Privacy policy

Last updated: 22 July 2026

This Privacy Policy explains how SIA “STARS MB” collects, uses, stores and protects personal data when you visit or make a purchase through tcarparts.eu.

We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, or “GDPR”), the applicable laws of the Republic of Latvia and other applicable European Union data protection and electronic communications legislation.

1. Data controller

The controller responsible for the processing of your personal data is:

SIA “STARS MB”
Jurkalnes iela 44
LV-1029 Riga
Latvia

Email: info@tcarparts.eu
Telephone: +371 2640 4545
Website: https://tcarparts.eu/

Questions and requests concerning personal data may be sent to info@tcarparts.eu.

2. Scope of this Privacy Policy

This Privacy Policy applies when you:

  • visit or browse our website;
  • create or use a customer account;
  • place an order as a registered customer or guest;
  • request information about products or compatibility;
  • contact us by email, telephone, contact form, WhatsApp, Telegram or another communication channel;
  • subscribe to our newsletter;
  • request a return, refund, warranty service or other customer support.

3. Personal data we may collect

3.1 Identification and contact information

  • first name and surname;
  • title or form of address;
  • email address;
  • telephone number;
  • billing and delivery address;
  • country of residence or delivery;
  • date of birth, where voluntarily provided through the customer account form.

3.2 Business customer information

  • company name;
  • company address;
  • VAT identification number;
  • company registration or invoicing details;
  • name and contact details of the company representative.

3.3 Account and authentication information

  • customer account identifier;
  • account creation and login information;
  • encrypted or hashed password information;
  • language and communication preferences;
  • information received from an external authentication provider when you choose to sign in using that provider.

When you use Google Sign-In, Google may provide us with information such as your name, email address and account identifier in accordance with the permissions displayed to you during authentication.

3.4 Order and transaction information

  • products viewed, added to the cart or purchased;
  • order number, order date and order status;
  • product quantities, prices, discounts, taxes and delivery costs;
  • selected payment and delivery method;
  • payment status and payment transaction reference;
  • invoice, credit note, return and refund information;
  • communications relating to an order, delivery, return, complaint or warranty request.

3.5 Vehicle and compatibility information

When you ask us to verify whether a part is compatible with your vehicle, we may process information such as:

  • vehicle make, model and year;
  • vehicle identification number (VIN);
  • part or catalogue number;
  • photographs and technical information provided by you.

3.6 Payment information

When you make an online payment, the payment is processed through the selected payment service provider. We may receive the payment status, transaction identifier, payment method, currency and amount.

Complete payment card details, including the full card number and security code, are entered in the secure environment of the payment service provider and are not stored by us in full.

3.7 Communications

We may store messages and information that you send through email, contact forms, telephone calls, WhatsApp, Telegram or other communication channels, including attachments and order-related correspondence.

3.8 Technical and usage information

  • IP address;
  • browser type and version;
  • device type and operating system;
  • language, country and time zone settings;
  • pages visited and actions performed on the website;
  • date and time of access;
  • referring website or traffic source;
  • system, security and error logs;
  • cookie identifiers and similar technical information.

3.9 Marketing preferences

Where you subscribe to our newsletter, we process your email address, subscription status, language and information concerning your consent or withdrawal of consent.

4. How we obtain personal data

We may obtain personal data:

  • directly from you when you create an account, place an order or contact us;
  • automatically when you use the website;
  • from payment service providers in connection with a payment;
  • from delivery and postal service providers in connection with a shipment;
  • from external authentication providers when you choose to use their sign-in service;
  • from public registers or VAT verification systems where verification is necessary;
  • from another person or company placing an order on your behalf.

5. Purposes and legal bases for processing

5.1 Processing and fulfilling orders

We process identification, contact, order, payment and delivery data to accept an order, receive payment, issue an invoice, deliver the products and provide customer support.

The legal basis is the performance of a contract or taking steps at your request before entering into a contract.

