Updated March 26, 2026

CarParts.com, Inc. ("we," "us," or "our") is committed to safeguarding the privacy of visitors to our website using generally accepted industry data protection standards. We appreciate that you may have questions about our privacy policy (“Privacy Policy”). The following provides information on how we collect, use, share, and otherwise process your personal information during your visit to www.CarParts.com, as well as the rights that you have in relation to our processing of that information. In this Privacy Policy, "personal information" generally means information that enables you, directly or indirectly, to be identified. This Privacy Policy applies to all business units and subsidiaries.

YOUR USE OF THIS WEBSITE AND OUR MOBILE APPS CONSTITUTES YOUR ACKNOWLEDGEMENT OF THE CONTENTS OF THIS PRIVACY POLICY AND ACCEPTANCE OF OUR WEBSITE TERMS AND CONDITIONS WHICH ARE AVAILABLE HERE.

If you have any comments or questions in connection with this Privacy Policy, or wish to have further information on our processing activities and your rights in relation to your personal information, please contact us via email at DataProtection@carparts.com or by mail to Data Protection, CarParts.com, Inc., 4910 Airport Plaza Drive, Suite 300, Long Beach, CA 90815. You may also call us toll-free at (866) 230-4653.

• Information Collection
• Information Usage
• Information Sharing
• Third Parties; Social Media
• Cookies and Data Collection Tools
• Do Not Track
• Security
• Children
• Notification of Changes
• Your Privacy Choices (General)
• Your Privacy Rights (Applicable States)
• Notice at Collection
• Information Retention

Information Collection

We may collect the following categories of personal information from you in the course of business, including through your use of our website or mobile apps, when you place orders, when you create an account, or when you contact or request information from us:

• Identifiers such as name, title, job title, or address.
• Contact information, including your phone number(s), your email address and social media account or handle where appropriate.
• Account usernames and password, should you set up an account with us.
• Information or inferences about your preferences and interests.
• Commercial information, including a list of the products you’ve considered, cancelled, purchased or returned as well as your vehicle information.
• Cookie and device data, such as information about your visit to our website, IP address, device model and identifier, browser type and version, operating system and network, geo-location, and time zone setting, date and time spent on our website, referring website, pages accessed, search terms, and other actions taken on or usage details of our site.
• We also use third-party session replay services that record user interactions with our website. The tools use cookies and similar technologies to collect and analyze information related to user behavior on our site, such as mouse movements, clicks, user inputs, scrolling, access times, visit duration, pages viewed, IP address (including location), operating system, page reloading, crash data, performance data, and other diagnostic data. The tools also collect name, email address, phone number, and physical address. We use these tools to troubleshoot issues with and improve user experience on our site. The tools provide insight into what works and what doesn’t work for users of the site, and it allows us to, for example, identify and repair technical errors such as broken links that impair the website’s functionality. We may also use these tools to authenticate users, enable website features, prevent fraud, and implement security measures.
• When you make a purchase, you will need to provide the information required to process and ship your orders. This may include your credit card number, card type, expiration date, or secure PayPal account information, as well as your billing address and shipping address. Please note that CarParts.com does not store, archive, or otherwise retain credit card numbers.
• CP+ Loyalty Program data, if you enroll in our loyalty program by creating an account with us, in addition to enrollment information (such as name, email address, and vehicle information), we will collect points balance and accrual history, reward redemption history, tier or membership status, and inferences drawn from your purchase and browsing activity to personalize your loyalty experience.

We may supplement the information that you provide to us with information that we receive or obtain from other sources such as from our staff or personnel, clients, professional advisors, service providers, business partners, and agents of CarParts.com, Inc., third parties with whom we interact, and publicly available sources.

Sources of Personal Information. More specifically, we may have obtained personal information about you from the following categories of sources: 

• Directly from you or indirectly from the devices you use to access our services, including when you use our website or mobile apps, purchase products from us, provide information to us, interact with customer service, and participate in events from joint marketing partners and event sponsors when they share this information with us.
  • Chat. We offer an automated customer service feature using AI technology as well as a live customer service. These customer service features collect personal information, including but not limited to your name, email address, zip code, order number, and the content of chat communications. Note that customer service calls and AI chat sessions may be recorded and stored in order to ensure the customer’s experience is properly researched and resolved. While the content of the chat sessions may be used to train our automated customer service feature, we remove any personally-identifiable information before our dataset may be used for training purposes.
• From our service providers, including data analytics vendors, internet service providers, information security providers and payment processors.
• From our affiliates and subsidiaries.
• From our business partners, such as drop ship vendors, e-commerce marketplaces, repair shops, credit card issuer, and mobile mechanics.
• From our advertising partners and data analytics vendors.
• Inferences from your activity.

