Privacy Policy
Plain-language summary: we collect what we need to sell you the right part and get it to you. We share your name, address and phone with the carrier that delivers your order, and your payment goes through a payment processor. We only send marketing emails if you tick the box to say yes, and you can stop them at any time. We do not sell your personal information.
1. Who is responsible
1001291506 Ontario Inc., operating FastAutoParts.ca, 76 Sherry Road, Unit H, Scarborough, Ontario M1L 2J9, is responsible for your personal information. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for customers in Quebec, the Act respecting the protection of personal information in the private sector.
Privacy Officer: write to "Privacy Officer, 1001291506 Ontario Inc." at the address above, or call or text 647-702-8019 and ask for the Privacy Officer.
2. What we collect
| Information | When |
|---|---|
| Name, email, phone | Account sign-up, checkout, when you contact us |
| If you choose "Continue with Google": your Google account ID, name and email address, and whether Google has verified that email. We never see your Google password. | When you sign in with Google |
| Shipping address and postal code | Checkout (postal code also for the shipping estimate) |
| Vehicle details and VIN | When you pick "My vehicle", decode a VIN, or add it to an order for a fitment check |
| Order history, saved carts, notes you add | When you use those features |
| Payment status (paid / unpaid, method, last 4 digits if the processor gives them) | Payment. We never receive or store your full card number; the payment processor collects it directly. |
| Messages with us (email, text, phone notes) | When you contact us |
| Technical data: IP address, browser type, time of visit | Every visit (server logs and security), and when you accept our terms |
| Proof of your choices: which version of our terms you accepted, your marketing consent and the exact wording you saw | Sign-up, checkout, unsubscribe |
A VIN identifies a vehicle, not a person, but together with your name it can be personal information, so we protect it the same way. We use your VIN only to check fitment and source parts.
We list the providers we use or plan to use. When we add or change one, we update this page first.
3. Why we use it
- To process and confirm your order, check fitment, take payment, ship it or prepare it for pickup, and handle returns, warranty claims and core refunds.
- To contact you about your order (confirmations, payment requests, shipping and status updates). These are service messages, not marketing.
- To run your account, saved carts and "My vehicle" features.
- To prevent fraud and abuse and keep the site secure.
- To keep records the law requires (tax, accounting, consumer-protection and consent records).
- Marketing, only with your consent: deals, parts news and back-in-stock emails if you ticked the marketing box.
We do not use your information for any other purpose without asking you first, unless the law requires or allows it.
4. Consent and marketing
By creating an account or placing an order you consent to the uses in section 3 that are needed to provide the service. Marketing is separate: the marketing box is never ticked for you, and saying no does not affect your order. Every marketing email has an unsubscribe link and our contact details; we act on unsubscribes within 10 business days (usually immediately). You can also withdraw consent by calling or texting 647-702-8019. Under Canada's Anti-Spam Legislation (CASL), a purchase from us may allow us to send you commercial messages for up to two years; if you tell us you do not want them, we stop.
5. Who we share it with
We share personal information only with the service providers below, only what each one needs, and only to provide that service to us. We do not sell or rent your personal information.
