Updated March 26, 2026

CarParts.com, Inc. ("we," "us," or "our") is committed to safeguarding the privacy of visitors to our website using generally accepted industry data protection standards. We appreciate that you may have questions about our privacy policy (“Privacy Policy”). The following provides information on how we collect, use, share, and otherwise process your personal information during your visit to www.CarParts.com, as well as the rights that you have in relation to our processing of that information. In this Privacy Policy, "personal information" generally means information that enables you, directly or indirectly, to be identified. This Privacy Policy applies to all business units and subsidiaries.

YOUR USE OF THIS WEBSITE AND MOBILE APPS CONSTITUTES YOUR ACKNOWLEDGEMENT OF THE CONTENTS OF THIS PRIVACY POLICY AND ACCEPTANCE OF OUR WEBSITE TERMS AND CONDITIONS WHICH ARE AVAILABLE HERE.

If you have any comments or questions in connection with this Privacy Policy, or wish to have further information on our processing activities and your rights in relation to your personal information, please contact us via email at DataProtection@carparts.com or by mail to Data Protection, CarParts.com, Inc., 4900 Airport Plaza Dr., Suite 300, Long Beach, CA 90815. You may also call us toll-free at (866) 230-4653.

• Information Collection
• Information Usage
• Information Sharing
• Third Parties; Social Media
• Cookies and Data Collection Tools
• Do Not Track
• Information Retention
• Security
• Children
• Notification of Changes
• Your Privacy Choices (General)
• Your Privacy Rights (Applicable States)
• Notice at Collection

Information Collection

We may collect the following categories of personal information from you in the course of business, including through your use of our website, when you place orders, or when you contact or request information from us:

• Identifiers such as name, title, job title, or address.
• Contact information, including your phone number(s), your email address and social media account or handle where appropriate.
• Account usernames and password, should you set up an account with us.
• Information or inferences about your preferences and interests.
• Commercial information, including a list of the products you've considered, cancelled, purchased or returned.
• Cookie and device data, such as information about your visit to our website, IP address, device model and identifier, browser type and version, operating system and network, geo-location, and time zone setting, date and time spent on our website, referring website, pages accessed, search terms, and other actions taken on or usage details of our site.
• If you sign up for our text messaging program, cookies may be used to personalize your experience (e.g. send you personalized text messages such as shopping cart reminders).
• We also use third-party session replay services that record user interactions with our website. The tools use cookies and similar technologies to collect and analyze information related to user behavior on our site, such as mouse movements, clicks, user inputs, scrolling, access times, visit duration, pages viewed, IP address (including location), operating system, page reloading, crash data, performance data, and other diagnostic data. The tools also collect name, email address, phone number, and physical address. We use these tools to troubleshoot issues with and improve user experience on our site. The tools provide insight into what works and what doesn't work for users of the site, and it allows us to, for example, identify and repair technical errors such as broken links that impair the website's functionality. We may also use these tools to authenticate users, enable website features, prevent fraud, and implement security measures.
• We may use clear pixels in emails to track deliverability and open rates.
• We may also use clear pixels, beacons, tags, or other common website features that cause communications about your browsing activities and usage to be sent from you to third parties who provide services to us, including marketing and advertising services.
• When you make a purchase, you will need to provide the information required to process and ship your orders. This may include your credit card number, card type, expiration date, or secure PayPal account information, as well as your billing address and shipping address. Please note that CarParts.com does not store, archive, or otherwise retain credit card numbers.
• CP+ Loyalty Program data, if you enroll in our loyalty program, including enrollment information (such as name, email address, and vehicle information), points balance and accrual history, reward redemption history, tier or membership status, and inferences drawn from your purchase and browsing activity to personalize your loyalty experience.

We may supplement the information that you provide to us with information that we receive or obtain from other sources such as from our staff or personnel, clients, professional advisers, partners, and agents of CarParts.com, Inc., third parties with whom we interact, and publicly available sources.