Information Usage

We may use your personal information for the following purposes:

• Administration of client and vendor relationships, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business.
• Addressing client inquiries/feedback.
• Sending relevant marketing messages. We use identification data, contact details, cookie and device data, and mailing list data to communicate with you by way of email alerts and posts to provide you with information about our services that may be of interest to you.
• Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of your current interaction with the business.

 

• Improving our website. We use cookie and device data to improve the functionality and user-friendliness of our website, including debugging to identify and repair errors that impair existing intended functionality of our website.

 

• Administering promotions, surveys, and focus groups.

 

• Operating and improving our loyalty, rewards, and/or referral programs, including calculating discounts, points accrual and redemption, determining tier or membership status, delivering personalized offers and rewards, sending loyalty-related communications (subject to applicable consent requirements), and using purchase history and browsing behavior to personalize the loyalty experience.

 

Note regarding CP+: We may connect information collected automatically with information we already have about you in order to identify you as a CP+ Member. If we are able to identify you as a CP+ Member we may, for example, link your activity on our website to your activity on one of our mobile apps. This allows us to provide you with a personalized experience regardless of how you interact with us – whether online, by mobile application, or otherwise.

 

• Managing and promoting the CarParts.com credit card.
• Personalizing website content in order to provide you with more relevant content during your visit.
• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and other analytical standards.
• Keeping our website and IT systems and processes safe, ensuring security and integrity to the extent the use of your personal information is reasonably necessary and proportionate for these purposes.
• Preventing or detecting fraud.
• Supporting our marketing and data analytics. We examine metrics such as how our marketing efforts are performing and how you are interacting on our website, on our mobile apps, and with our advertisements and emails.
• Order processing.
• Complying with legal or regulatory inquiries/requests.
• Undertaking internal research for technological development and demonstration, including to analyze and improve our client services, online services, and our business. (We may use your general identifiers, online identifiers, internet activity information, and commercial information for these purposes).
• Other purposes disclosed in this Privacy Policy or to you at the time of data collection, or otherwise with your consent.

Information Sharing

We do not sell your personal information in exchange for monetary consideration.

We may disclose for business purposes all of the categories of personal information described above with the following categories of third parties:

• Service providers and business partners. Companies that help us provide services or operate our business, such as IT and software services, credit card issuer, mailing services, marketing and analytics services, email service provider and customer data platform, cybersecurity services, payment processing, and office security services as well as repair shops and mobile mechanics. In particular, we share with our service providers and partners the following information as needed to perform the services for which we engage them:

• Online Advertising Networks. Information concerning visitors to our site and their activities on the site is sent by your browsing software to third party service providers and online advertising networks using JavaScript and similar technologies.
• Law enforcement, regulatory, or government agency. Agencies requesting personal information in connection with any inquiry, subpoena, court order, or other legal or regulatory procedures, with which we would need to comply. We may also share personal information to establish or protect our legal rights, property, or safety, or the rights, property, or safety of others; or to defend against legal claims.
• Transaction participants. Parties to transactions and potential transactions for the sale, transfer or licensing of a portion or all of our business or assets, including your personal information, such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution.
• Professional advisors. Our lawyers, accountants, bankers, and other outside professional advisors in the course of the services they provide to us.

We may share personal information with other categories of third parties with your consent or as described to you at the time of collection of your personal information.

We may also create aggregated, de-identified, or other anonymous data from personal information we collect. We make personal information into anonymous data by removing information that makes the data personally identifiable to you. We reserve the right to use this anonymous data and share it with third parties for our lawful business purposes. To the extent we or our service providers process anonymous data, we will maintain and use the information in de-identified form and will not attempt to re-identify the information unless permitted by applicable law.

Third Parties; Social Media

Links to websites that are not operated by or for CarParts.com, Inc. ("Third Party Sites") are provided solely as a convenience to you. This Privacy Policy does not apply to Third Party Sites. We do not review Third Party Sites, do not control, and are not responsible for any of their content or their privacy policies, if any. We do not endorse or make any representations about them, or any information, software or other products or materials found there, or any results that may be obtained from using them. If you decide to access any of the Third Party Sites listed on or linked to from our website, you should understand that you do so at your own risk. We recommend that you check the privacy and security policies of each website you visit.

