Privacy Policy

Cluster Auto Parts Trading L.L.C. (“Cluster Auto Parts”, “we”, “us”, or “our”) operates the Cluster Auto Parts platform, a business-to-business platform for sourcing genuine, OEM, and aftermarket automotive parts. We are a UAE mainland-licensed business serving business customers and users, including users located outside the UAE.

This Privacy Policy explains how we handle personal information in connection with our storefront, customer accounts, trade-account applications, catalog and search features, vehicle/application search, wishlists, carts, RFQs, orders, support enquiries, communications, cookies, and related ClusterAP services.

Cluster Auto Parts is established in the United Arab Emirates but primarily operates as an international B2B automotive-parts platform. UAE data-protection requirements apply to our relevant processing, and additional privacy laws may apply depending on the customer, user, transaction, or jurisdiction involved.

This policy does not state that any particular foreign privacy law applies universally. Where another law applies, the rights and obligations under that law may supplement this policy.

The information we collect depends on how you use the platform and what you choose to submit. It may include:

• Account and identity information: name, business email address, phone number, account identifiers, and login or authentication information.
• Business and trade information: company name, business address, trade-licence or business-registration details, tax or VAT information where applicable, and information used to verify trade-account eligibility.
• Orders, RFQs, and transactions: requested products, quotation requests, order and transaction references, delivery or pickup details, billing or invoicing information, and payment status or other payment-related references.
• Communications: support enquiries, RFQ and quotation correspondence, account and order communications, contact-form submissions, and WhatsApp communications that we retain as part of our customer or business process.
• Technical and usage information: IP address, browser and operating-system information, device and session information, pages and features accessed, search queries, usage events, timestamps, error and diagnostic information, and security or logging information.
• Preferences and saved information: wishlists, saved vehicle or application selections, currency and other preferences, recent searches, and account-specific settings.

We do not store full payment-card information in the storefront.

• Directly from you: when you register, apply for a trade account, use checkout or RFQ forms, manage your account, save a wishlist or vehicle, contact support, or submit a contact enquiry.
• Automatically: through cookies, browser and device information, application and server logs, browser storage, analytics, search events, and technical diagnostics.
• From providers or business partners: where needed to support hosting, communications, security, order fulfilment, or other ClusterAP operations.

We use information to:

• Create and manage accounts and verify trade eligibility.
• Provide catalog, product-search, and vehicle-search features.
• Manage wishlists, carts, RFQs, quotations, and orders.
• Provide customer support and respond to enquiries.
• Send account, security, order, RFQ, quotation, and service communications.
• Maintain security and help prevent fraud, misuse, or abuse.
• Monitor and improve performance, features, and reliability.
• Troubleshoot technical problems and maintain business records.
• Meet legal, tax, accounting, regulatory, and contractual obligations.
• Send permitted, non-essential marketing communications where applicable.

We process personal information on the legal grounds permitted by applicable data-protection law. Depending on the circumstances, this may include your consent, processing necessary to provide requested services or perform a contract, compliance with legal obligations, protection of security and legitimate business operations where permitted, and other grounds permitted by applicable law.

We use cookies and similar browser technologies only as needed for the platform features described below. We do not operate an advertising tracker or a separate in-app cookie preference centre.

• Essential technologies: authentication and sessions, cart and checkout operation, security, request handling, and core platform functions. The application may also use session storage, local storage, and an interface-preference cookie.
• Functional technologies: currency, vehicle and search preferences, recent searches, guest sessions, and other saved settings.
• Analytics technologies: Vercel Analytics and application search events help us understand usage, performance, errors, and feature adoption.

You can manage or delete cookies and browser storage through your browser settings. Disabling essential technologies may affect core features.

We use service providers that support the operation of ClusterAP. Depending on the feature, they may process the following categories of information:

• Railway: application, API, and related infrastructure hosting for account, catalog, order, RFQ, and operational data.
• EmailJS: delivery of contact-form enquiries, including the name, email, phone, vehicle, and message fields submitted through that form.
• Vercel Analytics: website usage and performance analytics, including relevant technical and event data.
• WhatsApp: third-party business communications. Where those communications form part of our customer process, we may retain the conversation and related contact information.
• Telegram: the storefront may link to our configured Telegram channel. Following that link does not by itself give ClusterAP the user's Telegram profile information.

We do not sell personal information. Providers receive information only as needed for the services they perform and may process it under their own terms and privacy policies.

Some personal information may be processed in the United Arab Emirates and in other countries through our service providers, technology infrastructure, and business operations. Where personal information is transferred or made accessible across borders, we apply the safeguards and requirements required by applicable data-protection law.

We apply appropriate technical and organisational measures designed to protect personal information. These may include access controls, authentication and authorisation controls, secure transmission, appropriate encryption, monitoring and logging, backup and recovery controls, least-privilege access, and vendor or security controls. No system or method of transmission or storage can guarantee absolute security.

If we become aware of a personal-data breach, we will assess and respond to the incident in accordance with applicable law, including any required notifications to the relevant authorities and affected individuals.

We retain information for no longer than reasonably necessary for the purpose for which it was collected, taking into account business and contractual requirements, legal and regulatory obligations, tax and accounting requirements, dispute resolution, fraud and security requirements, and enforcement of agreements.

Different categories, including account information, trade-account records, orders, invoices, RFQs, support communications, security logs, analytics data, marketing preferences, and deleted accounts, may therefore have different retention periods. When information is no longer required, we take reasonable steps to delete or anonymise it, subject to applicable exceptions.

Where applicable under governing law, you may have rights to access personal information, receive information about its processing, correct inaccurate or incomplete information, request deletion or restriction, object to certain processing, withdraw consent where processing is based on consent, request data portability where applicable and technically feasible, and raise concerns about certain automated processing or profiling. You may object to direct marketing at any time.

These rights are subject to applicable law and may be limited where we are required or permitted to retain or process information for legal, regulatory, security, contractual, or other legitimate purposes.

Service communications may include account and security notifications, order confirmations, RFQ and quotation updates, service notifications, and important operational announcements. These communications are necessary for the relevant service and are not treated as optional marketing.

Marketing communications may include product announcements, offers, promotions, campaigns, or newsletters where permitted and applicable. You may opt out of non-essential marketing communications, but this does not unsubscribe you from essential transactional or security communications.

ClusterAP uses automated functions for search, filtering, pricing rules, saved preferences, usage analytics, and security controls. These functions are not intended to make decisions producing legal or similarly significant effects solely by automated means.

Our services are intended for businesses and business users and are not directed to children.

To submit a privacy request or privacy-related enquiry, contact us at estore@clusterautoparts.com. Please provide enough information for us to understand and verify your request. We may need to verify your identity before responding and will not request unnecessary identity documents.

If you have a concern about how we handle your personal information, please contact us first at estore@clusterautoparts.com so that we can investigate and address the issue. Where applicable, you may also have the right to contact the relevant data-protection authority.

We may update this Privacy Policy from time to time. Updated versions will be posted on this page with a revised “Last Updated” date. Where required by applicable law, we will provide additional notice of material changes.

Cluster Auto Parts Trading L.L.C.

For privacy questions, requests, or concerns regarding the processing of personal information:

Privacy email: estore@clusterautoparts.com

Registered business address: Cluster Auto Parts, Deira, Dubai, United Arab Emirates.

You may also contact us through the contact details provided on the Cluster Auto Parts website.