5.2 Customer account administration

We process account and authentication information to create and maintain your account, save addresses, display order history and provide account-related functions.

The legal basis is the performance of a contract and our legitimate interest in providing a convenient customer service.

5.3 Payment processing and fraud prevention

We process transaction and technical information to receive and confirm payments, prevent fraudulent transactions, protect the website and resolve payment disputes.

The legal basis is the performance of a contract, compliance with legal obligations and our legitimate interest in protecting our customers and business against fraud and misuse.

5.4 Delivery of products

We process the recipient’s name, telephone number, email address, delivery address and shipment information to arrange and complete delivery.

The legal basis is the performance of a contract.

5.5 Accounting, taxation and legal compliance

We process order, invoice, payment and customer information where required for accounting, taxation, consumer protection, sanctions compliance and other legal obligations.

The legal basis is compliance with applicable legal obligations.

5.6 Customer support, returns and warranty requests

We process order information and communications to answer questions, verify product compatibility, handle returns, refunds, complaints and warranty claims, and resolve disputes.

The legal basis is the performance of a contract, compliance with legal obligations and our legitimate interest in handling and documenting customer requests.

5.7 Website security and technical operation

We process technical information, system logs and security events to maintain the website, detect errors, prevent unauthorised access, spam, fraud and other misuse.

Security services such as Google reCAPTCHA may be used to protect forms, account registration and checkout against automated abuse.

The legal basis is our legitimate interest in maintaining a secure and reliable online store.

5.8 Analytics and website improvement

Where you have provided the required consent, we may use analytics technologies such as Google Analytics to understand how visitors use the website and to improve its content, performance and usability.

The legal basis for non-essential analytics cookies is your consent.

5.9 Newsletter and marketing communications

We send newsletters or other promotional communications only where you have subscribed or where another lawful basis is available under applicable legislation.

You may unsubscribe at any time by using the unsubscribe link in the message or by contacting us at info@tcarparts.eu.

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

6. Payment service providers

Payments may be processed by external banks and payment service providers, including Paysera where this payment method is available. The payment provider processes payment information in accordance with its own legal obligations and privacy policy.

Paysera’s current privacy information is available at: Paysera Privacy Policy.

We do not control all processing carried out independently by a bank, card scheme or payment service provider.

7. Cookies and similar technologies

Our website uses cookies and similar technologies. A cookie is a small data file stored on your device when you visit a website.

The website may use the following categories of cookies:

  • Strictly necessary cookies required for the shopping cart, checkout, account login, security, language selection and other essential website functions.
  • Preference cookies used to remember choices such as language, currency and display settings.
  • Analytics cookies used to measure website usage and improve performance.
  • Marketing or third-party cookies used only where such services are enabled and the required consent has been obtained.

Non-essential cookies are used only after you provide consent through the cookie banner or cookie settings interface. You can withdraw or change your consent through the cookie settings available on the website.

You may also delete or block cookies through your browser settings. Blocking strictly necessary cookies may prevent the shopping cart, checkout, login or other parts of the website from functioning correctly.

8. Google services

Depending on the functions you use and your cookie preferences, the website may use Google services including Google Sign-In, Google reCAPTCHA and Google Analytics.

Google may process technical information such as your IP address, device information, browser data and interactions with the relevant service.

Further information is available in the Google Privacy Policy.

9. Recipients of personal data

Personal data may be disclosed only where necessary to the following categories of recipients:

  • payment service providers, banks and card-processing organisations;
  • courier, postal, freight and delivery service providers;
  • hosting, server administration, email and other IT service providers;
  • website maintenance and technical support providers;
  • accounting, auditing, legal and tax advisers;
  • analytics, authentication and security service providers;
  • insurance providers where required for a shipment or claim;
  • public authorities, courts and law-enforcement bodies where disclosure is required by law;
  • other persons where you have expressly requested or authorised the disclosure.

