Security & Privacy Policy

JCB PARTS ONLINE Privacy Policy (last updated 19.09.25)

1.      Introduction

1.1.        The domain name http://parts.jcb.com/uk and the website ‘JCB Parts Online’ (collectively the “Platform”) are owned, operated and maintained by J.C.B. Service, a company registered in England and Wales with company number 564955 with its registered office at B Lakeside Works, Rocester, Uttoxeter, Staffordshire, ST14 5JP. Our VAT number is 125 6945 54. Our main trading address is J.C.B. Service, World Parts Centre, Waterloo Park, Beamhurst, Uttoxeter, Staffordshire ST14 5PA (hereinafter referred to as “we”, “us”, “our” or “Company” or “JCB” including its permitted assigns and successors).

1.2.        JCB is committed to protecting your personal information and complying with all applicable data protection laws, including the Data Protection Act 2018 and the General Data Protection Regulation (GDPR). Accordingly, this privacy policy (“Privacy Policy”) provides information about our practices and processes around collection, use, storage, disclosure, and processing of User’s personal information when they access or use the Platform or otherwise provide us with personal information outside of the Platform.

1.3.        Application: This Privacy Policy applies to all Users of the Platform and covers all information that can be used directly or indirectly, standalone or in combination with other data sets to identify the natural person to whom the information belongs (hereinafter “PI”) provided to us by the Users through the Platform. Further, please note that processing refers to any automated or semi-automated dealing with your PI including collection, storage, disclosure, organization, and archiving.

1.4.        Scope and effect: This Privacy Policy forms an integral part of the Platform’s terms and conditions and upon your acceptance of the Terms in the manner provided therein, you signify your acceptance to the terms of this Privacy Policy and agree to be bound by them as a binding contract with us.

1.5.        It is important that you read and understand this Privacy Policy before signifying your acceptance to the Terms or prior to submitting any information to us through the Platform or otherwise. If you do not wish to accept this Privacy Policy, you cannot accept the Terms or access/use the Platform and Services enabled therein and should not use the Platform. In the event the User does not provide their PI, we may not be able to provide some or all of our Services.

1.6.        Please note that this Privacy Policy does not cover processing of PI of employees, consultants, or other personnel engaged with JCB who shall be/are provided with separate privacy notices.

1.7.        This Privacy Policy does not elaborate or control the manner in which your PI will be processed by Dealers or any other third party service provider including processing and informational privacy practices of third party payment service providers and websites/links that you access through the Platform. You are advised to reach out to such third parties for understanding their informational privacy and data processing practices before providing any PI to such third parties.

1.8.        Other privacy notices: We reserve the right to provide you with additional privacy statements/notices for specific kinds of processing and for compliance with Applicable Laws, and this Privacy Policy does not supersede such specific notices/statements. In the event of any inconsistency between any term contained in such specific notices/statements and this Privacy Policy, the conflicting term in the specific notice/statement shall prevail over this Privacy Policy only to the extent relevant for the limited scope of the specific statement/notice and not otherwise.

1.9.        Capitalized terms used herein but not defined specifically shall have the same meaning as ascribed to them in the Terms and its constituents or as provided under Applicable Law, and if no such meaning is attributed in the Terms or Applicable law, the terms will be understood in general parlance.

2.             What Information do we collect and how do we collect it?

2.1.        Direct collection: You directly provide your PI to us when you:

(a)    access and use the Platform and the Services;

(b)   create an User Account;

(c)    search for Products or Services;

(d)   execute any contract with us;

(e)    in course of us performing due diligence on Users of the Platform;

(f)     place an Order through the Platform;

(g)   provide information in your User Account;

(h)   communicate with us by phone, e-mail or other available means;

(i)     subscribe to our marketing and promotional content;

(j)     participate at any of our events and meets; and

(k)   complete any questionnaire or other document provided by us.

2.2.        Indirect collection: Additionally, we collect PI indirectly from other sources such as cookies, web beacons, website traffic, information available in public domain through internet searches, analytic studies, and other information that we may derive while processing PI. To learn more about how cookies function, please access the Cookie Policy here.

2.2.1     Depending on your settings or the privacy policies for other online services, you may give us permission to obtain information from your account with those other services. For example, if you’re using the site on your mobile, you may choose to provide us with location data. The information we obtain from those services does depend on your settings for that service or their privacy policies. So you should always regularly check what those are.

