Privacy Policy

PartRunner GTA ("PartRunner", "we", "us") is a Toronto-based used auto parts sourcing and delivery service operating at partrunnergta.com. This Privacy Policy explains what personal information we collect, why we collect it, how we protect it, and what rights you have under the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and Ontario law.

When you submit a part request or place an order, we collect:

• Contact info: name, phone number, email address
• Vehicle info: year, make, model, trim, optionally VIN
• Part details: what you need, condition preferences, photos you upload
• Delivery address: for routing the part to you
• Payment metadata: via Stripe — we never see or store your full card number

We collect technical information automatically: IP address, browser type, device type, pages visited, and referral URL — used solely to keep the site running and measure aggregate traffic. We do not link this technical data to your personal information unless required for fraud investigation.

Your information is used only to:

• Source and verify the correct part for your vehicle
• Quote a price and confirm availability via SMS
• Process payment securely via Stripe
• Coordinate delivery to your address
• Send order receipts and delivery notifications
• Comply with Ontario sales-tax record-keeping rules
• Investigate fraud, chargebacks, or abuse if necessary

We do not use your information for marketing, advertising profiles, or third-party analytics. We do not sell or rent your personal information to anyone.

The only third parties that see your information are the service providers we use to operate the business:

• Stripe — payment processing (handles card data directly; we never store card numbers)
• Resend — sends order receipts and customer email notifications
• Neon Database — encrypted-at-rest storage for orders and inventory
• Vercel — website hosting
• NHTSA vPIC API — VIN decoding (we send only the VIN, not your contact info)
• Auto recyclers in our supplier network — receive only the vehicle and part details needed to fulfill your order; never your phone, email, or full address

We may disclose information if compelled by a Canadian court order, lawful warrant, or to investigate suspected fraud against PartRunner GTA. We will not disclose your information to a foreign government except as required by an enforceable Canadian legal process.

• All website traffic is encrypted via HTTPS (TLS)
• Database is encrypted at rest by our cloud provider
• Payment card information is handled exclusively by Stripe (PCI-DSS Level 1 certified)
• Admin access to order data requires a unique secret key
• We retain order records for 7 years to comply with Canada Revenue Agency tax-record requirements, then delete
• Inventory listings and aggregate analytics may be retained indefinitely (no personal information attached)

The site uses a small number of essential cookies to keep you logged into the admin panel and to remember your in-progress request form. We do not use third-party advertising cookies, retargeting pixels, or cross-site trackers.

If you have analytics enabled (e.g. via Vercel Analytics or Microsoft Clarity, when configured), only aggregate, anonymized usage patterns are collected. You can disable cookies entirely in your browser settings — the site will still function, but the admin login won't persist between visits.

You have the right to:

• Access the personal information we hold about you
• Correct any information that is inaccurate or out of date
• Delete your information once we no longer need it (note: we are required to retain order records for 7 years for tax purposes)
• Withdraw consent at any time — though this may end our ability to provide service to you
• File a complaint with the federal Office of the Privacy Commissioner of Canada at priv.gc.ca

To exercise any of these rights, email orders@partrunnergta.com with the subject line "Privacy request — [your request]". We respond within 30 days as required by law.

Our service is intended for vehicle owners aged 18 or older. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child, contact us and we will delete it immediately.

Some of our service providers (Stripe, Resend, Vercel) process information on servers located in the United States. By using our service, you consent to this cross-border transfer for the purposes described in section 4. We have selected providers that maintain robust security and PIPEDA-equivalent privacy practices.

We may update this Privacy Policy from time to time as our practices change or the law requires. Material changes will be posted at this URL with a revised "Last updated" date. We encourage you to review this page periodically.

Questions, concerns, or requests about this Privacy Policy?

• Email: orders@partrunnergta.com
• Text: 416-889-8273