B2C Privacy Policy

Last Updated: 08/10/2026

Notice updated: 8 October 2026

This Privacy Notice ("Notice") explains how LKQ collects, uses, shares and protects personal data when you use our websites, mobile applications and other online services, create or use an account, buy products or services, contact us, or participate in an LKQ rewards or loyalty programme.

For this Notice, "LKQ", "we", "us" and "our" means the LKQ company that determines and controls how and why your personal data is processed in connection with the relevant Service ("Controller"). The relevant LKQ company will be identified in the website, app, order documentation, applicable terms or other customer-facing information for that Service.

The Controller of your personal data under this Notice is LKQ Electriq Limited, a company registered under company number (16647763) in England and Wales.

Where another LKQ company (being a separate legal entity) independently determines how and why it processes your personal data, it acts as a separate controller.

Privacy contact: Privacy Team, c/o Legal Department, LKQ, T2 Birch Coppice Business Park, Danny Morson Way, Dordon, Tamworth, England, B78 1SE; privacy@eurocarparts.com

Contents

1. Personal data we collect
2. How we use personal data and our lawful bases
3. Marketing, cookies and similar technologies
4. Rewards programmes, personalisation and profiling
5. How we share personal data
6. Information security
7. Retention
8. Your data protection rights
9. International transfers
10. Children
11. Changes to this Notice
12. Contact us and exercise your rights
13. Data protection complaints

1.1 Categories of personal data

Depending on how you interact with us, we may collect and process:

• Identity and contact data, such as your name, postal and delivery address, email address and telephone number.
• Account data, such as your username, password, security information, preferred store or branch and account settings.
• Order and transaction data, such as products or services purchased, amounts paid, order and delivery details, returns, refunds, warranties and customer-service history.
• Payment and financial data needed to process payments, refunds and, where applicable, credit or financing arrangements. Payment card information may be processed by our payment-service providers.
• Vehicle and preference data that you choose to provide, such as vehicle details, favourite stores or branches and product preferences.
• Rewards programme data, such as membership information, purchase history used for the programme, points or credits, rewards status, redemptions, promotion participation and programme preferences.
• Technical and usage data, such as IP address, browser type and version, device and operating-system information, language, referring URL, pages viewed, dates and times of access, time zone, HTTP status, data transferred and information collected through cookies or similar technologies.
• Location information derived from data such as IP address or postcode, and precise geolocation where we give any notice and obtain any choice required by law.
• Correspondence and customer-service data, such as emails, texts, letters, calls, live-chat messages, survey responses, complaints and feedback.
• Other information you choose to provide to us, including age or date of birth where relevant to a particular Service or eligibility requirement.

1.2 Where we obtain personal data

We collect personal data directly from you, from your use of our Services, and from transactions and interactions you have with us. Where relevant to a Service, we may also obtain personal data from service providers acting on our behalf or from third parties involved in a transaction, such as payment, delivery, fraud-prevention or identity-verification providers. If we receive personal data about you from another source, we will provide the additional information required by applicable law where required.

1.3 If you do not provide personal data

Providing personal data is generally voluntary. However, some information is necessary to create or administer an account, process and deliver an order, take payment, provide a requested service, satisfy legal requirements or administer a rewards programme. If you do not provide information that is necessary for those purposes, we may be unable to provide the relevant product, service or feature.

We only process personal data where we have a lawful basis. The basis depends on why we are using the information. Where we rely on legitimate interests, we consider whether our interests are balanced against your rights and interests.

3.1 Direct marketing

We may send you information about products, services, promotions, rewards and events where permitted by law. For email and text marketing, we will rely on your consent where consent is required. Where the law permits us to use the existing-customer "soft opt-in", we may send marketing about our own similar products or services when we obtained your details during a sale or negotiations for a sale and gave you a clear opportunity to opt out when we collected the details and in each subsequent message.

You can stop direct marketing at any time by using the unsubscribe link in an email, replying "STOP" to a marketing text where that option is provided, changing available account preferences, or contacting us using the details in section 12. We may still send non-promotional communications that are necessary to administer your account, orders, rewards membership, safety notices or other requested services.

3.2 Cookies and similar technologies

We use cookies and similar technologies for purposes such as operating and securing our Services, remembering settings and preferences, understanding use of our Services and, where permitted, analytics, personalisation and advertising. Technologies that require consent will only be used after the required consent has been obtained. You can manage relevant choices through the Cookie Consent Management Tool available from the cookie icon or cookie link on the relevant LKQ website.

More information about the cookies and similar technologies used on the LKQ Electriq website is available in its Cookie Policy: Cookies - LKQ Electriq. Other LKQ Services may provide their own cookie information where appropriate.

If you join an LKQ rewards or loyalty programme, we may process your identity and contact information, account information, relevant purchase history, branch or store preferences, points or credits, redemptions, programme activity, promotion participation and marketing preferences.

We use this information to administer membership; calculate, allocate, track and redeem points, credits or benefits; verify eligibility; provide programme information and updates; prevent and investigate misuse or fraud; maintain records and resolve disputes; and understand and improve programme performance.

Where permitted by law, we may analyse purchasing activity, programme participation, redemption patterns and preferences to personalise rewards, offers or communications and to understand how the programme is used. This is profiling, but we do not use this activity to make decisions based solely on automated processing that produce legal effects, or similarly significant effects, on you. If that changes, we will provide the information and safeguards required by applicable law.

