This Privacy Policy explains how Iron Parts & Services BV ("Iron Parts", "we", "us") collects and uses personal data when you use our website or contact us. We are the data controller for the personal data described here.
1. The data we collect
- Enquiries: when you use our contact form, your name, company, email, country, topic and message.
- Newsletter: your email address if you subscribe.
- Dealer accounts: account applications and orders are handled in our dealer webshop, which runs on a third-party platform. The data you provide there is processed on that platform on our behalf.
- Website usage: we are not currently running analytics on this website. If we introduce it, it will be a privacy-friendly tool and we will name it in our Cookie Policy before it goes live.
2. How we use it, and our lawful basis
- To respond to your enquiry and provide the information you ask for. Lawful basis: our legitimate interest in responding to trade enquiries and maintaining our dealer relationships, or steps taken at your request before entering a contract.
- To send you updates and offers, only where you have subscribed. Lawful basis: your consent, which you can withdraw at any time.
- To set up and run a dealer relationship and process orders. Lawful basis: performance of a contract.
- To operate, secure and improve the website. Lawful basis: our legitimate interest in keeping the website available and secure, preventing fraud and misuse, and understanding in aggregate how the site is used.
3. Who we share it with
We share personal data only with service providers that help us run our business, under appropriate agreements, including:
- The dealer webshop and parts catalog platform, where dealer accounts and orders are handled.
- Our business systems provider, for inventory, orders and business operations.
- Our website hosting and infrastructure providers.
- Our support ticketing provider.
We can tell you which specific companies these are at any time. Just ask us at info@ironparts.com.
Dealer and enquiry records are managed in our own systems, operated by Iron Parts. They are not shared with a third-party CRM provider.
We do not sell your personal data.
4. International transfers
Some of our operations and providers are based outside the European Economic Area, including in the United States and Canada. Where personal data is transferred outside the EEA, we rely on appropriate safeguards, being the European Commission's Standard Contractual Clauses or, where the recipient is certified under it, the EU–US Data Privacy Framework. You can obtain a copy of the safeguards we rely on by writing to info@ironparts.com.
5. How long we keep it
We keep personal data only as long as needed for the purpose it was collected, to run the dealer relationship, or to meet legal and accounting obligations, after which it is deleted or anonymised. In practice that means:
- Contact form enquiries: 2 years from our last contact with you.
- Newsletter subscribers: until you unsubscribe, plus a minimal suppression record so that we do not add you again.
- Dealer account records: for the duration of the relationship, then 7 years.
- Invoices and accounting records: 7 years, as required by Belgian bookkeeping law.
- Support tickets: 3 years from the date the ticket is closed.
- Website analytics: none is currently in use. If we introduce it, aggregated statistics only, with no personal data retained.
6. Your rights
Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. To exercise these rights, contact us at info@ironparts.com.
You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35 / Rue de la Presse 35, 1000 Brussels, Belgium — www.gegevensbeschermingsautoriteit.be, contact@apd-gba.be, +32 (0)2 274 48 00.
You can object to direct marketing at any time, and withdrawing consent does not affect processing carried out before withdrawal. We have not appointed a Data Protection Officer; for any question about your personal data or to exercise your rights, contact info@ironparts.com.
7. Automated decisions
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
8. Changes
We may update this policy from time to time. The date at the top shows when it was last changed.