Sources of Personal Information. More specifically, we may have obtained personal information about you from the following categories of sources:

• Directly from you or indirectly from the devices you use to access our services, including when you use our website, purchase products from us, provide information to us, interact with customer service, and participate in events from joint marketing partners and event sponsors when they share this information with us.
  • Chat. We offer an automated customer service feature using AI technology as well as a live customer service. These customer service features collect personal information, including but not limited to your name, email address, zip code, order number, and the content of chat communications. Note that customer service calls and AI chat sessions may be recorded and stored in order to ensure the customer's experience is properly researched and resolved.
• From our service providers, including data analytics vendors, internet service providers, information security providers and payment processors.
• From our affiliates and subsidiaries.
• From our business partners, such as drop ship vendors, e-commerce marketplaces, repair shops, credit card issuer, and mobile mechanics.
• From our advertising partners and data analytics vendors.
• Inferences from your activity.

Automated Information Collection — CP+ Members

We may connect information collected automatically with information we already have about you in order to identify you as a CP+ Member. If we are able to identify you as a CP+ Member we may, for example, link your activity on our website to your activity on one of our mobile apps. This allows us to provide you with a personalized experience regardless of how you interact with us – whether online, by mobile application, or otherwise. In order to provide the best customer experience possible and run our business operations smoothly, we also use automated information collection technologies for reporting and analysis purposes. We examine metrics such as how our marketing efforts are performing and how you are interacting on our website, on our mobile apps, and with our advertisements and emails.

Information Usage

We may use your personal information for the following purposes:

• Administration of client and vendor relationships, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business.
• Addressing client inquiries/feedback.
• Sending relevant marketing messages. We use identification data, contact details, cookie and device data, and mailing list data to communicate with you by way of email alerts and post to provide you with information about our services that may be of interest to you.
• Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of your current interaction with the business.
• Improving our website. We use cookie and device data to improve the functionality and user-friendliness of our website, including debugging to identify and repair errors that impair existing intended functionality of our website.
• Administering promotions, surveys, and focus groups. Operating and improving our CP+ loyalty program, including calculating points accrual and redemption, determining tier or membership status, delivering personalized offers and rewards, sending loyalty-related communications (subject to applicable consent requirements), and using purchase history and browsing behavior to personalize the loyalty experience. If loyalty program data is shared with analytics or marketing partners (including Blueshift and Retention.com) for purposes of audience building or campaign optimization, such sharing is disclosed in the Information Sharing section below.
• Managing and promoting the CarParts.com credit card.
• Personalizing website content in order to provide you with more relevant content during your visit.
• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and other analytical standards.
• Keeping our website and IT systems and processes safe, ensuring security and integrity to the extent the use of your personal information is reasonably necessary and proportionate for these purposes.
• Preventing or detecting fraud.
• Supporting our marketing and data analytics.
• Order processing.
• Complying with legal or regulatory inquiries/requests.
• Undertaking internal research for technological development and demonstration, including to analyze and improve our client services, online services, and our business. (We may use your general identifiers, online identifiers, internet activity information, and commercial information for these purposes).

Information Sharing

We do not sell your personal information in exchange for monetary consideration.

We may disclose for business purposes all of the categories of personal information described above with the following categories of third parties:

• Service providers and business partners. Companies that help us provide services or operate our business, such as IT and software services, credit card issuer, mailing services, marketing and analytics services, email service provider and customer data platform, cybersecurity services, payment processing, and office security services as well as repair shops and mobile mechanics. In particular, we share with our service providers and partners the following information as needed to perform the services for which we engage them:
  • Contact information and other information provided to us (including your name, email address, physical address, shipping address, telephone number).
  • Internet or other electronic network activity information (including cookies and mobile device IDs, and related browsing information).
  • Commercial information (including products and services purchased, products and services you are considering purchasing that are placed in your virtual shopping cart, information about products that you have returned, product orders you have cancelled, and product reviews).
  • Geo-location information.
  • Transactional information, including information you provide to us via customer service calls, emails, SMS and chats.
• Online Advertising Networks. Information concerning visitors to our site and their activities on the site is sent by your browsing software to third party service providers and online advertising networks using JavaScript and similar technologies.
• Law enforcement, regulatory, or government agency. Agencies requesting personal information in connection with any inquiry, subpoena, court order, or other legal or regulatory procedures, with which we would need to comply. We may also share personal information to establish or protect our legal rights, property, or safety, or the rights, property, or safety of others; or to defend against legal claims.
• Transaction participants. Parties to transactions and potential transactions for the sale, transfer or licensing of a portion or all of our business or assets, including your personal information, such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution.
• Professional advisors. Our lawyers, accountants, bankers, and other outside professional advisors in the course of the services they provide to us.