2.2.2     When we collect PI indirectly i.e., from third parties, you represent that you have consented for such third party to transfer your PI to JCB, and you agree and undertake that JCB shall not be liable for any consequences arising from any unauthorized transfer of your PI to JCB by such third party. Further, you expressly waive your rights for seeking relief or raising any claim under law, contract, or equity against JCB and its group entities, their officers, employees, agents, personnel, and other representatives (“JCB Representatives”) for unauthorized access, except your right to write to us seeking deletion of your PI and cessation of processing that has been unauthorizedly transferred to JCB.

2.3.        Types of PI collected and processed. JCB may collect and process the following types of PI about you:

•                    Basic identification information like forename and surname, name of organization;

•                    Identification information like identity proof and tax identification information;

•                    Contact information like e-mail address, telephone number, address (billing address, delivery address) and country of residence;

•                    Log-in details for your User Account including password;

•                    Financial and payment information like payment method details, bank account information, tax registrations, and payment details;

•                    Location information;

•                    Technical information such as device and hardware information, information about your system’s operating systems;

•                    Information on how you use the Platform through our or third party cookies such as duration of your visit, Products viewed, other location and technical information, content interaction information, usage metrics, purchase history, browsing history; to know more about use of cookies, please review our Cookie Policy here;

•                    Social media information such as social media URL, feedback therein;

•                    Details of the Order and Products and Services that you require information on or wish to purchase or have purchased;

•                    Information that is required for compliance with applicable law;

•                    Feedback and survey responses;

•                    Preferred dealer when utilising the sub-sections of the site for procurement from a Dealer;

•                    Your preference regarding receipt of marketing from us;

•                    Information that you provide to us in the process of entering or performing any contract with JCB.

2.4. Whenever you use our Platform or in case of an error, we collect data and information on your device called Log Data. This Log Data may include information such as IP address used to connect your computer to the Internet, device name, operating system version, the time and date of your use of the Platform, and other statistics such as the full Uniform Resource Locators (URL) clickstream to, through and from our website (including date and time); cookie number; products and/ or content you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs).

2.5. In order for us to be able to provide the Services to the Users, we may seek permission of the Users on whether we may obtain access to contact list/phone book on their device, device location, camera, microphone and other sensitive device data. When this permission is sought, the Users shall have the control wherein they can select to ‘allow’ us to access such data or ‘deny’ us the permission to access the said data.

2.6. While we shall make reasonable endeavours to ensure that your PI is duly protected by undertaking reasonable security measures that commensurate with the nature of our operations and information assets sought to be protected, you are strongly advised to exercise discretion while providing your PI and using the Platform, given that the internet is susceptible to security breaches.

2.7. Through the checkout process you will be required to submit your payment information to payment partners whose systems use SSL encryption. 

3.        How do we use the Information about you?

3.1. We collect and process PI, directly or indirectly through engaged third parties and data processors, to operate, provide, and improve the site and the services offered through the site and for varied purposes including the following:

(a)  allowing creation of User Account and managing them on the Platform;

(b)  verification of Users visiting and/or accessing the Platform and offline verification of contracting parties;

(c)  providing, operating, and maintaining the Platform and Services;

(d)  contracting for the purposes of offering the Platform and Services;

(e)  administering your Order with the Dealer including enabling transactions with the Dealer and managing payments through payment service providers;

(f)   sharing reports, articles, and other communication regarding Products and Services;

(g)  promotion, marketing, analytics, and advertising including providing customized internet-based ads; please note that for internet-based ads, we do not use identifiable PI

(h)  processing User feedbacks, complaints, grievance, reviews, and similar information provided to use for improving our operations, Platform, Services, customer experience, and grievance resolution;

(i)   analyzing and communicating with Users and other persons in relation to our dealings with them;

(j)   sharing invitations and other communication for participation in our events and shows;

(k)  connecting and enabling transactions between Buyers and Dealers as well as enabling financing facilities for Dealers through financiers;

(l)   providing customer support;

(m) understanding what JCB products you may be interested in and improve JCB products or services;

(n)  conducting market research, surveys, trend research, analytics to understand your need for using the Platform, demand for Services, updates, upgrades and other Platform feature requirements;

(o)  administering and protecting our operations and the Platform;

(p)  creating, improving, and developing our Platform;

(q)  protecting and securing your PI;

(r)   detecting and handling data breach and security incident scenarios;

(s)   periodically reviewing PI collected to adhere with your requests regarding your rights and legal obligations under Applicable Law;

(t)   maintaining secure personal information management system;

(u)  archiving, statistical analysis, survey, R&D activities;

(v)  compliance with Applicable Law and contractual obligations;

(w) sharing with third parties; and

(x)  defending or initiating legal, contractual, and other equitable relief should such situation arise.

