Privacy Policy

Headlane Ltd (t/a 2repair.parts)
Last updated: [11/02/2026]

1. Who We Are

Headlane Ltd
Company Number: 07514505

Registered Address:
Unit 13, Clock Tower Industrial Estate
Clock Tower Road
TW7 6GF
United Kingdom

Telephone: 02087497777
Email: info@headlane.co.uk
Website: https://2repair.parts

For the purposes of UK data protection law, Headlane Ltd is the data controller unless otherwise stated.

2. The Personal Data We Collect

Information You Provide

We may collect:

Full name\
Billing address\
Delivery address\
Email address\
Telephone number\
Order details\
Account login details (if applicable)\
Communications sent to us

Transaction Data

Purchase history\
Payment details (processed securely by third-party payment providers)

We do not store full payment card details.

Technical & Usage Data

We use Google Analytics 4 (GA4) to collect limited technical data, including:

IP address (anonymised where applicable)\
Browser type and version\
Device type\
Pages visited\
Time spent on pages\
Referring website

We do not use advertising tracking, behavioural profiling, or third-party marketing pixels.

3. Lawful Basis for Processing

We process personal data under the following lawful bases:

Contractual Necessity

To process and fulfil orders\
To deliver products\
To provide customer support\
To manage returns and warranties

Legal Obligation

To maintain accounting records\
To comply with tax obligations\
To respond to lawful authority requests

Legitimate Interests

To improve website functionality\
To analyse website performance\
To prevent fraud and misuse\
To manage business operations

Consent (where applicable)

For marketing communications where you have opted in.

You may withdraw consent at any time by contacting us.

4. How We Use Your Information

We use personal data to:

Process orders and payments\
Arrange shipping and delivery\
Respond to enquiries\
Improve our website\
Comply with legal obligations\
Prevent fraud

We do not sell personal data.

5. Cookie Policy

This website uses cookies in accordance with the Privacy and Electronic Communications Regulations (PECR).

What Are Cookies?

Cookies are small text files placed on your device when you visit a website.

Types of Cookies We Use

Strictly Necessary Cookies

These are required for:

Website functionality\
Shopping cart operation\
Security

These cannot be disabled.

Analytics Cookies (Google Analytics 4)

We use Google Analytics 4 (GA4) to understand how visitors use our website and improve performance.

GA4 may collect:

Device and browser information\
General location data (not precise location)\
Page interactions

Where required by law, analytics cookies are only deployed after consent via our cookie banner.

You may:

Manage cookie preferences via our banner\
Disable cookies in your browser settings\
Use Google's Analytics opt-out tools

We do not use advertising cookies or third-party marketing trackers.

6. Sharing Your Personal Data

We may share personal data with:

Payment service providers\
Courier and delivery companies\
Website hosting providers\
IT support providers\
Professional advisers\
HMRC or regulators where legally required

All third parties are required to process data securely and lawfully.

We do not sell or rent personal data.

7. International Transfers

Some service providers (such as Google) may process data outside the United Kingdom.

Where this occurs, we ensure appropriate safeguards are in place, including:

UK adequacy regulations\
International Data Transfer Agreements (IDTAs)\
Standard Contractual Clauses

8. Data Retention

We retain personal data only for as long as necessary:

Financial and transaction records: 6 years\
Customer correspondence: up to 3 years\
Analytics data: in line with GA4 retention settings

After retention periods expire, data is securely deleted or anonymised.

9. Data Security

We implement appropriate technical and organisational measures, including:

Secure hosting\
SSL encryption\
Restricted access controls\
Secure payment processing\
Regular software updates

However, no method of transmission over the internet is completely secure.

10. Your Rights Under UK GDPR

You have the right to:

Access your personal data\
Request correction of inaccurate data\
Request erasure\
Restrict processing\
Object to processing\
Data portability\
Withdraw consent (where applicable)

To exercise your rights, contact:

Email: info@headlane.co.uk

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
https://ico.org.uk

11. Marketing Communications

We will only send marketing emails where:

You have opted in; or\
We are permitted to do so under PECR soft opt-in rules

You may unsubscribe at any time.

12. Children's Data

Our services are not directed at children under 16. We do not knowingly collect personal data from children.

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy policies.

14. Data Processing Addendum (Where We Act as Processor)

In limited circumstances, Headlane Ltd may act as a data processor on behalf of business customers.

Where we process personal data on behalf of a controller:

We process personal data only on documented instructions from the controller.\
We ensure confidentiality of personnel.\
We implement appropriate technical and organisational security measures.\
We assist the controller in complying with UK GDPR obligations, including:
- Data subject rights\
- Breach notifications\
- Data Protection Impact Assessments (DPIAs)\
We delete or return personal data at the end of services unless legally required to retain it.\
We permit reasonable audits where required.

Sub-processors may be appointed where necessary, subject to appropriate safeguards.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last updated" date.