Updated 6 October 2026
How we handle purchases, support enquiries and optional website analytics.
NEXROUTE HUB UK LIMITED, trading as BYD Bodykits, is the controller for the business processing described here. Company number 17445990; contact address Unit 16 The Old Mill, 682–686 Retford Road, Sheffield, England, S13 9WG. For privacy questions or requests, email info@jgsautoparts.com or call +44 7523 870203.
We use your name, email, phone number, billing and delivery addresses, product selections, payment status and order reference to process purchases, fulfil delivery, provide support and handle returns. The lawful basis is performing our contract with you or taking steps at your request before a purchase. Necessary checkout details are required to fulfil an order; without them we cannot complete it.
We use relevant transaction records to meet accounting and legal obligations, and retain information needed to investigate complaints and establish or defend claims based on our legitimate interest in resolving disputes. We do not store full card numbers. Card details are entered on Stripe's hosted payment page.
Optional analytics is off unless you accept it. Refusing or withdrawing permission does not stop shopping, payment or support. You can reopen Privacy choices in the footer and reject optional analytics at any time.
With consent, analytics can process viewed pages and products, basket and checkout interactions, landing path, referring domain, campaign tags, device category, public IP address, approximate country/region/city and network provider. Vercel Analytics measures site usage. BotID distinguishes automated activity on the analytics endpoint; IPinfo may look up the network associated with your IP. Private Telegram notifications can contain the activity, public IP and approximate location. We use this information to understand interest and improve the website, based on your consent. We do not use it for personalised advertising or automated eligibility decisions.
Your basket is stored in local storage on your device until you remove it or clear site data. Your privacy choice is stored in local storage and an analytics-preference cookie for up to one year, or until you change it or clear site data. These support functions are separate from optional analytics.
Hosting and payment providers process technical information such as IP addresses, request details and security signals to deliver and protect their services. Our legitimate interest is maintaining a secure, functioning store and preventing abuse; providers also have their own legal and security responsibilities.
Vercel hosts the site and, if accepted, provides Analytics and BotID. Stripe processes payments, customer and shipping details and transaction records. Neon stores our order and accounting records for fulfilment and administration behind the protected merchant dashboard. Our authorised staff and delivery providers use information needed to fulfil and support your order. Telegram receives internal order notifications including contact and delivery details; optional visitor notifications are sent only with analytics consent. IPinfo receives a public IP for optional network classification.
If you choose to use WhatsApp, that service processes your message and account information under its own privacy terms. We only use enquiry information for your request and related support.
Provider information: Vercel, Stripe, Neon, IPinfo, Telegram and WhatsApp.
We keep order and accounting records for the periods needed to fulfil orders and meet applicable tax, accounting and legal obligations. Support and dispute records are kept while needed to resolve the matter and protect legal rights. Optional activity records are retained only while needed to assess website performance, after which they should be deleted or anonymised. You can contact us for information about records linked to you and request deletion where applicable.
These providers may process information outside the UK and your country of residence. Vercel and Stripe publish their data-processing and international-transfer arrangements. Other services have their own processing locations and privacy terms. Contact us for details of the safeguards applicable to your information and how to obtain a copy. We do not promise that all processing stays in the UK.
Depending on the processing and applicable law, you may request access, correction, erasure, restriction or portability of your personal data. You may object to processing based on legitimate interests and withdraw consent for optional analytics. Withdrawal does not affect processing lawfully carried out before it. Some records may need to be retained to meet legal obligations.
Contact us using the email, phone or postal address above. You may also complain to the UK Information Commissioner's Office or the data-protection authority where you live. We do not make decisions with legal or similarly significant effects on you using solely automated processing.