3.2. JCB provides the site as a service to the independent network of Dealers to enable them to transact with Buyers. Accordingly the site collects personal information on behalf of the Dealers to enable you to transact online with the Dealer chosen by you for the supply of JCB products that you may order through the site and for them to process such Order if accepted by Dealer.

4.      How Do We Process Your Personal Information?

4.1.        We collect, record, organise, structure, align, retrieve, adapt, access, review, archive, analyse, pseudonymize, encrypt, decrypt, profile, transfer, perform other related technological and manual processing activities.

4.2.        Governing principles for processing of your PI: We process your PI in accordance with fair, accountable, and transparent processing principles as required under Applicable Law. Governing principles that we follow for processing are:

(a)      process lawfully, fairly, and with transparency;

(b)      process only for purposes communicated, or those which are reasonably expected to be connected with the purposes, or for purposes which are compatible with them, or as allowed under Applicable Law;

(c)      minimize collection only as much is adequate, relevant, and necessary;

(d)      take reasonable steps to maintain accuracy in light of the processing purposes;

(e)      retain in such form bearing in mind the processing purposes;

(f)       use physical, technical, operational, and organizational security measures to protect PI and prevent data breach or unauthorized processing;

(g)      prevent accidental loss, unlawful destruction, or access, or damage;

(h)      maintain confidentiality and integrity of your PI.

4.3.        Profiling: Profiling means automated processing of PI to evaluate certain personal attributes about you. This aims at analysing your behaviour while using the Platform. There will be no profiling by automated means that will affect your PI protection rights and privacy.

5.      THIRD PARTY SHARING AND DISCLOSURE OF PERSONAL INFORMATION

5.1. We disclose your PI on a strict need-to-know basis. In such cases, we exercise reasonable due diligence on information processing and security practices implemented by the receiving party, and in certain cases, also require them to execute contracts with us that obligates them to provide similar or higher standards of protection as is provided by JCB, allow JCB to conduct audits and call for information, maintain confidentiality, and limit processing for the specified purposes as directed by JCB. Alongside, we require them to refrain from further sharing of your PI to any third party without obtaining our prior written consent.

5.2.        Third parties to whom we disclose PI include:

(a)    the Dealer with whom you have placed an Order (in which case the Dealer will process the PI in accordance with their privacy policy available on the Platform) and other third parties who are necessary for concluding your transactions on the Platform including payment service providers;

(b)   JCB group entities and JCB Representatives to provide you with the Platform, the Services, and support in relation to them or in connection with the Products;

(c)    Other JCB group entities who undertake marketing for the Products;

(d)   our service providers who perform services on our behalf, such as IT service providers who manage the Platform and its performance, our customer service enquiry service provider who handle correspondence received and direct it appropriately, our customer survey providers who we use to obtain feedback from customers on our behalf, and our marketing fulfilment agencies for any marketing;

(e)    those with whom we are required to transfer information to comply with Applicable Law or to enforce our Terms and policies including with government and regulatory bodies; and

(f)     third parties in case of corporate restructuring transactions involving JCB such as mergers, slump sales, etc.

6.    WHERE WE STORE YOUR PERSONAL INFORMATION?

All personal information JCB have about you is stored on secure servers operated by JCB or its third party service providers. These third party service providers have access to your personal information needed to perform their functions, but may not use it for other purposes. JCB ensures that these third party service providers will only process your personal data in accordance with this policy and applicable Data Protection legislation.

7.                  How Do We Protect Your Personal Information?

7.1. JCB takes the safety of your PI and its confidentiality, integrity, and availability very seriously and is committed to providing reasonable security safeguards commensurate with the nature of operations and the sensitivity of PI being handled, including but not limited to implementation of reasonable technical, organizational, managerial and physical safeguards.

7.2. Some measures used include access control, use of privacy enhancement tools, and where needed encryption and masking tools for protection of your PI.

7.3. We regularly carry out assessments to ensure the security of PI collected by us.

7.4. All staff, personnel, officers, and JCB Representatives receive appropriate and on-going training to ensure they are fully aware of their obligation to uphold confidentiality, protect PI, and respect your privacy.

