Effective date: June 5, 2026
North York Auto Body Parts ("we", "us", "our") operates this website and sells aftermarket auto body parts from 177 Limestone Crescent, North York, ON M3J 2R1. This policy explains what personal information we collect, why, how we use and protect it, and the rights you have under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). By using this site or placing an order with us you agree to the practices described below.
1. Information we collect
We only collect information that is necessary to operate our store and fulfill your order.
- Information you provide directly — your name, billing and shipping address, email address, phone number, vehicle year/make/model and (for painted parts) factory paint code, and any messages you send us through the contact form, email, or phone.
- Order and payment information — the items you purchase, order totals, and a transaction reference returned by our payment processor. We do not see or store your full credit card number, CVV, or bank account details. Card data is collected directly by Stripe Inc. on our behalf under their own privacy policy.
- Information collected automatically — standard server logs (IP address, browser type, pages requested, timestamps) and limited analytics about how the site is used. Your shopping cart is stored in your own browser's local storage and is not transmitted to us until you check out.
2. How we use your information
- To process, package, and ship your orders, and to communicate with you about them (order confirmations, shipping notifications, fitment questions, returns).
- To answer enquiries you send us and provide customer support.
- To detect, prevent, and investigate fraudulent transactions, chargebacks, or abuse of the website.
- To comply with our legal obligations, including tax records, warranty and consumer-protection laws, and lawful requests from regulators or law enforcement.
- To improve the site, our product range, and the accuracy of fitment data.
We do not use your personal information for any purpose unrelated to the ones listed above without first obtaining your consent.
3. Who we share information with
We do not sell, rent, or trade your personal information. We share it only with the following categories of third parties, and only to the extent reasonably necessary:
- Payment processing — Stripe, Inc. processes card payments. They receive the information necessary to authorize and settle the transaction.
- Shipping carriers — Canada Post, Purolator, UPS, FedEx and similar carriers receive your name, shipping address, and phone number to deliver your order.
- Suppliers and dropship partners — for items shipped directly from a supplier's warehouse, your shipping address and order details are sent to that supplier solely to fulfill the order.
- Service providers — hosting, email, and analytics providers that operate the website on our behalf, under contractual confidentiality obligations.
- Legal and safety — courts, regulators, or law enforcement when we are required by law, or where disclosure is necessary to protect our rights, property, or safety, or that of our customers or others.
- Business transfers — if we sell or transfer all or part of the business, customer information may be transferred as part of that transaction, subject to equivalent privacy protections.
4. Cookies and similar technologies
We use a small number of cookies and your browser's local storage to make the site work:
- Strictly necessary — the shopping cart and session preferences are stored in your browser's local storage. Without these, the cart will not function.
- Analytics — we may use aggregated, non-identifying analytics to understand traffic patterns. Where required, we will ask for your consent before setting non-essential cookies.
You can disable or delete cookies at any time through your browser settings; doing so may break parts of the checkout flow.
5. How we protect your information
We use industry-standard safeguards proportionate to the sensitivity of the data we hold: HTTPS/TLS encryption in transit, restricted access to order data, and PCI-DSS-compliant payment processing through Stripe. No internet transmission or storage system is perfectly secure; we cannot guarantee absolute security, but if we become aware of a breach affecting your information we will notify you and the Office of the Privacy Commissioner of Canada in accordance with PIPEDA's breach-notification requirements.
6. How long we keep your information
We keep your order and customer information for as long as needed to provide the services, support warranty and return requests, resolve disputes, and meet our tax, accounting, and other legal obligations (typically seven years for transaction records under Canadian tax law). Information we no longer need is securely deleted or anonymized.
7. Your privacy rights
Under PIPEDA and applicable provincial law you have the right to:
- Know what personal information we hold about you and how it is used and disclosed.
- Request access to, or a correction of, your personal information.
- Withdraw consent for non-essential uses of your information (subject to legal and contractual restrictions — for example, we still need to retain records of completed orders).
- Lodge a complaint with us using the contact details below. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
8. Children
This site is intended for use by adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
9. International transfers
Some of our service providers (such as Stripe and analytics vendors) may store or process data outside Canada, including in the United States. When this happens, your information may be subject to the laws of those jurisdictions, including lawful access by foreign authorities. We use contractual and technical safeguards to protect information transferred internationally.
10. Changes to this policy
We may update this policy from time to time to reflect changes in our practices, the services we offer, or applicable law. The "Effective date" above will be updated when we do. Significant changes will be highlighted on the site.
11. Contact us
If you have any questions, concerns, or requests about your privacy, our Privacy Officer can be reached at:
North York Auto Body Parts — Privacy Officer
177 Limestone Crescent
North York, ON M3J 2R1
Phone: (647) 806-1206
Web: Contact form
This policy is provided as a starting point and should be reviewed by qualified Ontario legal counsel before the store goes live. It is not legal advice.