Privacy Policy

By using the Platform, you consent to the practices described here. If you do not agree, please do not use the Platform.

1. Information we collect

a. Information you provide

• Account & contact data: name, email address, mobile number, and login credentials (we use one-time passwords / OTP for sign-in).
• Business & profile data: company name, role, address, and — for vendors — inventory and catalogue details.
• Order & vehicle data: the parts you request, vehicle details (make, model, trim, and, where you choose to provide it, the VIN) needed to identify the correct part.
• Payment data: payments are processed by third-party payment gateways. We do not store your full card number, CVV or bank credentials; we retain transaction references, amounts and status.
• Communications: messages, support requests, and feedback you send us or exchange through in-platform chat.

b. Information collected automatically

• Device & usage data: IP address, browser and device type, operating system, pages viewed, and timestamps.
• Cookies & similar technologies: used to keep you signed in, remember preferences, and measure and improve the Platform. You can control cookies through your browser settings.

2. How we use your information

• To create and manage your account and authenticate you.
• To operate the core flow — process requests, generate quotes, take orders, process payments, and fulfil and track deliveries.
• To provide customer support and respond to your enquiries.
• To detect, prevent and address fraud, abuse, and security issues.
• To send service and transactional communications (e.g. OTPs, order updates). With your consent, we may also send product updates.
• To comply with legal obligations and enforce our Terms of Service.

3. How we share information

We do not sell your personal information. We share it only as needed:

• Vendors & fulfilment partners: to source and deliver your order. To protect our customers, end-customer identity is kept anonymised from vendors where feasible — to a vendor, the buyer is "Sparelab".
• Payment gateways: to process payments securely.
• Service providers: hosting, email/SMS delivery, analytics and support tooling, bound by confidentiality obligations.
• Legal & safety: where required by law, regulation, legal process, or to protect rights, property and safety.
• Business transfers: in connection with a merger, acquisition or sale of assets, subject to this Policy.

4. Data retention

We retain personal information for as long as your account is active and as needed to provide the Platform, and thereafter as required to comply with legal, tax and accounting obligations, resolve disputes, and enforce our agreements.

5. Data security

We use reasonable technical and organisational safeguards — encryption in transit, access controls, and secure infrastructure — to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your rights & choices

• Access, correct or update your account information.
• Request deletion of your account and associated personal data, subject to legal retention requirements.
• Opt out of non-essential marketing communications at any time.
• Manage cookies through your browser.

To exercise any right, contact us at abhishek.br@sparelab.co.in.

7. Children's privacy

The Platform is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

8. Third-party links

The Platform may link to third-party sites and services that operate under their own privacy policies. We are not responsible for their practices.

9. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted here with a revised "Last updated" date. Continued use of the Platform after changes take effect constitutes acceptance.

10. Contact & grievance officer

For any privacy question or complaint, contact our Grievance Officer at abhishek.br@sparelab.co.in, or by post at [Registered office address], Bengaluru, Karnataka 560001, India. We respond in accordance with the Information Technology Act, 2000 and applicable rules.