We may share personal information with other categories of third parties with your consent or as described to you at the time of collection of your personal information.

We may also create aggregated, de-identified, or other anonymous data from personal information we collect. We make personal information into anonymous data by removing information that makes the data personally identifiable to you. We reserve the right to use this anonymous data and share it with third parties for our lawful business purposes. To the extent we or our service providers process anonymous data, we will maintain and use the information in de-identified form and will not attempt to re-identify the information unless permitted by applicable law.

Third Parties; Social Media

Links to websites that are not operated by or for CarParts.com, Inc. ("Third Party Sites") are provided solely as a convenience to you. This Privacy Policy does not apply to Third Party Sites. We do not review Third Party Sites, do not control, and are not responsible for any of their content or their privacy policies, if any. We do not endorse or make any representations about them, or any information, software or other products or materials found there, or any results that may be obtained from using them. If you decide to access any of the Third Party Sites listed on or linked to from our website, you should understand that you do so at your own risk. We recommend that you check the privacy and security policies of each website you visit.

We engage with users on multiple social media platforms (e.g., Facebook/Meta, X, and TikTok). If you contact us on one of our social media platforms, request customer service via social media, or otherwise direct us to communicate with you via social media, we may contact you via direct message or use other social media tools to interact with you. In these instances, your interactions with us are governed by this Privacy Policy as well as the privacy policy of the social media platform you use.

Cookies and Data Collection Tools

The term "cookies" refers to a method of storing information about your activity on our website. When you visit our website, our computer system reads the cookie created by your browser to identify whether you are one of our customers and, if so, help you recall orders or preferences you have selected. The cookie also enables us to recall other past activities on the website, post your account data, send emails to you, and tailor other parts of our website to your visit.

We also use information stored in cookies to analyze website usage trends, administer the website, track users' movements around the website, gather demographic information about our user base, and conduct our marketing campaigns.

Most web browsers accept cookies by default but allow users to reject cookies by changing the browser preferences. If you have set up your browser to reject cookies, some aspects of our website may not work properly for you.

We allow third-party companies (e.g., Google) to place tags on our digital properties once approved through our tagging process. The tags may collect information from your interactions on our website. Our website and mobile apps also include social media features, such as Facebook/Meta, Instagram, and TikTok widgets. These features may collect information about you such as your IP address and which page you are visiting on our site. They may set a cookie or employ other tracking technologies to accomplish this. Note that this Privacy Policy only covers the use of cookies by us. It does not cover the use of cookies by any third party.

We use third-party web analytics services and advertisers, including Google Analytics, Criteo and Fospha, to analyze the use of our website and help us provide personalized marketing to users. We and others acting on our behalf (such as third-party web analytics services and advertisers) use server log files and other automated data collection tools, including cookies, pixels, tags, scripts, customized links, device or browser fingerprints, and web beacons when you visit and use our website. These data collection tools automatically track and collect system and usage data relating to visits to and use of our website (including IP addresses, cookies and device identifiers, and browsing history).

To learn more about Google Analytics, including how to opt out of it, please visit Google Analytics Opt-out Browser Add-on.

To learn more about Criteo, including how to opt out of it, please visit https://www.criteo.com/privacy/disable-criteo-services-on-internet-browsers/.

Additionally, when you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or home address. We (or service providers on our behalf) may then send communications and marketing to these email or home addresses.

You may opt out of receiving this advertising by visiting https://app.retention.com/optout.

Do Not Track

Please note that this website honors Global Privacy Control browser signals, but will not respond to other types of "do not track" signals.

Information Retention

Unless otherwise communicated to you, we will only retain your personal information for as long as necessary for the purposes for which that information was collected as set out in this Privacy Policy, or for longer as required under any applicable legal, regulatory, accounting, or reporting requirements. With respect to CP+ loyalty program data, we retain member enrollment information, points history, and redemption records for the duration of membership and for a reasonable period thereafter to resolve disputes, comply with legal obligations, and maintain program integrity. Upon cancellation of a loyalty account, we will retain only the data required by law or necessary to fulfill outstanding obligations; all other loyalty data will be deleted or de-identified in accordance with our standard retention schedule.

