA/UK). If you think a child has sent us information, contact info@autopartsnearme.com and we’ll delete it.

13. Business listings and data about stores

Store listings describe businesses: name, address, business phone, website and hours, drawn from open datasets (Data sources). If a listing includes information about you as an individual (for example a home-based business), you can ask us to correct or remove it through our listing corrections and removal process.

14. Changes

We’ll post any changes here and update the dates above. If a change materially affects how we use information we already hold, we’ll give notice on the Site and, where required, ask for consent.

15. Contact us

Privacy questions or requests: info@autopartsnearme.com.