Blue Collar Parts — Privacy Policy
- Last updated
1. Who we are
This Privacy Policy describes how Blue Collar Parts Company, a Delaware corporation ("Blue Collar Parts," "BCP," "we," "us") collects, uses, discloses, and retains personal information in connection with the Blue Collar Parts service at https://shopbluecollarparts.com and any related applications (the "Service").
2. Who this policy covers
The Service involves two different groups of people, and this policy applies to both:
- Technicians. A maintenance or repair technician creates an individual BCP account, records maintenance and inspection work, and may purchase publication of a completed record. The Service is offered solely for business and professional use by maintenance and repair technicians in the conduct of their trade.
- Customers. A customer is a person or business whose contact information, equipment, and service history a technician enters into the Service. A customer does not need a BCP account for that information to be recorded or for a published record to be made available through a customer-specific claim link.
Most customer information reaches BCP because a technician entered it, not because the customer gave it directly to BCP.
3. Information we collect
3.1 Technician account information
We may collect:
- Account identifier issued by our authentication provider and the email address used to sign in
- Authentication tokens and server-side session cookies used to keep a technician signed in
- Full name, business name, and phone number
- Shipping address, postal information, and delivery notes
3.2 Customer information entered by a technician
We may collect:
- Customer display name and contact name
- Customer email address and phone number
- Customer USDOT number
- Customer address
3.3 Asset information
We may collect:
- Asset identifier, type, make, model, and model year
- Vehicle identification number (VIN) and serial number
3.4 Service and inspection record information
We may collect:
- Maintenance and inspection records, including work recorded by the technician
- Service-event data, record serial token, selected service interval, and next-service date
- Publication and distribution outcomes
- Free-text notes and summaries entered by the technician
- Uploaded photographs or files, OCR-derived text where OCR is enabled, form templates a technician creates from a scanned form, and related technician review or correction history
- Inspector qualification or attestation information, regulatory-profile information, retention deadlines, and audit information associated with Annual Inspection Forms
3.5 Payment information
Payments are processed on BCP's behalf through Stripe Hosted Checkout. BCP does not receive or store your full card number or security code.
From the checkout process, we may receive and store:
- The email address used at checkout
- Checkout-session identifier, transaction amount, and transaction status
- Product and SKU metadata for the purchased entitlement
- The BCP user identifier associated with the purchase
During checkout, our payment processor may set its own cookies in your browser to prevent fraud and secure the payment.
3.6 Technical, advertising, and measurement information
We may collect:
- Authentication and session logs
- Application and payment-webhook logs
- Audit and analytics events
- IP address, browser user-agent, and requested URL, recorded by our hosting provider in server request logs
- Technical information generated by use of the Service that is reasonably necessary to operate, secure, monitor, debug, and improve it
- First-party measurement information, including a server-issued session identifier, a first-touch identifier, landing route, referrer host, campaign parameters, and supported click identifiers normalized into campaign attribution
- Connection, device, and approximate-location information that our hosting provider's load balancer derives from each request to the public Service: the network operator (autonomous system number); connection characteristics, including round-trip time, HTTP protocol version, and TLS version, cipher suite, and handshake fingerprints; device type and browser family; and approximate location (country, state or province, city, and the coordinates of that city's center, not the precise location of your device). We use this information to distinguish people from automated traffic, to improve the Service for the devices and browsers visitors use, and for aggregate geographic reporting and modeling. It is part of first-party measurement, it is not sent to advertising platforms, and it is not recorded for a browser that has opted out or that sends a Global Privacy Control signal
- A local-storage value on your device recording that the browser has visited the Service before, used only to choose whether a signed-out visitor is offered sign-in or account creation
- When advertising or measurement technology is enabled: online identifiers; browser and device information; referral and campaign information; pages or features used; and conversion events
First-party measurement is server-side and is used for aggregate traffic and attribution reporting. We do not send these first-party identifiers to advertising platforms. A browser that has opted out, or that sends a Global Privacy Control signal, contributes only to an aggregate visit counter; BCP does not store a browser, session, or first-touch identifier for that visit.
Subject to applicable law and the choices in Section 8, BCP may use cookies, local storage, pixels, tags, and similar technologies on the public Service to measure and improve advertising, reach prospective users on third-party websites, apps, and social-media services, and understand campaign and product performance.
BCP may use a first-party identifier to assign a visitor to a product, content, or feature variant and to measure aggregate variant performance. A browser that has opted out, or that sends a Global Privacy Control signal, receives the default experience and is not assigned to or analyzed in a variant. BCP does not provide an individual's variant assignment to advertising technology.
