Privacy Policy

Specter Parts operates specterparts.ca — an automotive parts sourcing and fulfillment platform based in Montreal, Quebec, Canada. We are responsible for the personal information we collect, use, and disclose in connection with our services.

Privacy inquiries: privacy@specterparts.ca

We collect the following categories of personal information:

Contact information — name, email address, phone number.

Vehicle information — year, make, model, trim, and VIN (Vehicle Identification Number) when provided.

Shipping address — street address, city, province/territory, postal code.

Order information — parts requested, quote history, invoices.

Usage data — pages visited, search terms, browser type, and session identifiers, collected automatically via essential cookies.

Payment information — We do not collect or store payment card numbers. All payment data is submitted directly to and processed by our PCI-DSS Level 1 compliant payment processor. We receive only a transaction confirmation.

We use personal information to:

Prepare and deliver part quotes and invoices.

Fulfill orders and arrange shipping with our supplier network.

Communicate order status, shipping updates, and support responses.

Improve our website, search tools, and sourcing accuracy.

Meet legal, tax, and regulatory obligations.

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

We share personal information only as necessary to operate our services:

Suppliers and sourcing partners — to source and fulfill your order. Suppliers receive only the information required to fulfill the specific order (part specification, shipping address).

Shipping carriers — to arrange and track delivery.

Payment processor — to process your payment. Payment data is transmitted directly to the processor; we do not act as an intermediary for cardholder data.

Professional advisors — lawyers, accountants, or auditors, on a confidential and need-to-know basis.

We do not sell, rent, or trade personal information to third parties for any purpose.

Online payments on specterparts.ca are processed by a third-party payment processor certified at PCI-DSS Level 1 — the highest standard for payment card security.

Specter Parts never sees, stores, or transmits your full card number, CVV, or expiry date. If you have questions about how your payment data is protected, please refer to our payment processor's privacy and security documentation.

We use only essential cookies required for the secure operation of our website — including session management and CSRF protection tokens. These cookies do not track you across other websites and cannot be used to identify you outside of your active session.

We do not use third-party advertising, analytics, or tracking cookies. No data is shared with advertising networks.

You may disable cookies in your browser settings. Some features (such as maintaining your session during checkout) may not function correctly without them.

We retain personal information for as long as necessary to fulfill the purpose for which it was collected, subject to the following:

Order and financial records are retained for a minimum of seven (7) years to meet Canadian tax and accounting obligations.

Lead and inquiry data (quote requests that did not result in an order) is retained for up to two (2) years, then deleted.

Marketing opt-outs are honored immediately and permanently.

Under PIPEDA and Quebec Law 25, you have the right to:

Access — request a copy of the personal information we hold about you.

Correction — request correction of inaccurate or incomplete information.

Withdrawal of consent — withdraw consent to non-essential processing at any time, without affecting the lawfulness of prior processing.

Deletion — request deletion of your personal information, subject to our legal retention obligations.

Portability — request your information in a structured, commonly used, machine-readable format (Quebec Law 25 right).

To exercise any of these rights, contact us at privacy@specterparts.ca. We will respond within 30 days, as required by law. If you are unsatisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) or the Commission d'accès à l'information du Québec (CAI).

We implement industry-standard technical and organizational safeguards to protect personal information against unauthorized access, loss, alteration, or disclosure. These include encrypted data transmission (TLS), access controls, and regular security reviews.

Payment data is never handled by our servers — it is processed exclusively by our PCI-DSS Level 1 certified payment processor.

In the event of a privacy breach that poses a real risk of significant harm, we will notify affected individuals and the appropriate regulatory authority as required by law.

We may update this Privacy Policy to reflect changes in our practices or applicable law. The current version, including its effective date, is always available at specterparts.ca/privacy.

For material changes, we will provide notice by email (if we hold your address) or by a prominent notice on our website.

Privacy Officer · Specter Parts

Email: privacy@specterparts.ca

General inquiries: info@specterparts.ca

For formal complaints, you may also contact:

Office of the Privacy Commissioner of Canada — www.priv.gc.ca

Commission d'accès à l'information du Québec — www.cai.gouv.qc.ca