Security

We maintain administrative, technical, and physical safeguards to protect the confidentiality and security of information transmitted to us. Unfortunately, however, no data transmission over the internet can be guaranteed to be 100% secure. As a result, while we strive to protect your contact information, to the extent permitted by law, we do not guarantee or warrant the security of any information you transmit to or from our website, and you do so at your own risk.

Please note that email is not a secure medium and should not be used to send confidential or sensitive information.

We urge you to keep any password that you establish with us in a safe place and not to divulge it to anyone. Also remember to log off your account and close your browser window when you have finished your visit. This is to ensure that others cannot access your account, especially if you are sharing a computer with someone else or are using a computer in a public place.

Children

Our website is not intended for children under 16 years of age. No one under age 16 may provide any personal information on the website. We do not knowingly collect personal information from children under 16. If you are under 16, do not use or provide any information on this website. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information.

Notification of Changes

We reserve the right to change this Privacy Policy at any time. If we make any material changes to this Privacy Policy, we will post the revised version to www.CarParts.com and update the "Effective Date" at the top of this Privacy Policy. We encourage you to check back periodically. If we make a material change to our Privacy Policy that would lessen your privacy rights, we will either continue to honor our prior policy, or we will ask for your consent to the change with respect to previously-collected personal information. Otherwise, your continued use of the website once the revised Privacy Policy has been posted on the website affirms your agreement to such changes

Your Privacy Choices (General)

Marketing Choices

We may use your general identifiers, online identifiers, internet activity information, and commercial information in connection with sending you marketing communications and advertisements as permitted by law, including by mail and email. If you no longer wish to receive our email alerts, to be part of a mailing list, or to receive any marketing communications, you can opt-out of such communications at any time by clicking on the unsubscribe link in the relevant communication or contacting us at DataProtection@carparts.com.

Your Privacy Rights (Applicable States)

Residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have certain rights under applicable state privacy laws.

• Request to Know: You have the right to know whether we are processing your personal information and request that we disclose a report of your personal information, including (in certain states) the categories and specific pieces of personal information we have about you, the categories of sources from which the personal information has been obtained, the business or commercial purpose for collecting, selling, or sharing personal information, and the categories of third parties to whom we disclose your personal information (as well as which categories of information were disclosed). Residents of Oregon and Minnesota have the additional right to receive a list of specific third parties, other than natural persons, to which the business has disclosed personal information. Any such information should be provided in a format easily understandable to the average consumer, and to the extent technically feasible, in a structured, commonly used, machine-readable format. For additional information and to request your report, you may click on the Your Privacy Choices link on our homepage, or you may send an email to DataProtection@carparts.com, or you may call us at (866) 230-4653.
• Request to Delete: You have the right to request that we delete your personal information. Once we receive and verify your request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. For additional information and to request deletion of your personal information, you may click on the Your Privacy Choices link on our homepage, or you may send an email to DataProtection@carparts.com, or you may call us at (866) 230-4653.
• Request to Correct: You have the right to request that we correct, rectify and/or update any of your personal information that is incorrect, incomplete or out of date. If you have created an online account, you may log on and edit your personal information at any time. If you are unable to edit your personal information through your online account, you may click on the Your Privacy Choices link on our homepage, or you may send an email to DataProtection@carparts.com, or you may call us at (866) 230-4653.
• Request to Opt-out: You have the right to direct us not to sell or share your data for purposes of cross-context behavioral marketing, and the right to opt out of the processing of personal information for purposes of targeted advertising. You may click on the Do Not Sell Or Share My Personal Information link on our homepage to exercise your right to opt-out, or you may send an email to DataProtection@carparts.com, or you may call us at (866) 230-4653.

Some devices or web browsers can be configured to signal a user's privacy preferences to websites. At this time, our website is configured to recognize the Global Privacy Control signal as a request to opt-out of the sale or sharing of personal information for consumers.

Statement re the Use or Disclosure of Sensitive Personal Information: While CarParts may collect or process "sensitive personal information" relating to customer accounts, as that term is defined in the California Privacy Rights Act, it does so only as may be reasonably expected and necessary to provide services requested by the customer (such as providing customer service and servicing accounts) and without the purpose of inferring characteristics about accountholders.

