Last Updated: March 19, 2024
Parts Authority, LLC and its affiliates (collectively, “Parts Authority,” “we,” “our,” or “us”) respect your privacy and are committed to protecting it through our compliance with this policy.
This Privacy Notice (our “Privacy Notice”) describes the types of information we may collect from you or that you may provide when you visit our websites, www.partsauthority.com, my.partsauthority.com, www.imcparts.net, wwww.pennypincheraz.com, www.costlessautoparts.net/store/portal, www.nationalautobody.com, and , www.partsauthority2024.com (collectively, the “Websites”), and our practices for collecting, using, maintaining, protecting, and disclosing that information.
Please read this Privacy Notice carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Websites. By accessing or using these Websites, you agree to this Privacy Notice. This Privacy Notice may change from time to time (see Changes to Our Privacy Notice). Your continued use of these Websites after we make changes is deemed to be acceptance of those changes, so please check this Privacy Notice periodically for updates.
Throughout this Privacy Notice, the term “Personal Data” means any information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. However, Personal Data does not include any deidentified or aggregated information.
We collect the following types of Personal Data directly from you when you access or use our Websites: name, postal address, date of birth, email address, telephone number, account name (and number), online identifier, signature (physical or electronic), and in limited circumstances, passport number. In addition, we also collect other types of information that you may provide when you fill out a form (such as via our online chat function) or through your correspondence with us.
The Personal Data we collect on or through our Websites include:As you navigate through and interact with our Websites, we may use automatic data collection technologies to collect certain Personal Data about your interaction with our Websites. By using the website, you consent to our use of automated data collection technologies. This can include information about your equipment, browsing actions, and patterns, such as:
Other information we collect automatically includes Personal Data, or we may maintain it or associate it with Personal Data we collect in other ways. It helps us to improve our Websites and to deliver a better and more personalized service by enabling us to: (i) estimate our audience size and usage patterns; (ii) store information about your preferences, allowing us to customize how our Websites appear to you according to your individual interests; (iii) speed up your searches; (iv) identify areas for improvement and further engagement; and (v) recognize you when you return to our Websites.
This information may be collected through the use of cookies (or browser cookies), which are small data files placed on your computer that allow us to collect certain information whenever you visit or interact with our Websites. Some of these cookies are managed by us (first-party cookies), while others are managed by third parties that we do not control (third-party cookies).
Our use of cookies and other similar technologies (such as session replay technology) also allows us to record your interactions with our Websites and information generated in the course of your use of our Websites, such as mouse movements, clicks, page visits, text entered, how long you spent on a page, data that you type into our Websites, and other details of your actions on our Websites.
In addition to cookies, we may include web beacons in our promotional email messages and newsletters in order to determine whether messages have been opened and acted upon. Web beacons are small pieces of code placed in emails that can communicate information about your browser and device to a server. These beacons can be used, among other things, to count the users who visit read an email, or to deliver a cookie to the browser of a user viewing an email.
Some content or applications, including advertisements, on our Websites are served by third parties, including advertisers, ad networks and servers, content providers, analytics providers, social media companies, and application providers. These third parties may use cookies, alone or in conjunction with web beacons or other tracking technologies, to collect information about you when you use our Websites. The information they collect may be associated with your Personal Data or they may collect information, including Personal Data, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.
We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. You can learn more about interest-based advertisements and your opt-out rights and options from members of the Network Advertising Initiative ("NAI") on its website (www.networkadvertising.org) and from members of the Digital Advertising Alliance on its website (www.aboutads.info).
We may also create certain information about you when you use our Websites. When we associate this information with other Personal Data about you, we consider this information to be Personal Data. This information includes your username and password used to access our Websites, postal address, email address, telephone number, purchasing history, profile preferences, and VIN records.
We may collect Personal Data from third parties, such as our B2B credit management platform, payment gateway provider, and travel agencies partners. When we associate this information with other Personal Data about you, we consider this information to be Personal Data. This information may include name, date of birth, postal address, email address, telephone number, account name, passport number, travel arrangement information, and signature (physical or electronic). In addition, we may also collect other types of information that you may provide to these third parties when you fill out a form or application on their websites or via webpages expressly governed by their privacy policies.