We only share personal data where there is a lawful reason to do so and only to the extent appropriate for the relevant purpose. Recipients may include:

• Other LKQ companies where they provide shared services or otherwise need the information for a purpose described in this Notice. The role of each LKQ company will depend on the relevant processing activity.
• Service providers that support activities such as hosting, IT, e-commerce, payment processing, order fulfilment, delivery, customer service, communications, analytics, programme administration, reward fulfilment and fraud prevention. Where they act as our processors, they are required to process personal data on our instructions and under appropriate contractual protections.
• Professional advisers such as lawyers, accountants and auditors, regulators, tax authorities, courts, law-enforcement bodies and other public authorities where disclosure is lawful or required.
• Prospective or actual buyers, sellers or participants in a merger, acquisition, reorganisation, financing, sale of assets or similar corporate transaction, subject to appropriate protections.

We do not treat anonymised information that can no longer identify you as personal data. We may use and share properly anonymised or aggregated information for lawful purposes.

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Access to personal data is limited according to business need and appropriate security controls. No method of transmission or storage can be guaranteed to be completely secure, so we keep our measures under review and update them where appropriate.

We keep personal data only for as long as necessary for the purpose for which it was collected and for any additional period required or permitted by law. The period depends on the nature of the information, our relationship with you and relevant legal, accounting, tax, fraud-prevention, dispute-resolution and claims requirements.

• Account data is normally kept while the account remains active and for an appropriate period afterwards where required for legal, security, dispute or record-keeping purposes.
• Order, payment and transaction records are kept for the period needed to fulfil the transaction and meet applicable accounting, tax, warranty, fraud-prevention and legal-claims requirements.
• Customer-service correspondence is kept for the period reasonably needed to resolve the matter and support subsequent complaints, disputes or claims.
• Rewards programme information is normally kept while membership remains active and afterwards for the period needed to close the account, resolve points or reward issues, meet legal requirements, prevent fraud and handle disputes.
• Marketing preference and suppression information may be retained after you opt out so that we can respect and evidence your choice.
• Technical, usage and cookie-related information is retained in accordance with the periods described in the applicable cookie information and our operational retention requirements.

We may retain information for longer where necessary for litigation, regulatory enquiries, investigations or other legal requirements. When personal data is no longer required, we delete it or anonymise it in accordance with our retention processes.

Depending on the circumstances and applicable law, you may have rights to:

• ask for access to your personal data and information about how it is processed;
• ask us to correct inaccurate or incomplete personal data;
• ask us to erase personal data in certain circumstances;
• ask us to restrict processing in certain circumstances;
• receive certain personal data in a structured, commonly used and machine-readable format and ask for it to be transmitted to another controller where the legal conditions for portability apply;
• object to processing based on legitimate interests in certain circumstances; and
• object at any time to the processing of your personal data for direct marketing, including related profiling.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that was lawful before withdrawal. These rights are subject to conditions and exemptions in applicable law.

To exercise a right, use the Privacy Portal or contact us using section 12. We may need information to verify your identity and clarify your request. We will handle requests in accordance with applicable Privacy Laws.

We may transfer personal data outside the United Kingdom or European Economic Area where this is necessary for the purposes described in this Notice, including where an LKQ company or service provider is located or provides support from another country.

Where applicable law restricts such transfers, we use a permitted transfer mechanism and appropriate safeguards. For UK personal data, these may include UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. For EEA personal data, these may include an adequacy decision or the European Commission Standard Contractual Clauses. We also apply additional contractual, organisational or technical measures where required.

You can contact us using section 12 if you would like more information about the safeguards relevant to a transfer of your personal data.

Our consumer Services are intended for customers aged 18 or over and are not directed at children. We do not knowingly seek to collect personal data from children through those Services. If you believe a child has provided personal data to us, please contact us using section 12. If we operate a Service that is likely to be accessed by children, we will take account of children's needs and applicable data-protection requirements in the design and operation of that Service.

We may update this Notice from time to time to reflect changes in our Services, processing activities or legal requirements. We will update the date shown on this Notice and, where changes are material, take appropriate steps to bring them to your attention before the changes apply where required.

If you have questions about how we use personal data, or wish to exercise a data-protection right, you can contact us by email at privacy@eurocarparts.com or write to us by post at:

Privacy Team
c/o Legal Department
LKQ Group (UK) Limited
T2 Birch Coppice Business Park
Danny Morson Way
Dordon, Tamworth, England, B78 1SE

You may also use our Privacy Portal: https://privacyportal.onetrust.com/webform/3851eaea-a64c-4a2c-99e2-907f52d98962/c3ef20e8-d1bb-48d1-ac65-9de66499ac4c

The Privacy Portal is generally the quickest way to submit a privacy request; postal requests may take longer to reach the Privacy Team.

13.1 Complaining to us

If you have concerns about how we have handled your personal data or a data-protection request, please raise them with our Privacy Team by email, through the Privacy Portal, or by post using section 12. We will acknowledge and handle data-protection complaints in accordance with applicable legal requirements, investigate the issues raised and provide an outcome within the period required by law or otherwise without undue delay. Where there is a delay we will advise you in advance.

13.2 Complaining to a supervisory authority

You also have the right to complain to the competent data protection supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO): www.ico.org.uk. If EU data-protection law applies, you may also have the right to complain to the competent supervisory authority in the relevant Member State. We would appreciate the opportunity to address your concerns first, but you are not required to contact us before complaining to a supervisory authority.

In this Notice, "Privacy Laws" means applicable laws governing privacy, electronic communications and the processing of personal data, including, in the United Kingdom, the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003, in each case as amended from time to time, including by the Data (Use and Access) Act 2025; and, where applicable, the EU General Data Protection Regulation and relevant local data-protection and electronic-communications laws.