Privacy Policy

Last updated: 27 April 2026

This Privacy Policy explains how Indspare Wholesale and Retail Trading Co. W.L.L. ("IndSpare", "we", "us", "our") collects, uses, shares, and protects information about visitors and customers of indspare.com (the "Website").

We respect your privacy. We collect only the data we genuinely need to operate the Website, fulfil orders, and improve our services — and we are honest about what we do with it.

1. Who We Are

Indspare Wholesale and Retail Trading Co. W.L.L. is a Kuwait-domiciled industrial spare parts supplier, trading as IndSpare.

For privacy enquiries, write to [email protected] with "Privacy" in the subject line.

2. What Information We Collect

2.1 Information you provide directly:

• Account registration: name, email, phone, company name, billing and delivery address
• Order data: items purchased, payment information (we do NOT store full card numbers — see clause 4)
• Communications: messages you send via the contact form, email, or WhatsApp
• Support and return correspondence: photos, videos, and order details you submit when raising a defect or RMA claim

2.2 Information collected automatically when you visit the Website:

• Server log data: IP address, user agent, referring URL, request timestamps, response codes
• Usage data: pages viewed, products clicked, search queries, time on site, device and browser type
• Cookie data: see clause 5 for details

We do NOT collect special-category data such as government ID numbers, biometric data, religious beliefs, or political opinions.

3. Why We Collect It

We use the information described in clause 2 for the following purposes:

• To create and maintain your customer account
• To process and fulfil your orders, including payment, shipping, customs documentation, and returns
• To respond to your enquiries and provide customer support
• To send order confirmations, shipping notifications, and administrative messages required to perform the contract
• To send marketing emails about products and offers, where you have given consent or where permitted by law for similar products you have already purchased (you can unsubscribe at any time)
• To detect and prevent fraud, abuse, and security incidents
• To improve the Website, our product catalogue, and our search experience
• To comply with our legal and regulatory obligations under Kuwait law

4. Third Parties We Share Data With

We share data only with service providers who help us operate the business. We do not sell personal data to anyone.

• Hetzner Online GmbH (Germany) — hosts our application servers. Receives all website data processed during normal operation.
• Cloudflare, Inc. (USA) — content delivery network, DDoS protection, web application firewall. Receives server log data, IP address, request metadata.
• Tap Payments (Kuwait) — card payment processing. Receives order amount, customer name, billing email, billing address. We do NOT see or store full card numbers — these are entered directly on Tap's secure form.
• DHL Express — international courier. Receives delivery name, address, phone, order weight and contents declaration.
• Google LLC (USA) — Google Analytics 4 and Google Ads for website analytics and advertising measurement. Receives pseudonymous usage data and IP-anonymised visit data.
• Algolia (USA / EU) — on-site search infrastructure. Receives search queries and anonymous usage data.
• OpenAI, L.L.C. (USA) — generates anonymous text embeddings of our product catalogue for AI-assisted search. We do NOT send personal customer data to OpenAI; only product catalogue text.
• SendGrid / Twilio (USA) — transactional email delivery (order confirmations, RMA notifications). Receives customer email address, order metadata, message content.
• Manufacturer warranty teams — only when you file a warranty claim. Receives order number, customer contact, defect details.

We may also disclose information where required by law (court order, regulatory request, lawful authority) or where reasonably necessary to protect our legal rights.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Website, remember your preferences, and measure performance.

• Strictly necessary cookies — required for the Website to function (e.g. login session, shopping cart, CSRF protection). Cannot be disabled.
• Analytics cookies — Google Analytics 4 measures aggregate Website usage. IP addresses are anonymised. Data is retained for 14 months by default.
• Advertising cookies — Google Ads conversion tracking measures whether visitors arriving from a Google Ads click subsequently make a purchase. We use this only to evaluate ad performance.
• Search cookies — Algolia uses cookies to improve search relevance and detect duplicate searches.

You can disable cookies in your browser settings. Disabling strictly necessary cookies will prevent the Website from working correctly. Disabling analytics or advertising cookies will not affect your ability to browse or place orders.

6. International Data Transfers

Several of our service providers (Cloudflare, Google, OpenAI, SendGrid) process data in the United States, the European Union, or other countries outside Kuwait.

Where data is transferred outside Kuwait, we rely on the service provider's own contractual safeguards (typically standard contractual clauses or equivalent) to ensure data is handled securely. Customers should be aware that data processed by these providers may be subject to the laws of the relevant country.

If you would like more information about a specific transfer, write to [email protected].

7. How Long We Keep Your Data

• Customer account data: until you request account deletion, or 5 years of inactivity (whichever is sooner)
• Order and invoice records: 7 years from the date of the order, to meet Kuwait commercial-law record-keeping obligations
• Server log data (IP, request logs): 90 days
• Cloudflare access logs: as per Cloudflare's standard retention (typically 7–30 days)
• Google Analytics aggregated data: 14 months
• Marketing email subscription: until you unsubscribe
• Support and return correspondence: 3 years from the close of the case

When we no longer need data, we either delete it or anonymise it so it can no longer be linked to you.

8. Your Rights

You have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate or incomplete data
• Deletion — request that we delete your data, subject to our legal obligation to keep order records (clause 7)
• Restriction — ask us to limit how we use your data while a query is resolved
• Objection — object to direct-marketing use of your data (we will always honour this immediately)
• Withdrawal of consent — where we rely on consent (e.g. marketing emails), you can withdraw it at any time without affecting earlier processing
• Portability — request your data in a machine-readable format

Exercise these rights by writing to [email protected]. We will respond within 30 days. We may need to verify your identity before acting on a request.

These rights are provided as a matter of IndSpare's policy. Kuwait does not currently have a comprehensive data-protection statute equivalent to GDPR, but IndSpare voluntarily applies these rights to all customers regardless of jurisdiction.

9. Security

We protect your data using a combination of:

• HTTPS/TLS encryption for all Website traffic
• Cloudflare web application firewall and DDoS protection
• Tap Payments' PCI DSS-certified card processing (we never see your full card number)
• Application-level access controls and audit logging
• Regular security updates to our infrastructure

No system is perfectly secure. If you suspect unauthorised access to your account, contact [email protected] immediately.

10. Children

The Website is intended for professional B2B buyers. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, please contact [email protected] and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated by an on-site notice or by email to registered customers.

12. Contact

For any privacy enquiry, please contact: