Privacy Policy for Request Parts

• Directly from you: when you create an account, complete a form, upload a request, publish a listing or contact support.
• From your activity: when you browse, search, click links, use marketplace functions or interact with account features.
• From business representatives: where a company registers team members or provides business-contact information.
• From service providers: where payment, hosting, security, analytics or communication providers return information needed to operate the service.
• From public business sources: where business details are checked or verified against legitimate public company information.

• Provide account registration, login, profile and marketplace functionality.
• Process parts requests and make relevant information available to suppliers or distributors.
• Enable suppliers to publish listings, offers and business information.
• Support messaging, notifications, support requests and service communications.
• Protect accounts, detect abuse, investigate suspicious activity and secure the platform.
• Maintain, troubleshoot and improve website performance and user experience.
• Administer subscriptions, billing or payment status where paid services are used.
• Comply with legal obligations, enforce platform terms and respond to lawful requests.

Where the GDPR applies, processing may rely on one or more legal bases depending on the activity.

Request Parts does not sell or rent personal data. Information may be shared where reasonably necessary to operate the platform or fulfil a request.

• Suppliers and distributors: relevant request information may be shared so they can respond to a specific parts request.
• Service providers: hosting, email, infrastructure, analytics, security or payment providers may process limited data on our behalf.
• Business partners: where needed for an integration or service that you choose to use.
• Legal authorities: where disclosure is required by applicable law, court order or another valid legal process.
• Corporate changes: information may be transferred as part of a legitimate merger, acquisition, restructuring or sale of relevant business assets, subject to applicable law.

Some information you choose to publish may be visible to other users or publicly accessible, depending on the feature.

• Business profiles, company names, categories, websites and public contact details may be visible on supplier or distributor pages.
• Parts requests may display product or sourcing information needed to help suppliers identify the requested item.
• Listings and feed posts may display seller-provided product information, stock, price, images and external links.
• You should avoid publishing confidential, sensitive or unnecessary personal information in public descriptions, images or attachments.

We aim to retain personal data only for as long as reasonably necessary for the purpose for which it was collected, subject to legal, accounting, security and dispute-resolution requirements.

• Account data may be retained while the account remains active and for an appropriate period afterwards where necessary.
• Marketplace messages, requests and transaction records may be retained where needed for service history, fraud prevention or dispute handling.
• Security logs may be retained for a limited period appropriate to detecting and investigating misuse.
• Financial or invoicing information may need to be retained for legally required accounting or tax periods.
• Data that is no longer needed may be deleted, anonymized or aggregated where appropriate.

• Password protection: passwords should be stored using secure password-hashing mechanisms rather than in plain text.
• Access controls: access to administrative or personal data is restricted according to operational need.
• Transport security: HTTPS and appropriate server controls are used to protect data in transit.
• Infrastructure protection: technical and organizational controls may include firewalls, logging, monitoring and abuse prevention.
• Incident response: suspected security incidents may be investigated and handled according to applicable requirements.

No online service can guarantee absolute security. Users should also protect their own passwords and devices.

Some service providers may process data outside the Netherlands or outside the European Economic Area. Where legally required, appropriate safeguards should be used for such transfers.

These safeguards may include an adequacy decision, contractual protections or other legally recognized transfer mechanisms, depending on the provider and destination.

Depending on applicable law and the circumstances, you may have rights concerning your personal data.

• Access: request information about personal data we process about you.
• Correction: ask us to correct inaccurate or incomplete personal data.
• Deletion: request deletion where the legal conditions for erasure are met.
• Restriction: request that certain processing is limited in qualifying circumstances.
• Objection: object to certain processing based on legitimate interests or direct marketing.
• Portability: request eligible personal data in a structured, commonly used format where this right applies.
• Withdraw consent: withdraw consent where processing relies on consent.

To exercise a privacy right, contact support@request.parts. We may need to verify your identity before completing certain requests.

Request Parts may use essential, analytics, marketing, advertising and consent-management technologies depending on the services enabled and your cookie choices.

You can learn more and manage your choices in the Cookie Policy and Cookie Preferences Center.

Request Parts is intended as a parts sourcing and marketplace platform and is not designed specifically for children. Users should only create accounts or submit personal information where they are legally permitted to do so.

We may update this Privacy Policy when platform features, processing activities, service providers or legal requirements change.

Material changes may be communicated through the website, account area or email where appropriate.

Last updated: September 15, 2026.