| Who (where the data is held) | What they receive | Why |
|---|---|---|
| Shipping carriers and freight companies (for example Canada Post, Purolator, Canpar, UPS, FedEx, ICS, Nationex, Day & Ross) and shipping platforms that buy labels for us (for example Freightcom / ClickShip). Canada; cross-border carriers may also use the United States | Your name, delivery address, postal code, phone number and, for delivery notices, your email; package size, weight and contents description | To deliver your order, send tracking and delivery notices, and handle delivery problems and claims |
| Payment processors (Helcim, Canada, or Stripe, Canada and United States) and your bank for Interac e-Transfer | Your name, email, billing details and payment details, which you give to the processor directly; the order amount and number | To take payment, prevent fraud, and process refunds and chargebacks |
| Parts suppliers (when we order a part to fill your order) | Part numbers, vehicle details and VIN. Your name and address only if the supplier ships directly to you | To source the right part and, if needed, deliver it |
| Email and text-message providers (Brevo for marketing email, European Union; our mail and hosting provider, Canada or United States) | Your name, email or phone number and the message content; for marketing, your consent status | To send order messages and, with consent, marketing |
| Google (Google LLC, for "Continue with Google" sign-in only. United States) | Google learns that you signed in to FastAutoParts.ca. We do not send Google your orders, vehicles or address | To let you sign in without a password. Google's own privacy policy covers what Google does |
| Website hosting and IT providers (Canada or United States) | All website data is stored on their servers | To run the website and keep backups |
| Accounting and professional advisers (bookkeeper, accountant, lawyer, insurer) | Order and payment records | Tax filing, accounting, legal advice and claims |
| Authorities | Only what the law requires | When we are legally required, for example a court order, or to prevent fraud |
Our service providers must protect your information under contract and may not use it for their own purposes. If we sell the business, customer records may be transferred to the buyer under the same protections.
6. Information stored outside Canada
Some of our providers store or process information outside Canada and outside Quebec, for example in the United States (payment, shipping platforms, hosting) or the European Union (email). While it is there, it is protected by our contracts but may be accessed by courts, law enforcement and national security authorities of that country under its laws. Before using a provider outside Quebec for Quebec customers' information, we assess whether the information will be adequately protected.
7. Security, and incidents at third parties
We protect your information with safeguards suited to its sensitivity: passwords are stored only as salted hashes, access to the admin tools is password-protected and limited to staff who need it, connections to the live site are encrypted, and we do not store card numbers.
No website or service provider can promise perfect security. If a privacy breach involving your information creates a real risk of significant harm, whether it happens on our systems or at one of our service providers, we will notify you and the Office of the Privacy Commissioner of Canada (and, for Quebec residents, the Commission d'accès à l'information) as the law requires, keep a record of it, and tell you what you can do to protect yourself. We remain accountable under privacy law for information we transfer to our providers; this policy does not ask you to give up any right you have under that law.
Providers you deal with directly (for example your own account with a carrier, your bank, or a payment app) handle your information under their own privacy policies, and we do not control those services.
8. How long we keep it
| Record | Kept for |
|---|---|
| Orders, invoices, payment and tax records | 7 years after the end of the tax year (Canada Revenue Agency requires 6) |
| Account details | Until you ask us to close the account, then deleted or anonymised, except what the order records above need |
| Saved carts and saved vehicles | Until you delete them or close your account; saved vehicles on the "My vehicle" bar stay only in your browser |
| Terms acceptance and marketing consent records | As long as the consent lasts plus 3 years |
| Server logs | Up to 90 days, unless needed to investigate a security problem |
| Guest checkout details | With the order record (above); not used for marketing without consent |
9. Cookies and browser storage
We use only the cookies the store needs to work: a cart cookie, a login session cookie (if you log in), and a security cookie for staff. Your saved vehicles and, if you ticked "remember my details", your contact details are kept in your own browser's storage, not on our servers. If you use "Continue with Google", the button is loaded from Google on the Account page and Google may use its own cookies for that sign-in under Google's privacy policy. We do not use advertising or cross-site tracking cookies. If we add analytics or advertising tools, we will update this policy first and ask for your consent where the law requires it (it will be off by default for Quebec residents).
10. Your rights
- Access and correction: ask to see the personal information we hold about you and have it corrected. We answer within 30 days.
- Withdraw consent: for marketing at any time; for other uses, subject to legal or contract limits (for example we cannot ship without an address).
- Deletion: ask us to delete your account. We delete what we can and keep only what the law requires.
- Quebec residents may also ask for de-indexing and for their information in a portable format, as Quebec law allows.
- Complaints: contact our Privacy Officer first. You can also complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d'accès à l'information (cai.gouv.qc.ca).
11. Children
The store is not meant for children and we do not knowingly collect information from anyone under 16.
12. Changes
We will post any change here with a new version date. If a change is significant, we will tell account holders and ask for consent again where the law requires it.