We engage with users on multiple social media platforms (e.g., Facebook/Meta, X, Instagram, LinkedIn, YouTube and TikTok). If you contact us on one of our social media platforms, request customer service via social media, or otherwise direct us to communicate with you via social media, we may contact you via direct message or use other social media tools to interact with you. In these instances, your interactions with us are governed by this Privacy Policy as well as the privacy policy of the social media platform you use.

Cookies and Data Collection Tools

The term “cookies” refers to a method of storing information about your activity on our website. When you visit our website, our computer system reads the cookie created by your browser to identify whether you are one of our customers and, if so, help you recall orders or preferences you have selected. The cookie also enables us to recall other past activities on the website, post your account data, send emails or messages to you, and tailor other parts of our website to your visit.

We also use information stored in cookies to analyze website usage trends, administer the website, track users’ movements around the website, gather demographic information about our user base, and conduct our marketing campaigns. If you sign up for our text messaging program, cookies may be used to personalize your experience (e.g. send you personalized text messages such as shopping cart reminders).

 

Most web browsers accept cookies by default but allow users to reject cookies by changing the browser preferences. If you have set up your browser to reject cookies, some aspects of our website may not work properly for you.

We may use clear pixels in emails to track deliverability and open rates. We may also use clear pixels, beacons, tags, or other common website features that cause communications about your browsing activities and usage to be sent from you to third parties who provide services to us, including marketing and advertising services.

Our website and mobile apps also include social media features, such as Facebook/Meta, Instagram, LinkedIn, YouTube, and TikTok widgets. These features may collect information about you such as your IP address and which page you are visiting on our site. They may set a cookie or employ other tracking technologies to accomplish this. Note that this Privacy Policy only covers the use of cookies by us. It does not cover the use of cookies by any third party.

We use third-party web analytics services and advertisers, including Google Analytics, Criteo and Fospha, to analyze the use of our website and help us provide personalized marketing to users. We and others acting on our behalf (such as third-party web analytics services and advertisers) use server log files and other automated data collection tools, including cookies, pixels, tags, scripts, customized links, device or browser fingerprints, and web beacons when you visit and use our website. These data collection tools automatically track and collect system and usage data relating to visits to and use of our website (including IP addresses, cookies and device identifiers, and browsing history).

To learn more about Google Analytics, including how to opt out of it, please visit Google Analytics Opt-out Browser Add-on.

To learn more about Criteo, including how to opt out of it, please visit Disable Criteo services on Internet browsers.

Additionally, when you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or home address. We (or service providers on our behalf) may then send communications and marketing to these email or home addresses.

You may opt out of receiving this advertising by visiting Retention.com Opt-Out Form.

Do Not Track

Please note that this website honors Global Privacy Control browser signals, but will not respond to other types of “do not track” signals.

Security

We maintain administrative, technical, and physical safeguards to protect the confidentiality and security of information transmitted to us. Unfortunately, however, no data transmission over the internet can be guaranteed to be 100% secure. As a result, while we strive to protect your contact information, to the extent permitted by law, we do not guarantee or warrant the security of any information you transmit to or from our website, and you do so at your own risk.

Please note that email is not a secure medium and should not be used to send confidential or sensitive information.

We urge you to keep any password that you establish with us in a safe place and not to divulge it to anyone. Also remember to log off your account and close your browser window when you have finished your visit. This is to ensure that others cannot access your account, especially if you are sharing a computer with someone else or are using a computer in a public place.

Children

Our website is not intended for children under 16 years of age. No one under age 16 may provide any personal information on the website. We do not knowingly collect personal information from children under 16. If you are under 16, do not use or provide any information on this website. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information.

Notification of Changes

We reserve the right to change this Privacy Policy at any time. If we make any material changes to this Privacy Policy, we will post the revised version to www.CarParts.com and update the "Effective Date" at the top of this Privacy Policy. We encourage you to check back periodically. If we make a material change to our Privacy Policy that would lessen your privacy rights, we will either continue to honor our prior policy, or we will ask for your consent to the change with respect to previously-collected personal information. Otherwise, your continued use of the website once the revised Privacy Policy has been posted on the website affirms your agreement to such changes

Your Privacy Choices (General)

Marketing Choices

We may use your general identifiers, online identifiers, internet activity information, and commercial information in connection with sending you marketing communications and advertisements as permitted by law, including by mail and email. If you no longer wish to receive our email alerts, to be part of a mailing list, or to receive any marketing communications, you can opt-out of such communications at any time by clicking on the unsubscribe link in the relevant communication or contacting us at DataProtection@carparts.com.