We do not sell, share, or disclose your Personal Data for purposes other than those outlined in this Privacy Notice, including any applicable jurisdiction-specific addendum appended to this Privacy Notice. However, we may disclose aggregated information about our users, and information that does not identify any individual, without restriction.
We may disclose Personal Data that we collect or you provide as described in this Privacy Notice:We do not control the collection and use of your information collected by third parties described above in Disclosure of Your Information. These third parties may also aggregate the information they collect with information from their other customers for their own purposes.
In addition, we strive to provide you with choices regarding the Personal Data you provide to us and have created mechanisms to provide you with control over your Personal Data:In addition to the choices made available to you with regard to the Personal Data that you provide to us, you may also contact us at the Contact Information below to request access to or correct any Personal Data that we have collected about you. You may also notify us of errors or changes in any Personal Data we have about you to ensure that it is complete, accurate, and as current as possible. We may not be able to accommodate your request if we believe it would violate any law or legal requirement or cause the information to be incorrect.
The law in some jurisdictions may provide you with additional rights regarding our use of Personal Data. To learn more about any additional rights that may be applicable to you as a resident of one of these jurisdictions, please see the privacy addendum for your jurisdiction that is attached to this Privacy Notice.
Some web browsers permit you to broadcast a signal to websites and online services indicating a preference that they “do not track” your online activities. However, there is no accepted standard for how a website or online service should respond to this signal and, at this time, we do not take any action in response to such a signal.
We have implemented measures designed to secure your Personal Data from accidental loss and from unauthorized access, use, alteration, and disclosure. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Data, we cannot guarantee the security of your Personal Data transmitted to our Websites. Any transmission of Personal Data is at your own risk. We are not responsible for circumvention of any privacy settings or security measures deployed on the Websites.
Our Websites are not intended for children under 18 years of age. We do not knowingly collect Personal Data from children under 18. If you are under 18, do not use or provide any information on our Websites including, but not limited to, your name, address, telephone number, email address, or any screen name or username you may use. If we learn we have collected or received Personal Data from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information directly from a child under 18, please contact us at [email protected].
We may change this Privacy Notice at any time. It is our policy to post any changes we make to our Privacy Notice on this page. If we make material changes to how we treat our users’ Personal Data, we will notify you through a notice on the home pages of our Websites or using a similar method. The date this Privacy Notice was last revised is identified at the top of the page. You are responsible for periodically visiting our Websites and this Privacy Notice to check for any changes.
If you have any questions, concerns, complaints, or suggestions regarding our Privacy Notice or the ways in which we collect and use your Personal Data described in this Privacy Notice, have any requests related to your Personal Data pursuant to applicable laws, or otherwise need to contact us, you may contact us at the contact information below or through the “Contact” page on our Websites.
Parts Authority, LLC
3 Dakota Drive, Suite 110
New Hyde Park, New York 11042
[email protected]
Last Updated: March 22, 2024
This Privacy Notice Addendum for California Residents (the “California Privacy Addendum”) supplements the information contained in Parts Authority’s Privacy Notice and applies solely to all visitors, users, customers, and others who reside in the State of California (“consumers” or “you”). We adopt this notice to comply with the California consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (collectively, the “CPRA”) and any terms defined in the CPRA have the same meaning when used in this notice.
This California Privacy Addendum applies to information that we collect on our Websites that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household (“Personal Information”). However, publicly available information that we collect from government records and deidentified or aggregated information (when deidentified or aggregated as described in the CPRA) are not considered Personal Information and this California Privacy Addendum does not apply to such information.
This California Privacy Notice does not apply to employment-related personal information collected from our California-based employees, job applicants, independent contractors, or similar individuals (collectively, “Personnel”). Please contact us at the Contact Information below or your local human resources department if you are part of our California Personnel and would like additional information about how we process your Personal Information.
This California Privacy Addendum also does not apply to certain Personal Information that is excluded from the scope of the CPRA including, but not limited to Personal Information covered by certain sector-specific privacy laws, such as the Fair Credit Reporting Act.