How to Exercise Your Privacy Rights

When you contact us to exercise your rights to know, delete, or correct your personal information, we will first verify your identity by asking you to confirm a few pieces of information that we have in our records, such as your email address, billing zip code, and/or a recent order number or date of order. If you are making a request to correct involving these items of information, we will work with you to find another means of verifying your identity that will not involve the subject matter of the request to correct. With a request to correct, we may also require information from you to demonstrate that our information is incorrect. This information shall only be used and/or maintained by the business for the purpose of correcting your personal information and to comply with any record-keeping obligations we may have under the law. If you make a request online to delete your personal information, we may need to confirm your request before we delete your information.

You may use an authorized agent to exercise your opt out rights described above. So as to ensure your privacy, we reserve the right to deny a request from an authorized agent who does not submit proof that they have been authorized to act on your behalf. For avoidance of doubt, parents may make a verifiable request on behalf of their minor child to exercise any consumer rights described in this policy.

You may make a verifiable consumer request up to two times within a 12-month period, without charge. Unfortunately, we cannot respond to your request to delete or correct or provide you with personal information if we cannot verify your identity or authority to make the request and confirm that the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us.

We try to respond to a verifiable consumer request within 45 days of its receipt, and an opt-out request will be processed within 15 business days. If we require more time to respond to a verifiable consumer request, we will inform you of the reason and extension time period (up to 90 days). The response we provide will explain any reasons we cannot comply with a request, if applicable.

You have a right to appeal any denial of a consumer right. If your request is denied in whole or in part, you have the right to appeal your decision. We will review and respond to your request within 45-60 days, depending on applicable law, and if your appeal is denied, we will provide you with an explanation of our reasons and a description of any further rights you may have at that time.

Right to Equal Service: We will not discriminate against you for exercising your rights as a consumer under any applicable laws. Unless permitted by law, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

CP+ Loyalty Program; Financial Incentive Notice. CarParts.com operates the CP+ loyalty program (the "Program"), which provides members with points, rewards, tier benefits, and personalized offers in connection with qualifying purchases and activities. Participation in the Program constitutes a financial incentive under the California Privacy Rights Act ("CPRA") and equivalent state laws because the benefits offered are tied to the collection and use of your personal information.

Categories of Personal Information Collected Through the Program. In connection with the Program, we collect identifiers (name, email address, phone number), commercial information (purchase history, points balance, redemption history, tier status), internet or electronic network activity (browsing and interaction data used to personalize offers), and inferences derived from the foregoing to build a member profile reflecting preferences and purchasing tendencies.

Why We Believe the Program Is Reasonably Related to the Value of Your Data. The benefits provided under the Program (including points, discounts, and personalized offers) are reasonably related to the value of the personal information we collect in connection with it. We use member data to reduce customer acquisition costs, improve retention, and deliver more relevant marketing, the value of which is reflected in the rewards and pricing benefits available to Program members.

Enrollment and Opt-Out. Participation in the Program is voluntary and requires your affirmative opt-in at enrollment. You may withdraw from the Program at any time by contacting us at DataProtection@carparts.com or by visiting your account settings. Withdrawal will not affect your right to make purchases or use our website, and we will not discriminate against you for exercising your right to opt out. Please note that accrued points and benefits may be forfeited upon withdrawal in accordance with the Program terms.

Communications. Enrollment in the Program does not by itself constitute consent to receive marketing text messages or promotional emails. Consent to such communications is governed by the separate opt-in disclosures presented at enrollment and is subject to applicable requirements under the Telephone Consumer Protection Act and CAN-SPAM Act. You may opt out of Program-related marketing communications at any time without affecting your Program membership.

California Residents Only: Notice at Collection

The following table identifies information we've collected over the last 12 months and what we continue to collect from California residents.

We may also collect other categories of personal information that you choose to share with us.

Retention Period

We will only retain your information for as long as is necessary for the purposes for which it was collected as set out in this policy, as may be required by law (including for tax and accounting purposes), or as otherwise communicated to you. We conduct periodic reviews to ensure that your personal information is not kept longer than necessary, adequate, or relevant for our expressed purposes.