Your Privacy Rights (Applicable States)

 

Residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have certain rights under applicable state privacy laws.

 

• Request to Know: You have the right to know whether we are processing your personal information and request that we disclose a report of your personal information, including  (in certain states) the categories and specific pieces of personal information we have about you, the categories of sources from which the personal information has been obtained, the business or commercial purpose for collecting, selling, or sharing personal information, and the categories of third parties to whom we disclose your personal information (as well as which categories of information were disclosed). Residents of Oregon and Minnesota have the additional right to receive a list of specific third parties, other than natural persons, to which the business has disclosed personal information. .

 

Any such information should be provided in a format easily understandable to the average consumer, and to the extent technically feasible, in a structured, commonly used, machine-readable format. For additional information and to request your report, you may click on the Your Privacy Choices link on our homepage[SS1] , or you may send an email to DataProtection@carparts.com, or you may call us at (866) 230-4653.

 

• Request to Delete: You have the right to request that we delete your personal information. Once we receive and verify your request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. For additional information and to request deletion of your personal information, you may click on the Your Privacy Choices link on our homepage, or you may send an email to DataProtection@carparts.com, or you may call us at (866) 230-4653.

 

• Request to Correct: You have the right to request that we correct, rectify and/or update any of your personal information that is incorrect, incomplete or out of date. If you have created an online account, you may log on and edit your personal information at any time. If you are unable to edit your personal information through your online account, you may click on the Your Privacy Choices link on our homepage, or you may send an email to DataProtection@carparts.com, or you may call us at (866) 230-4653.

 

• Request to Opt-out: You have the right to direct us not to sell or share your data for purposes of cross-context behavioral marketing, and the right to opt out of the processing of personal information for purposes of targeted advertising. You may click on the Do Not Sell Or Share My Personal Information link [SS2] on our homepage to exercise your right to opt-out, or you may send an email to DataProtection@carparts.com, or you may call us at (866) 230-4653.

 

Some devices or web browsers can be configured to signal a user’s privacy preferences to websites. At this time, our website is configured to recognize the Global Privacy Control signal as a request to opt-out of the sale or sharing of personal information for consumers.

 

• Statement re the Use or Disclosure of Sensitive Personal Information: While CarParts may collect or process “sensitive personal information” relating to customer accounts, as that term is defined in the California Privacy Rights Act, it does so only as may be reasonably expected and necessary to provide services requested by the customer (such as providing customer service and servicing accounts) and without the purpose of inferring characteristics about accountholders.

How to Exercise Your Privacy Rights

 

When you contact us to exercise your rights to know, delete, or correct your personal information, we will first verify your identity by asking you to confirm a few pieces of information that we have in our records, such as your email address, billing zip code, and/or a recent order number or date of order. If you are making a request to correct involving these items of information, we will work with you to find another means of verifying your identity that will not involve the subject matter of the request to correct. With a request to correct, we may also require information from you to demonstrate that our information is incorrect. This information shall only be used and/or maintained by the business for the purpose of correcting your personal information and to comply with any record-keeping obligations we may have under the law. If you make a request online to delete your personal information, we may need to confirm your request before we delete your information.

 

You may use an authorized agent to exercise your opt out rights described above. So as to ensure your privacy, we reserve the right to deny a request from an authorized agent who does not submit proof that they have been authorized to act on your behalf. For avoidance of doubt, parents may make a verifiable request on behalf of their minor child to exercise any consumer rights described in this policy.

 

You may make a verifiable consumer request up to two times within a 12-month period, without charge. After that threshold, we may charge you a reasonable fee per request if permitted by applicable law.  Unfortunately, we cannot respond to your request to delete or correct or provide you with personal information if we cannot verify your identity or authority to make the request and confirm that the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us.

 

We try to respond to a verifiable consumer request within 45 days of its receipt, and an opt-out request will be processed within 15 business days. If we require more time to respond to a verifiable consumer request, we will inform you of the reason and extension time period (up to 90 days). The response we provide will explain any reasons we cannot comply with a request, if applicable.