Our Websites collect, and over the prior twelve (12) months have collected, the following categories of Personal Information about consumers:
| Category | Applicable Pieces of Personal Information Collected |
|---|---|
| Identifiers | A name; postal address; email address; telephone number; online identifier; IP address; account name; account number; passport number; and other similar identifiers. |
| Personal information in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) | A name; signature; postal address; passport number; and telephone number. *NOTE: Some Personal Information included in this category may overlap with other categories. |
| Protected classification characteristics under California or federal law. | Age (40 years or older) |
| Internet or other electronic network activity (“Internet or Network Activity”) information | Browsing history; search history; and information on a consumer’s interaction with a website, application, or advertisement. |
| Geolocation data | Physical location or movements. We only collect IP-based geolocation data, which may be used to locate the city and state that you are in when you access our network. This information cannot be used to precisely locate you. |
| Sensitive Personal Information (“Sensitive Personal Information”) | Government identifiers (passport number, if provided for special promotions offered by us) |
We will not collect additional categories of Personal Information without providing you notice. As further described below, we may “sell” for valuable, non-monetary consideration and/or “share” for cross-context behavioral advertising purposes the following categories of your Personal Information to internet cookie recipients (e.g., analytics companies): Identifiers and Internet or Network Activity information (for more details, see “Sale of Your Personal Information” and “Sharing of Your Personal Information,” below).
We collect Personal Information about you from the same sources described in our Privacy Notice.
In the preceding twelve (12) months, we have only used your Personal Information for the purposes described in our Privacy Notice. We will not use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
As noted in our Privacy Notice, we do not sell Personal Information as the term “sell” is commonly understood to require an exchange for money. However, the (i) use of advertising and analytics cookies on our Websites, and (ii) disclosure of your limited contact details to our supplier in exchange for receiving year-end rebates are considered a “sale” of Personal Information as the term “sale” is broadly defined in the CPRA to include both monetary and other valuable consideration. Using this broad definition, our “sale” is limited to (i) our use of third-party analytics cookies and their use in understanding how people use and interact with our Websites, and (ii) our disclosure of your limited contact details to our supplier in exchange for year-end rebates. Our “sales” of your Personal Information in this matter is subject to your right to opt-out of those sales (see Your Choices Regarding our “Sale” or “Sharing” of your Personal Information).
In the preceding twelve (12) months, we have “sold” (i) Identifiers, Internet or Network Activity information, and Geolocation data to internet cookie recipients, and (ii) Identifiers and personal information described in the California Customer Records statute to our supplier. However, we do not have actual knowledge that we “sell” the Personal Information of consumers under the age of sixteen (16) for monetary or other valuable consideration.
We may “share” your Personal Information for the purpose of cross-context behavioral advertising, subject to your right to opt-out of that sharing (see Your Choices Regarding our “Sale” or “Sharing” of your Personal Information). Our “sharing” for the purpose of cross-context behavioral advertising would be limited to our use of third-party advertising cookies and their use in providing you cross-context behavioral advertising (i.e., advertising on other websites or in other mediums). When the recipients of your Personal Information disclosed for the purpose of cross-context behavioral advertising are also permitted to use your Personal Information to provide advertising to others, we also consider this disclosure as a “sale” for monetary or other valuable consideration under the CPRA.
In the preceding twelve (12) months, we have “shared” Identifiers, Internet or Network Activity information, and Geolocation data to internet cookie recipients for the purpose of cross-context behavioral advertising, but do not have actual knowledge that we “share” the Personal Information of consumers under the age of sixteen (16) for such purpose.
The CPRA provides consumers with specific rights regarding their Personal Information. This section describes your CPRA rights and explains how to exercise those rights. You may exercise these rights yourself or through your Authorized Agent (as defined below). For more information on how you or your Authorized Agent can exercise your rights, please see Exercising Your CPRA Privacy Rights.
Sale/Sharing: For instructions on exercising sale and sharing opt-out rights (as applicable), please see Your Choices Regarding our “Sale” or “Sharing” of Your Personal Information.