4. Where information comes from
Information may come:
- Directly from a technician when they register, complete a profile, create records, make a purchase, or contact support
- From a technician about a customer or asset when the technician enters that information into the Service
- From third-party regulatory data sources about a customer, including FMCSA carrier census and violation data associated with a customer's USDOT number
- From our payment processor when a purchase is completed
- Automatically from use of the Service and from our systems through authentication, session management, logs, audit events, and related operational systems
5. How we use information
We use information to:
- Create and secure technician accounts and authenticate technicians
- Let technicians create, retrieve, and organize customer, asset, maintenance, and inspection records
- Produce, publish, and distribute completed service records to the customer a technician identifies
- Process purchases and provide publication entitlements
- Send service and transactional communications
- Operate, secure, monitor, debug, analyze, and improve the Service
- Investigate fraud, abuse, security events, and errors
- Maintain audit records of record creation, publication, and distribution
- Comply with law and enforce our Terms of Service
5.1 Analytics, aggregate reporting, and benchmarking
BCP may use service data to operate, analyze, secure, debug, and improve the Service and to create aggregate and de-identified reporting and benchmarking features.
Benchmarking may compare a technician's services, equipment in service records, or customers against a comparison population drawn across accounts. Benchmarking outputs are aggregate and de-identified, are subject to a minimum cohort size, and will not identify another account, technician, customer, or specific record.
Customer-level insights are derived from and shown only within the requesting technician's own data.
5.2 Artificial intelligence and sale of underlying data
BCP does not use technician-submitted content to train machine-learning or artificial-intelligence models.
BCP does not sell or license the underlying technician-submitted content.
5.3 Advertising, audience development, and conversion measurement
Subject to applicable law and the choices in Section 8, BCP may use information about interactions with our public Service and marketing campaigns to measure and improve advertising; reach people who may be interested in BCP; understand whether visitors create accounts, use the Service, or purchase; and improve the path from visitor to account holder, user, and repeat customer.
BCP does not use technician-entered customer information, service records, free-text fields, uploaded documents, payment credentials, or claim-link information to build advertising audiences or target advertising.
6. Publication and distribution of service records
A technician may create and save a private service record without purchasing publication.
Publication is a paid entitlement tied to a specific service event. When a technician publishes a record, BCP makes the record available to the customer the technician identified through a customer-specific claim link and records the outcome of that distribution.
A published record may contain customer, asset, service, inspection, technician, or inspector information relevant to that service event.
Information that a recipient has already viewed, saved, printed, downloaded, or forwarded cannot be retrieved by BCP from that recipient.
7. How we disclose information
BCP may disclose personal information to the following categories of recipients. Depending on the function and applicable law, a recipient may process personal information only as instructed by BCP and under contractual restrictions, or may act as a third party for the purposes described below.
| Provider category | Function |
|---|---|
| Cloud infrastructure and authentication | Hosting, account authentication, identity tokens, and session management |
| Cloud database and storage | Customer, asset, service-event, inspection, and document storage |
| Analytics and audit infrastructure | Audit and analytics events |
| Payment processing | Checkout and payment processing |
| Email delivery | Transactional publication and service notifications |
| OCR processing | Document and image text extraction, when enabled. For photos a technician uploads, text is read by Google Cloud Vision (Google LLC), a Google Cloud service. When a technician scans a form to create a reusable form template, the photo and the text read from it are also processed by Google Cloud services (Google LLC) to organize them into sections and items |
| Advertising, measurement, and social-media partners | When enabled after applicable controls are available, advertising, audience development, remarketing, conversion measurement, and suppression of advertising to opted-out or existing users |
We may also disclose information:
- To a customer when a technician publishes and distributes a service record to that customer
- To comply with law, legal process, or a government request
- To establish, exercise, or defend legal claims
- To protect the rights, property, security, or safety of BCP, technicians, customers, or the public
- In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to this Privacy Policy
8. Selling and sharing personal information
BCP may share online identifiers and internet or other electronic network activity collected through the public Service and marketing campaigns with categories of advertising, measurement, and social-media partners for targeted advertising, including audience development, remarketing, and conversion measurement. Depending on applicable law, that activity may be a "sharing" of personal information for cross-context behavioral advertising and may also be a "sale" of personal information.
