Skip to content
Navway, home

Policies

Privacy notice

What Navway Ltd collects when you shop with us, why, who we share it with, and your rights under UK data protection law.

What we collect and why

To deliver your order we need your name, address, email address and, if you give it, your phone number. If you create an account we keep your orders, saved addresses and wishlist with it.

To confirm · Legal adviser

The controller's identity and contact details, the lawful basis for each use, and retention periods.

Your car and its registration

When you enter a registration to find parts for your car, we send it to the DVLA's Vehicle Enquiry Service and the DVSA's MOT History API, which return the make, model and year. We use the answer only to show what fits your car.

We never write a registration to our logs. It is kept in a cookie on your device, with the make, model and year, for up to 30 days, and erased when you choose “Change vehicle”. Lookup results are cached for up to 30 days under a scrambled (hashed) key, never under the registration itself.

Who we share it with

Payments are handled by Stripe: we never see or store your card details. Our warehouse partner, XTRONS, receives what it needs to pack and send your parcel, and our email provider sends order and delivery emails. The DVLA and DVSA receive a registration you enter, as described above.

If you ask to hear when an item is back in stock, we keep your email address only for that alert and delete it once the alert is sent, or after 90 days.

To confirm · Legal adviser

The full list of processors, and any transfers outside the UK.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, and object to marketing at any time. You can also complain to the Information Commissioner's Office (ICO).

To confirm · Legal adviser

How to make a request, and the final privacy notice wording.