All Other CPRA Rights: To exercise any of your other rights described above, please submit a request (a “Consumer Request”) to us by either:
If you fail to make your Consumer Request in accordance with the ways described above, we may either treat your request as if it had been submitted with our methods described above or provide you with information on how to submit the request or remedy any deficiencies with your request.
Only you, or someone that you have authorized to act on your behalf (an “Authorized Agent”), may make a Consumer Request related to your Personal Information. You may also make a Consumer Request on behalf of your minor child.
All Consumer Requests must:We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm which Personal Information relates to you or the individual for whom you are making the request as their Authorized Agent.
Making a Consumer Request does not require you to create an account with us. We will only use Personal Information provided in a Consumer Request to verify the requestor’s identity or authority to make the request.
If you are sixteen (16) years of age or older, you have the right to direct us to not sell your Personal Information for monetary or other valuable consideration at any time (the “right to opt-out”). We do not sell the Personal Information of consumers we actually know are less than sixteen (16) years of age, unless we receive affirmative authorization (the “right to opt-in”) from either the consumer who is between thirteen (13) and sixteen (16) years of age, or the parent or guardian of a consumer less than thirteen (13) years of age. As noted in our Privacy Notice, however, we do not knowingly collect Personal Information from any consumer under eighteen (18) years of age. Consumers who opt-in to Personal Information sales may opt-out of future sales at any time.
If you are sixteen (16) years of age or older, you have the right to direct us to not share your Personal Information for the purposes of cross-context behavioral advertising, which is showing advertising on other websites or other media based on your browsing history with our Websites (the “right to opt-out”). We do not share the Personal Information of consumers we actually know are less than sixteen (16) years of age for this purpose, unless we receive affirmative authorization from either the consumer who is between thirteen (13) and sixteen (16) years of age, or the parent or guardian of a consumer less than thirteen (13) years of age. As noted in our Privacy Notice, however, we do not knowingly collect Personal Information from any consumer under eighteen (18) years of age. Consumers who opt-in to our sharing of Personal Information for these purposes may opt-out of future such sharing at any time.
To exercise the right to opt-out of our “sale” of your Personal Information, you (or your Authorized Agent) may submit a request to us by visiting the “Do Not Sell or Share My Personal Information” link in the footer of our Websites or emailing us at [email protected].
In addition, you can also exercise your right to opt-out of the “sale” of your Personal Information by:When we receive one of these privacy control signals, we will opt you out of any further “sale” of your Personal Information when you interact with our Websites through that browser and on that device. However, you may change your mind and opt back into the sale of personal information at any time by adjusting your cookie preferences to accept all or certain cookies.
In the event you have affirmatively opted-in to our “sale” of your Personal Information as described below and we receive a privacy control signal from your browser, we will request further instructions from you before you are opted out of any further “sale.”
Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorize our “sale” of your Personal Information. (Each browser is different, so check the “Help” menu of your browser to learn how to change your cookie preferences.)
If you (or your Authorized Agent) submit a request to opt-in to our “sale” of your Personal Information, we will use a two-step process in order to confirm that you want to opt-in for such “sale” of your Personal Information. This process may include: (i) verifying your request through your email address on record; (ii) calling you on your phone number on record (which may be through the use of an automated dialer); (iii) sending you a text message and requesting that you text us a confirmation (which may be through the use of an automated dialer); and/or (iv) sending you a confirmation through US mail. By making such an opt-in request, you consent to us contacting you in one or more of these ways.
Your Personal Information will be deleted when we no longer require your Personal Information for any of the above purposes.
Parts Authority reserves the right to amend this California Privacy Addendum at its discretion and at any time. When we make changes to this California Privacy Addendum, we will post the updated addendum on the Websites and update the addendum’s effective date. Your continued use of one or more our Websites following the posting of changes constitutes your acceptance of such changes.
If you have any questions or comments about this California Privacy Addendum, the ways in which Parts Authority collects and uses your information described above and in our Privacy Notice, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
Parts Authority, LLC
3 Dakota Drive, Suite 110
New Hyde Park, New York 11042
[email protected]