If BCP enables advertising technology that involves a sale or sharing, BCP will make a "Do Not Sell or Share My Personal Information" or Privacy Choices control available before using that technology. BCP will honor a valid browser-based Global Privacy Control signal as an opt-out of sale and sharing for that browser. When an opt-out applies, BCP will not use advertising technologies for that browser to build or reach advertising audiences, except as necessary to record, honor, and administer the opt-out, unless and until any authorization required by applicable law is later provided.
The Service is not designed to receive sensitive personal information in free-text fields, notes, summaries, or uploaded documents. The Terms of Service prohibit technicians from entering sensitive personal information into those areas, including government identification numbers, financial account numbers, health or medical information, biometric data, precise geolocation, or information revealing racial or ethnic origin, religious beliefs, sexual orientation, or union membership.
9. Communications
BCP may send technicians service and transactional email relating to their account, purchases, records, or use of the Service.
With consent where required, BCP may also send promotional email about the Service to account holders and people who ask to receive updates, resources, or marketing. Recipients may opt out of promotional email at any time.
At launch, the only messages BCP sends to customers are transactional notifications that a technician has published a service record for them. BCP does not send promotional email to customers, and customer-directed next-service reminders are not offered at launch.
10. How long we keep information
BCP distinguishes between publication duration and retention.
- Service and inspection records: retained for three years from the date of the service event.
- Published-record availability: maintained for the publication term purchased at checkout.
- Payment and transaction records: retained for as long as applicable law, tax rules, accounting obligations, and dispute-resolution needs require.
- Distribution and audit records: retained as needed to support the related record, auditability, security, dispute resolution, and legal obligations.
- Operational logs and backups: retained for periods reasonably necessary for security, debugging, service continuity, recovery, and legal obligations.
- Load-balancer request logs for knowledge-base machine reads: request logs for requests to the Markdown and JSON versions of knowledge-base pages, which include IP address, browser user-agent, and requested URL, are kept for up to 30 days to measure automated access to the knowledge base.
- First-party measurement records: retained for up to 13 months for aggregate reporting, attribution diagnostics, and security review, subject to the configured BigQuery retention policy. Opted-out and GPC visits are retained only as aggregate counts.
For Annual Inspection Forms, BCP's retention of a record is for BCP's operational purposes. It does not satisfy, and may not be relied upon to satisfy, any recordkeeping or retention duty owed by a technician, customer, carrier, or other person to a government authority. Users are responsible for keeping any records they are independently required to maintain.
11. Security
BCP uses administrative, technical, and organizational safeguards designed to protect personal information, including authenticated access, owner-scoped access controls, encrypted transport, and managed cloud infrastructure.
No method of transmission or storage is completely secure, and BCP cannot guarantee absolute security.
12. Account closure, retained records, and information requests
A technician may close their individual BCP account.
When a technician closes an account, BCP closes access to the account, removes the technician's profile contact information from the active account profile, and deletes the associated authentication identity.
Account closure does not delete service or inspection records, customer or asset records associated with retained service events, payment or transaction records, or audit information that BCP retains under this Privacy Policy or as otherwise required or permitted by law. Inspector attribution contained within an inspection record remains with that retained record.
Records already distributed to customers may remain in the recipient's possession, and BCP cannot retrieve copies that a recipient has already viewed, saved, printed, downloaded, or forwarded.
A technician or customer may contact privacy@shopbluecollarparts.com with a question or request concerning personal information associated with the Service. BCP will respond to requests as required by applicable law.
Some information may not be capable of deletion or alteration where it forms part of a retained service or inspection record, where another person has already received the record, or where retention is otherwise required or permitted.
13. Records entered by technicians
Every technician uses an individual BCP account. Customer and asset information entered by a technician is associated with that technician's account, and access is owner-scoped.
Technicians are responsible under the Terms of Service for having the authority to enter customer and asset information into the Service and to publish and distribute records concerning that information.
14. Children
The Service is intended for use by individuals age 18 and older and is not directed to children.
15. United States availability
The Service is offered only to maintenance and repair technicians located in and accessing the Service from the fifty United States and the District of Columbia.
BCP does not direct advertising technology to visitors in the EEA or United Kingdom. If BCP later makes advertising technology available to those visitors, it will obtain any consent required by applicable law before using it.
16. Changes to this policy
BCP may update this Privacy Policy. When we do, we will revise the date above and post the updated policy at its published URL.
17. Contact us
- Privacy and information requests:
privacy@shopbluecollarparts.com - Appeals, legal notice, and disputes:
legal@shopbluecollarparts.com - Security:
security@shopbluecollarparts.com