7.5. Only limited authorized personnel and approved third parties including the Dealers have access to your PI on a need-to-know basis and only for specific purposes. However, please note that there is no guarantee that PI may not be accessed, disclosed, altered, or destroyed on account of breach incidents by malicious actors. Additionally, you are responsible for maintaining the confidentiality of the username, password and other details related to your User Account on the Platform and for all the activities that occur on the account.

8.                  Data Transfers

To facilitate JCB’s global operations, JCB may transfer to and access User’s data including PI from around the world, including to/from other countries in which JCB or its parent, affiliates, subsidiaries and joint ventures have operations and other JCB group entities globally or such User’s Data including PI may be processed by JCB’s third party service providers based or operating outside the EEA. This Privacy Policy shall apply even if JCB transfers data about Users to other countries and the Users hereby consent to such transfer. JCB will use appropriate safeguards to ensure that your personal data is treated securely and in accordance the Data Protection legislation in connection to such transfers or processing of your personal data.

9.                  Data Retention

Your personal information will be held in the system for the Platform and, where we have corresponded with you via email will be held within our relevant IT systems, for as long as it is required to be stored for the purposes set out in this Privacy Notice or until such time you withdraw your consent, or as necessary to comply with legal obligations. We will carry out periodic data cleanses of this information to ensure that it is up to date and accurate and to remove any obsolete data. When we no longer need to use your PI and there is no need for us to keep it to comply with our legal obligations, we will delete it from our systems.

10.  Your rights

10.1.      You have the following rights in connection with your PI processed by JCB:

(a)    Access: you can request access to your PI and further details about how your PI is handled and processed by JCB.

(b)   Rectification: You can request rectification of any incorrect or inaccurate PI, or completion of incomplete PI held about you. You may change any of your PI in your User Account at any time. We encourage you to promptly update your information if it changes.

(c)    Object: you have the right to object to our processing of your personal information for direct marketing purposes or where the processing isn’t necessary for the purposes of the contract between us or legitimate interests pursued by JCB or by a third party

(d)   Erasure: you can request erasure of any personal data where the processing isn’t necessary for the purposes of the contract between us or legitimate interests pursued by JCB or by a third party

10.2.      To exercise your rights, please contact us at We will try our best to provide the necessary information within 30 days from receipt of the request.

10.3. You have the right at any time to withdraw consent to receiving marketing from JCB and/or to amend the delivery method we use. To manage your rights and delivery preferences please follow the instructions in our marketing communications, enquiry forms or write to us at:

Post: Parts Online, JCB Service, Waterloo Park, Beamhurst, Uttoxeter, Staffordshire ST14 5PA

Email: partsonline@jcb.com

10.4. You can exercise any of these rights at any time by contacting us using the contact details provided below.

10.5. If you are concerned or have questions about how JCB handles your personal data please contact us and we will do our best to assist you.

10.6. Please note that you have the right to lodge a complaint with the UK Information Commissioner’s Office (or any other appropriate supervisory authority), which may be accessed through the following link https://ico.org.uk/concerns/.

11.     Third Party Sites

The Platform may occasionally contain links to third party websites. If a User clicks on any such links, the User will leave our Platform and JCB will not be responsible for the content of these third party websites or for the security of the User’s PI when the User uses these third party websites. This Privacy Policy does not govern PI processed by third party websites. Third party websites may have their own privacy policies governing processing of PI and the User is urged to review them.

12.     Changes to our privacy policy

JCB reserves the right to revise this Privacy Policy or any part of it from time to time as it may deem necessary or as may be required under Applicable Law. Any changes will be immediately posted on the Platform along with the date of the modification and if the User continues to use this Platform, they are deemed to have accepted the terms of the revised Privacy Notice.

13.  Contact Details

Questions, comments and requests regarding this Privacy Policy should be addressed to Parts Online, JCB Service, Waterloo Park, Beamhurst, Uttoxeter, Staffordshire ST14 5PA OR partsonline@jcb.com.

14.   How will we contact you?

JCB and its third party service providers (customer survey providers) will contact you by post, telephone, email, SMS, whatsapp or other messaging service depending on the reason for correspondence and only in accordance with the Terms and this Privacy Policy. JCB may contact you with marketing communications by post, telephone, email and/or text message, unless you have told us not to or have registered with the telephone or post preference services.