Last updated:
1. About this policy
This policy explains how Partob handles personal information when you browse partob.com, apply for an account, buy products or contact our team. It covers customers, business contacts and visitors, including people acting on behalf of a repair business, retailer or distributor.
Personal information means information that identifies you or can reasonably be connected to you. For questions about our use of your information, or to make a privacy request, email [email protected]. The Cookie policy tab provides the detailed notice for cookies and similar technologies used by our storefront.
2. Information we collect
The information we handle depends on how you use Partob. It may include:
- Account and business information: your name, contact details, login information, company details and supporting documents you provide when applying for a business account.
- Shopping and order information: products, quantities, delivery and billing details, order history, payment status, transaction references, refunds, returns, warranty requests and account credit or reward records.
- Messages and requests: information you send through contact or product enquiry forms, email, telephone or messaging services, and any product references or supporting material you choose to provide.
- Notification preferences: products you ask us to notify you about, your contact details and the status of those requests.
- Technical information: IP address, browser and device information, security signals, server logs and the storage needed to maintain your session, cart and privacy choices. Optional browsing measurements depend on your cookie permissions.
Please provide only information relevant to your request. Do not send payment-card details, account passwords or unnecessary sensitive information through a contact form or message. If you provide another person’s details for a delivery or business account, make sure you are authorised to do so and let them know about this policy.
3. How and why we use information
Where the GDPR applies, the legal basis depends on the purpose and your relationship with us. We do not treat every use of information as consent-based processing.
| Purpose | How information is used | Legal basis |
|---|---|---|
| Accounts and business applications | Review applications, administer access, maintain account details and respond to account requests. | Steps requested before entering a contract; performance of a contract; legitimate interests in managing business relationships and account security. |
| Orders and after-sales service | Process purchases, arrange delivery, handle returns or warranty enquiries, and maintain related credit and reward records. | Performance of a contract; legal obligations where applicable. For business representatives, legitimate interests in carrying out the business relationship. |
| Product enquiries and support | Answer questions, discuss sourcing requirements and follow up on a request. | Steps requested before entering a contract, or legitimate interests in providing customer support and responding to business enquiries. |
| Requested stock notifications | Notify you about the availability of a product you selected and manage your notification request. | Your request and consent where required. You can cancel a notification through your account. |
| Security and service operation | Maintain sessions, protect forms, investigate suspicious activity and troubleshoot service problems. | Legitimate interests in protecting customers and operating a reliable storefront; legal obligations where applicable. |
| Optional preferences and analytics | Remember recently viewed products and measure website use through the services listed in our Cookie policy. | Consent, given separately through the cookie controls. |
| Records and legal matters | Keep required transaction records, document privacy choices, respond to lawful requests and deal with disputes. | Legal obligations and legitimate interests in demonstrating compliance and establishing, exercising or defending legal claims. |
Where we rely on legitimate interests, those interests must be balanced against your rights and reasonable expectations. Fields marked as required are needed for the relevant account, order or request; without them, we may be unable to provide that particular service. Creating an account or placing an order does not itself give permission for optional tracking.
4. Payments and service providers
Payments are handled through the payment method and provider available at checkout. A provider may process payment credentials, authentication information and fraud-prevention signals under its own privacy notice. Partob uses the order amount, payment status and transaction references to process the purchase and handle payment-related enquiries.
Information may be shared with providers involved in hosting, security, payment processing, delivery, email and customer support to the extent needed for their role. Relevant order or product details may also be needed to resolve a return, warranty or sourcing request. Professional advisers or public authorities may receive information when required by law or necessary to deal with a legal claim.
The Cookie policy identifies the storefront’s tracking and security services, including Cloudflare and Google. It explains which services require your permission and the information involved.
5. International processing
Some service providers or business communications may involve processing outside the European Economic Area. The location depends on the service and provider involved.
Where the GDPR requires safeguards for a transfer, these may include an applicable adequacy decision or contractual safeguards such as the European Commission’s Standard Contractual Clauses, together with additional measures where necessary. Contact [email protected] to ask about the safeguards applicable to a particular use of your information or how to obtain a copy.
6. How long we keep information
Retention depends on why information was collected. Account information is needed while the account and business relationship are maintained. Enquiries and supporting material may need to be kept while a request is being handled and for relevant follow-up. Transaction, payment, return and warranty records may need to be retained for applicable accounting requirements, warranty periods or legal claims.
When assessing retention, we consider the purpose, the sensitivity of the information, statutory requirements, outstanding disputes and whether a less identifiable record would be sufficient. Closing an account or deleting browser data does not automatically remove records that must still be retained for these purposes.
Cookies and consent records have their own retention rules, described in the Cookie policy. You can contact us to ask about the retention period applicable to a particular record or to request deletion where the legal conditions are met.
8. Your privacy rights
Depending on the applicable law and the circumstances, you may have the right to:
- Ask for access to your personal information and receive a copy.
- Correct inaccurate information or complete information that is incomplete.
- Request deletion or restriction of processing where the relevant conditions apply.
- Object to processing based on legitimate interests, and object to direct marketing at any time.
- Receive information you provided in a portable format, or have it transferred where the legal and technical conditions are met.
- Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
- Complain to a data-protection supervisory authority, including in the country where you live or work or where an alleged infringement occurred.
Send requests to [email protected]. We may ask for proportionate information to verify your identity and locate the relevant record. Under the GDPR, a response is normally due within one month; a permitted extension may apply to complex or multiple requests, in which case you should be told within that first month. Rights are subject to their legal conditions, including obligations to retain certain records.
9. Keeping information secure
Our storefront uses measures such as protected account access, server-side checks and security checks on relevant forms to help protect information and prevent misuse. Access and disclosure should be limited to what is needed for the relevant task.
No online service can guarantee absolute security. Keep your login details private, use a strong password and contact us if you believe someone has gained unauthorised access to your account. Do not include your password in that report.
10. External websites and messaging
Links to external websites, social networks and messaging services take you to services with their own privacy practices. If you choose to contact us through WhatsApp, WeChat or another platform, that platform may also process your information. Review its privacy notice before sharing information.
Partob is intended for professional purchasing and business enquiries, rather than services directed at children. If you believe a child has provided personal information unnecessarily, contact us so that the situation can be reviewed.
11. Policy updates and contact
We may update this policy as our services, processing activities or legal requirements change. The date shown above identifies this version. Where a change requires additional information or a new consent choice, that will be addressed before the relevant new consent-based processing begins.
For privacy questions, requests about your information or clarification of this policy, contact [email protected]. You can also use the Contact us page to reach our team.