Privacy Policy
Headlane Ltd (t/a 2repair.parts) Last updated: 03/04/2026
1. Who We Are
Headlane Ltd
Company Number: 07514505
Registered Address:
Unit 13, Clock Tower Industrial Estate
Clock Tower Road
TW7 6GF
United Kingdom
For the purposes of UK data protection law, Headlane Ltd is the data controller unless otherwise stated.
2. The Personal Data We Collect
Information You Provide
We may collect:
- Full name
- Billing address
- Delivery address
- Email address
- Telephone number
- Order details
- Account login details (if applicable)
- Communications sent to us
Transaction Data
- Purchase history
- Payment details (processed securely by third-party payment providers)
Important: We do not store full payment card details on our servers.
Technical & Usage Data
We use Google Analytics 4 (GA4) to collect limited technical data, including:
- IP address (anonymised where applicable)
- Browser type and version
- Device type
- Pages visited and time spent on pages
- Referring website
We do not use advertising tracking, behavioural profiling, or third-party marketing pixels.
3. Lawful Basis for Processing
We process personal data under the following lawful bases:
Contractual Necessity
- To process and fulfil orders
- To deliver products
- To provide customer support
- To manage returns and warranties
Legal Obligation
- To maintain accounting records
- To comply with tax obligations
- To respond to lawful authority requests
Legitimate Interests
- To improve website functionality
- To analyse website performance
- To prevent fraud and misuse
- To manage business operations
Consent
For marketing communications where you have opted in. You may withdraw consent at any time by contacting us.
4. Cookie Policy
This website uses cookies in accordance with the Privacy and Electronic Communications Regulations (PECR).
Types of Cookies We Use
Strictly Necessary Cookies
These are required for website functionality, shopping cart operation, and security. These cannot be disabled.
Analytics Cookies (Google Analytics 4)
We use GA4 to understand how visitors use our website. Where required by law, analytics cookies are only deployed after consent via our cookie banner.
You may:
- Manage cookie preferences via our banner
- Disable cookies in your browser settings
- Use Google's Analytics opt-out tools
5. Sharing Your Personal Data
We may share personal data with:
- Payment service providers
- Courier and delivery companies
- Website hosting and IT support providers
- Professional advisers
- HMRC or regulators where legally required
All third parties are required to process data securely and lawfully. We do not sell or rent personal data.
6. International Transfers
Some service providers (such as Google) may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, including:
- UK adequacy regulations
- Standard Contractual Clauses (SCCs)
7. Data Retention
We retain personal data only for as long as necessary:
- Financial and transaction records: 6 years
- Customer correspondence: Up to 3 years
- Analytics data: In line with GA4 retention settings
8. Your Rights Under UK GDPR
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request erasure
- Restrict or object to processing
- Data portability
- Withdraw consent
To exercise your rights, contact: info@headlane.co.uk
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): https://ico.org.uk
9. Data Processing Addendum (B2B)
In limited circumstances, Headlane Ltd may act as a data processor on behalf of business customers. Where we process data on behalf of a controller:
- We process data only on documented instructions.
- We ensure confidentiality and implement technical security measures.
- We assist the controller in complying with UK GDPR obligations.
- We delete or return data at the end of services.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last updated" date.