VilasParts respects your privacy. This Privacy Policy explains what personal data we collect, why we use it, who may receive it and what rights you have.
Last updated: 2026-07-24
Privacy at a Glance
The key points in simple language
Detailed Privacy Policy
Full information about personal data processing
1. Data Controller
The controller responsible for personal data processed through VilasParts.com is:
MB Vilaspo, trading as VilasParts
Company registration number: 307132370
VAT number: LT100019233813
Registered address: Gedimino g. 22A-14, LT-44319 Kaunas, Lithuania
Privacy contact email: info@vilasparts.com
2. Scope of This Policy
This policy applies when you visit VilasParts.com, create an account, place an order, contact us, communicate through WhatsApp or email, submit a form, request support, make a return or otherwise interact with our online store.
3. Personal Data We Collect
Depending on how you use the website, we may process:
- identity data, such as your name;
- contact data, such as email address, telephone number and billing or delivery address;
- order and transaction data, including products, prices, payment status, invoices, returns and correspondence;
- vehicle and compatibility data voluntarily supplied by you, including VIN, model, year, equipment details, part numbers and photographs;
- account data, such as username, account preferences and order history;
- communication data from email, contact forms, WhatsApp or customer-support messages;
- technical data, such as IP address, browser type, device information, operating system, referral page and security logs;
- usage data, such as pages viewed, interactions and website performance information;
- cookie and consent preferences;
- marketing preferences, where marketing communications are offered.
4. Data We Do Not Intentionally Collect
We do not intentionally request special-category personal data such as health information, political opinions, religious beliefs or biometric data. Please do not send such information unless it is strictly necessary and legally appropriate.
5. Sources of Personal Data
Most personal data is obtained directly from you. We may also receive limited information from payment providers, delivery carriers, marketplaces, fraud-prevention providers, website analytics tools or publicly available sources where permitted by law.
6. Purposes and Legal Bases
| Purpose | Typical data | Legal basis |
|---|---|---|
| Process and deliver orders | Identity, contact, order and transaction data | Performance of a contract |
| Provide support and compatibility assistance | Contact, communication and vehicle data | Contract steps and legitimate interests |
| Accounting, tax and legal compliance | Order, invoice and transaction data | Legal obligation |
| Fraud prevention and website security | Transaction, technical and security data | Legitimate interests and legal obligations |
| Improve the website and services | Usage, technical and feedback data | Consent where required, otherwise legitimate interests |
| Send optional marketing | Contact details and preferences | Consent or another lawful basis where permitted |
7. Payment Data
Payments may be processed by external payment providers. We generally do not receive or store complete card numbers or card security codes. Payment providers process payment data under their own privacy notices and security standards.
8. Cookies and Similar Technologies
The website may use essential cookies required for shopping-cart, checkout, account, security and preference functions. With your consent where required, it may also use analytics, performance, functionality or advertising cookies.
You can manage non-essential cookie preferences through the cookie-consent tool displayed on the website. Disabling certain cookies may affect website functionality. A separate Cookie Policy may provide additional details if implemented.
9. Who May Receive Personal Data
Personal data may be disclosed only where necessary to:
- payment processors and banks;
- delivery carriers, postal operators, customs brokers and fulfilment partners;
- website hosting, ecommerce, security, backup and technical-support providers;
- email, form, messaging and customer-support providers;
- accountants, auditors, legal advisers and insurers;
- analytics or marketing providers where lawfully enabled;
- public authorities, courts, tax authorities, customs or law-enforcement bodies where legally required;
- a buyer, investor or adviser in connection with a lawful business transfer, subject to appropriate safeguards.
10. International Data Transfers
Some service providers may process personal data outside Lithuania or outside the European Economic Area. Where required, such transfers are based on an adequacy decision, standard contractual clauses or another lawful transfer mechanism, together with appropriate safeguards.
11. Data Retention
Personal data is retained only for as long as necessary for the purposes described in this policy and to comply with legal, accounting, tax, warranty, dispute and fraud-prevention requirements.
- order, invoice and accounting records: for the period required by applicable law;
- customer-support and contractual correspondence: for the duration needed to manage the request and potential legal claims;
- account information: until the account is deleted, subject to records that must be retained;
- technical and security logs: for a limited period appropriate to security and troubleshooting;
- marketing data: until consent is withdrawn or the data is no longer required;
- cookie preferences: for the period specified by the relevant consent tool or cookie.
12. Data Security
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. No internet transmission or storage method can be guaranteed to be completely secure.
13. Your Data Protection Rights
Subject to the conditions of applicable law, you may have the right to:
- receive information about how your personal data is processed;
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of personal data;
- request restriction of processing;
- receive certain data in a portable, machine-readable format;
- object to processing based on legitimate interests;
- object at any time to direct marketing;
- withdraw consent at any time without affecting prior lawful processing;
- not be subject to certain solely automated decisions with legal or similarly significant effects.
14. Exercising Your Rights
To exercise a data-protection right, contact us at info@vilasparts.com. We may request reasonable information to verify your identity. Requests are handled within the time limits required by applicable law.
15. Complaints
You may lodge a complaint with the Lithuanian State Data Protection Inspectorate or another competent supervisory authority, particularly in the EU country of your habitual residence, place of work or place of the alleged infringement. We encourage you to contact us first so we can attempt to resolve the issue.
16. Children’s Privacy
The website is not intended for children and we do not knowingly collect personal data from children for ecommerce purposes. Orders should be placed only by persons legally capable of entering into a purchase contract.
17. External Links and Third-Party Services
The website may contain links or integrations operated by third parties, including payment, messaging, social media, review and delivery services. Their processing is governed by their own privacy policies, and we are not responsible for their independent practices.
18. Automated Decision-Making
We do not normally make decisions producing legal or similarly significant effects based solely on automated processing. Payment or fraud-prevention providers may use automated checks under their own policies.
19. Changes to This Privacy Policy
We may update this policy to reflect changes in our services, providers or legal obligations. The current version and date of the latest update will be published on this page.