Delivery providers receive only the information reasonably necessary to deliver and track the shipment.

We do not sell or rent personal data to third parties.

10. Transfers outside the European Economic Area

Some external service providers may process personal data outside the European Union or European Economic Area.

Where such a transfer takes place, we use an applicable legal safeguard, such as:

  • an adequacy decision adopted by the European Commission;
  • standard contractual clauses approved by the European Commission;
  • another transfer mechanism permitted by applicable data protection legislation.

11. How long we retain personal data

We retain personal data only for as long as necessary for the purpose for which it was collected and to comply with legal obligations.

  • Customer account information is retained while the account remains active and afterwards where necessary to comply with legal obligations, resolve disputes or establish legal claims.
  • Orders, invoices, payment records and accounting documents are retained for the period required by applicable accounting, tax and commercial legislation.
  • Delivery information is retained for as long as necessary to complete delivery and handle related claims.
  • Customer communications are retained until the request has been resolved and afterwards where reasonably necessary for complaint, warranty or legal claim management.
  • Newsletter information is retained until you unsubscribe or withdraw consent. Limited information may be retained afterwards to ensure that no further marketing messages are sent.
  • Security and technical logs are retained for the shortest period reasonably necessary for security, fraud prevention, troubleshooting and incident investigation.
  • Cookie retention periods depend on the type of cookie and are shown, where available, in the website’s cookie settings.

When personal data are no longer required, they are deleted, anonymised or securely restricted from further use unless continued retention is required by law.

12. Security of personal data

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include:

  • encrypted HTTPS connections;
  • access restrictions and authentication controls;
  • password hashing and secure account management;
  • server, application and network security measures;
  • security logging, backups and software updates;
  • limiting access to personnel and service providers who require it for their duties.

No method of transmission or electronic storage can provide absolute security. Customers are responsible for keeping their account password confidential and for informing us if they suspect unauthorised account access.

13. Your data protection rights

Subject to the conditions and limitations established by applicable law, you may have the right to:

  • request confirmation of whether we process your personal data;
  • request access to your personal data;
  • request correction of inaccurate or incomplete personal data;
  • request deletion of personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • receive personal data in a structured, commonly used and machine-readable format;
  • request transmission of eligible data to another controller;
  • withdraw consent at any time where processing is based on consent;
  • submit a complaint to a competent data protection supervisory authority.

These rights are not absolute. We may be required or permitted to retain certain information, for example where it is needed for accounting, taxation, fraud prevention, dispute resolution or the establishment, exercise or defence of legal claims.

To exercise your rights, contact us at info@tcarparts.eu. Please describe your request and provide sufficient information for us to identify the relevant data. We may request additional information where reasonably necessary to confirm your identity.

14. Required information

Some personal data are required to create an account, process an order, issue an invoice, receive payment or deliver products. Required fields are normally marked in the relevant form.

If you do not provide required information, we may be unable to create an account, accept an order, process a payment, arrange delivery or provide the requested service.

15. Automated decision-making

We do not use personal data to make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.

Payment and security providers may carry out automated fraud or risk assessments under their own legal responsibilities and privacy policies.

16. Third-party websites and communication services

Our website may contain links to external websites or allow communication through third-party services such as WhatsApp, Telegram, Google or payment providers.

Those services process personal data in accordance with their own privacy policies. We recommend reviewing the relevant third-party privacy information before using those services.

17. Changes to this Privacy Policy

We may update this Privacy Policy when our services, data processing activities or applicable legal requirements change.

The current version will be published on this page. The date of the latest update is displayed at the beginning of the document.

18. Complaints

If you have concerns about how we process your personal data, you may contact us at info@tcarparts.eu so that we can review and address the matter.

You also have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the European Union Member State of your habitual residence, place of work or place of the alleged infringement.

In Latvia, the competent supervisory authority is the Data State Inspectorate.