Across the U.S., several states (including California, Colorado, Connecticut, Utah, and Virginia) have passed privacy laws that give consumers more control over their personal information.
If you sell parts online through SimplePart, these laws may apply to your dealership depending on where your customers live or where your business operates. This article explains:
Turning on your Data Request Page
To help you stay compliant with privacy laws like the CCPA and CPRA, SimplePart provides a Data Request Page that allows consumers to submit requests related to their personal information. These include requests to access, delete, or opt out of the sale or sharing of their data.
You can enable or disable this feature from the Control Panel:
Log in to your SimplePart Control Panel
Go to the Data Privacy Compliance Settings
Toggle Data Request Page to “On”
Save your changes
Once enabled, the Data Request link will automatically appear in the footer of your site, directing customers to a form where they can securely submit their requests.
What the Data Request Page does
When a visitor submits a request through the Data Request Page:
The form securely collects the user’s identifying information and type of request (such as “Access my data” or “Delete my data”)
The submission is collected in the Data Requests report
You can then process the request according to your dealership’s privacy policy and applicable laws
This page helps ensure your site provides clear and accessible ways for customers to exercise their privacy rights — a key requirement under many regional privacy laws.
Types of customer privacy requests
Customers may reach out to your business (or submit requests through your site’s Data Request Page) to exercise their privacy rights. These typically fall into three main categories:
1. Right to know
Customers can request:
What categories of personal information you collect (like name, email, or shipping address)
The sources of that information (for example, your website or order forms)
Who you share it with (like shipping or payment partners)
Why it’s collected (such as completing an order or preventing fraud)
They can also request a copy of their personal information in a portable format.
2. Right to delete
Customers may ask for their personal information to be deleted.
However, SimplePart does not delete data that’s needed for business purposes like:
Completing transactions and fulfilling orders
Fraud prevention or security
Debugging or troubleshooting
Complying with federal or state laws
Internal use or public-interest research with consent
When a customer submits a deletion request through the Data Request Page, SimplePart automatically sends them an email explaining our deletion policy.
You should also check with your other service providers (such as DMS or CRM vendors) about their own deletion policies.
3. Right to opt out of sale
Some states allow consumers to request that their data not be sold.
SimplePart does not sell personal information to third parties for money or any other valuable consideration.
If a customer opts out via the Data Request Page, they’ll automatically receive an email confirming that SimplePart does not sell personal data.
If your dealership sells personal information to third parties, consult your legal counsel for next steps. SimplePart can help you implement a “Do Not Sell My Info” link on your site if needed.
How customers can submit requests
Customers may contact you in several ways:
Submitting a form on your site’s Data Request page
Calling your dealership
Visiting your store in person
If you receive a verbal or walk-in request, fill out the Data Request form on their behalf so it’s properly logged and tracked.
How to respond to data requests
Follow these steps to handle requests correctly and securely:
1. Verify the customer’s identity
Before sharing or changing any data, confirm that the person making the request is who they claim to be.
For “categories” requests → matching 2 data points (e.g., name and email).
For “specific information” or “deletion” requests → we suggest matching 3 data points and collecting a signed statement confirming their identity under penalty of perjury.
Accepted data points include:
Name
Email address
Phone number
Shipping or billing address
⚠️ Do not use Social Security numbers, driver’s license numbers, or account numbers for verification.
If you can’t confidently verify the requester’s identity, you can deny the request, but you must respond and explain why and invite them to resubmit with additional verification.
2. Locate and download customer data
Use the Control Panel → Reports → Data Request report:
Search by the customer’s last name
Select either “Categories of information” or “Personal information”
Download the PDF immediately (links expire)
3. Send the information
Email or mail the PDF to the customer, as requested.
Timelines and recordkeeping
Response window: Most states require you to respond within 45 days. You may extend another 45 days if necessary, but you must notify the consumer.
-
Record retention: Keep records of all data requests for 24 months (2 years), including:
Date of request
Consumer name
Type of request (access, deletion, opt-out)
Action taken
Date of response
You can view all logged requests and responses through your Control Panel.
When to contact legal or SimplePart
You should contact your legal counsel if:
You believe your dealership sells customer information to third parties
You receive a complex request (for example, from a state you’re unsure about)
You need help drafting a signed declaration for identity verification
You can contact SimplePart Client Services anytime if:
You need help using the Control Panel
You want to confirm how SimplePart handles customer data
You need support setting up a “Do Not Sell” link or Data Request form
Example responses
If you can’t verify a customer’s identity
Subject: Response to Information Request
Hello,
We received your request for personal information under your state’s data privacy laws. Unfortunately, we could not confidently verify your identity based on the information provided.
Please consider resubmitting your request with additional verification details or contact us directly at [phone number] or [email].
Your data remains secure and is only used for legitimate business purposes described in our [Privacy Policy].
If a deletion request is denied
Subject: Response to Deletion Request
Hello,
We received your request to delete your personal information. Unfortunately, we cannot delete this information because it’s required for legitimate business purposes, including order fulfillment and fraud prevention.
You can learn more about our data policies in our [Privacy Policy]. Please contact us with any questions.
If an opt-out request is received
Subject: Response to Opt-out Request
Hello,
We received your request to opt out of the sale of your personal information. Please note that we and our service providers do not sell personal information to third parties for money or other valuable consideration.
You can learn more about this in our [Privacy Policy].
Stay informed
Privacy laws are evolving quickly across the U.S. Check with your dealership’s legal counsel to stay up to date.
Need help?
Our in-house Client Services team is available Monday-Friday, 8 a.m. to 8 p.m. EST to help you with any questions or issues. You can reach us in the following ways:
👉 Submit a request through this support form
📞 Call us at 1 (888) 843-0425
📧 Email us at support@simplepart.com
We’re ready to help you get the most out of your SimplePart experience!