 

You have a right to appeal any denial of a consumer right. If your request is denied in whole or in part, you have the right to appeal your decision. We will review and respond to your request within 45-60 days, depending on applicable law, and if your appeal is denied, we will provide you with an explanation of our reasons and a description of any further rights you may have at that time.

 

Right to Equal Service: We will not discriminate against you for exercising your rights as a consumer under any applicable laws. Unless permitted by law, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

We may offer you certain financial incentives permitted by law that can result in different prices, rates, or quality levels. Any legally-permitted financial incentive we offer will reasonably relate to your personal information's value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.

 

 

California Residents Only: Notice at Collection

The following table identifies information we've collected over the last 12 months and what we continue to collect from California residents.

Category	Examples	Purpose	Shared for Marketing Purposes?
Identifiers	Name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.	• To process and fulfill customer orders and communications.  • To verify identity, prevent fraud, and provide customer support.  • To personalize site experience, vehicle fitment, and recommendations.  • To send transactional and marketing communications through platforms like Blueshift and Retention.com.  • To measure and optimize marketing effectiveness and advertising across networks like Meta, Google, and Criteo.  • To support audience matching, retargeting, and campaign reporting.  • To administer and operate our loyalty, rewards and/or referral programs.	Yes. Shared with advertising and marketing partners (e.g., Meta, Google, Criteo, Blueshift, Retention.com) and select business partners for advertising, analytics, and performance measurement.
Personal Information Categories (Cal. Civ. Code §1798.80(e))	Telephone numbers, credit card numbers, debit card numbers, and other financial information.	• To process payments, returns, and refunds.  • To detect and prevent fraud.  • To communicate about orders and account issues.  • To meet legal, tax, and accounting obligations.	No. Financial information and telephone numbers are not shared for marketing or advertising purposes.
Commercial Information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	• To fulfill orders and deliver purchased products.  • To personalize content and vehicle fitment experiences.  • To provide personalized recommendations and offers through Blueshift and Retention.com.  • To analyze purchasing behavior and customer lifecycle.  • To improve campaigns and customer experience via analytics tools (e.g., Fospha, Google Analytics/GA4).  • To create custom audiences for remarketing on Meta, Google, and Criteo.  • To administer and operate our loyalty, rewards and/or referral programs.	Yes. Shared with select business partners and advertising networks for marketing and analytics to personalize offers and measure performance.
Internet or Other Electronic Network Activity	Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.	• To operate and improve the website and mobile app.  • To personalize content and vehicle fitment experiences.  • To track site activity for campaign attribution and optimization.  • To power remarketing and conversion tracking through Meta Pixel, Criteo, and Google Analytics/GA4.  • To deliver triggered messages (e.g., cart/browse abandonment) through Blueshift and Retention.com.  • To administer and operate our loyalty, rewards and/or referral programs.	Yes. Shared with analytics and advertising partners for targeted advertising, retargeting, and performance measurement.
Geo-Location Data	Physical location (non-precise).	• To detect and prevent fraud (e.g., transaction verification).  • To improve regional relevance of content and offers.  • To understand geographic engagement patterns for marketing optimization.  • To provide location-based services (e.g., delivery estimates).	Yes (limited). Shared in aggregated or inferred form with analytics and marketing partners for ad delivery optimization; not used to track precise location.
Sensitive Personal Information	Account log-in information.	• To authenticate users and secure account access.  • To protect against unauthorized access or fraud.  • To comply with legal, security, and data protection obligations.	No. Sensitive data (account log-ins, credentials) is not shared for marketing purposes; only used internally for security where legally permitted.
Inferences	Inferences drawn from any of the above categories to create a profile about a consumer reflecting their preferences, characteristics, predispositions, behavior and attitudes.	• Personalization, product recommendations, and improving user experience. • To administer and operate our loyalty, rewards and/or referral programs.	Yes. Shared with analytics and marketing partners to deliver relevant communications.

We may also collect other categories of personal information that you choose to share with us. 

Information Retention Unless otherwise communicated to you, we will only retain your personal information for as long as necessary for the purposes for which that information was collected as set out in this Privacy Policy, or for longer as required under any applicable legal, regulatory, accounting, or reporting requirements.  We conduct periodic reviews to ensure that your personal information is not kept longer than necessary, adequate, or relevant for our expressed purposes.