Privacy Policy

Last updated: 9 September 2026

This policy explains how personal data is used when you visit or use Partsbank.

1. Who controls your data

The data controller is Tom Mc Carrick, trading as TMC Design (registered business number 540796), Doomore, Tubbercurry, F91 C982, Ireland. Email: tmccar@mail.com.

2. Data we collect

• Account data, including your name or business name, email address, telephone number, location, account type and authentication identifiers.
• Listing data, including descriptions, prices, vehicle compatibility, part numbers, photographs, delivery choices and listing status.
• Messages sent between buyers and sellers, including timestamps and read status.
• Payment records relating to listing fees, such as Stripe checkout and payment references. Partsbank does not receive or store full card details.
• Technical and security data supplied by our hosting and service providers, such as IP address, device/browser information, request logs and session data.
• Communications you send to us, including support, complaint and data-rights requests.

3. How and why we use data

• To provide the service and perform our contract: create accounts, authenticate users, publish and manage listings, enable messages, process listing fees and provide support.
• For legitimate interests: secure and improve Partsbank, prevent fraud and misuse, investigate complaints, enforce our Terms and understand basic service performance. We balance these interests against your rights.
• To meet legal obligations: maintain required financial records, respond to lawful requests and comply with consumer, tax, platform and data-protection law.
• With consent: where consent is legally required for optional cookies or marketing. Partsbank does not currently use advertising or optional analytics cookies.

4. What is public or shared

Active listings are public and may display the seller’s chosen display name, seller type, general location, listing details, vehicle compatibility and photographs. Messages are available to the sender and recipient. Your email address, password and full payment-card details are not displayed publicly.

5. Service providers and transfers

We use Supabase for authentication, database and photo storage; Stripe for listing-fee payments; Resend for transactional emails and message notifications; and Vercel for hosting and delivery. These providers process data under their own security and contractual arrangements. Some processing may take place outside the European Economic Area. Where required, transfers rely on an adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. Retention

We retain account, listing and message data while your account is active and for as long as reasonably necessary to provide the service, resolve disputes, prevent abuse and meet legal obligations. Payment and accounting records may be retained for the period required by Irish law. When data is no longer needed, it will be deleted or anonymised. Provider backups and security logs may remain temporarily under provider retention schedules.

7. Cookies and local storage

Partsbank uses strictly necessary authentication and security storage to keep users signed in and operate requested features. These technologies do not require consent where they are strictly necessary. If optional analytics, advertising or similar technologies are introduced, we will update this policy and request consent where required.

8. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction or portability of your personal data, and may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time. We may need to verify your identity before acting on a request.

Send requests to tmccar@mail.com. You may also complain to the Irish Data Protection Commission at dataprotection.ie. If you are in the UK, you may also contact the Information Commissioner's Office at ico.org.uk.

9. Security and automated decisions

We use access controls, private storage, encryption in transit and service-provider security features designed to protect personal data. No online service can guarantee absolute security. Partsbank does not currently make decisions producing legal or similarly significant effects solely by automated means.

10. Children and changes

Partsbank is intended for people aged 18 or over. We may update this policy as the service or law changes. Material changes will be highlighted through the service or by another appropriate notice.