Privacy Policy

The data controller is MVAutoparts LTD STI, Tahtakale Mah. Pazar Yeri İçi Küme Evleri No:13, Nilüfer, Bursa, Türkiye. For any question about this policy or about your personal data, write to the contact address above or use the contact details published on this website.

Through the wholesale enquiry form we collect: full name, company name, country, business email address, phone or WhatsApp number, business type, the products and part numbers you are interested in, order volume, preferred Incoterms, your message, your preferred language and the language of the page. We also record technical context: the referring page, UTM campaign parameters and the IP address used for anti-spam rate limiting. Through the catalogue request form we collect name, company, country and business email address. In the online consultant chat we process the messages you send and any contact details you choose to share.

We use your data solely to respond to your wholesale enquiry, to send you the requested catalogue, to prepare a quotation and to maintain the resulting business relationship. The legal basis is the steps taken at your request prior to entering into a contract, and our legitimate interest in answering business enquiries addressed to us. Anti-spam rate limiting rests on our legitimate interest in protecting the service. Analytics and session-replay cookies are used only with your consent, which you may withdraw at any time.

Enquiries are stored in our managed Supabase (PostgreSQL) database, accessible only to authorised staff. When a new enquiry arrives, a notification containing the details you submitted is sent to an internal Telegram channel of our sales team and, where configured, to an internal company email address. We do not sell your data and we do not share it with third parties for advertising. Processors acting on our behalf are our database and hosting provider, our email delivery provider, Telegram (internal notifications) and, subject to your consent, Google Analytics and Yandex.Metrica.

Our service providers may process data outside your country, including outside the European Economic Area. Such transfers are covered by the providers' standard contractual clauses or an equivalent safeguard.

Enquiry records are kept for 3 years from the last contact, after which they are deleted or anonymised. Anti-spam rate-limit records are kept for a short technical period only. Analytics data is retained according to the retention setting of the analytics provider.

You may request access to your data, correction, deletion, restriction of processing, a portable copy, and you may object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting prior processing. Send your request to the controller address above; we answer within one month. You also have the right to lodge a complaint with your national data protection authority.

The site sets no analytics or tracking cookie before you consent. A single strictly necessary entry stores your cookie choice in your browser so we do not ask again. If you accept analytics, Google Analytics 4 is loaded with IP anonymisation; if you accept behaviour analysis, Yandex.Metrica with Webvisor is loaded. Rejecting loads nothing at all. You can change your choice at any time from the cookie preferences link in the footer.

This is a business-to-business website. It is not directed at children and we do not knowingly collect data from them.

We may update this policy to reflect changes in our processing or in the law. The current version is always published on this page.