PRIVACY Notice

1. PRIVACY NOTICE (Business to Business) 1.1. LKQ Corporation and its subsidiaries and affiliates, including companies operating under the names Attraco, Auto Kelly, Elit, Emotive, Euro Car Parts, Fource, Keystone, Rhiag, and Stahlgruber and their trading businesses (collectively: “LKQ”“we”, “us”, “our”) respect your right to privacy and your right to control the dissemination and other processing of your personal information. 1.2. This Privacy Notice (“Notice”) applies to our websites (“Websites”) and any mobile applications or other online and/or mobile applications or websites operated by us or that are related to us (“Apps”) (collectively, the Websites and Apps are referred to as: the “Service”).  It also describes how the Service collects information from you, what types of information it collects, what we may do with the information you provide, and your rights regarding privacy.  1.3. This Notice governs the information collection, use, protection, storage and disclosure practices for the Service.  By using the Service, you acknowledge you have read and understood the terms of this Notice. Please fully review this Notice before you use the Service or submit information to us.  1.4. This Notice only applies to LKQ companies and for other LKQ services or other relationships with users, suppliers or customers, other privacy terms may apply. This Notice does not apply to third-party sites which may be linked to or from the Service. LKQ is not responsible for such third party sites or others’ privacy terms. Content Overview 2. Information we collect about you and how we use it 3. How we share information 4. Information security measures 5. Accessing and updating your personal information 6. Retaining your information 7. Special provisions for our users based in the European Economic Area 8. International Transfers 9. Children 10. Modification of this Notice 11. Privacy questions 2. INFORMATION WE COLLECT ABOUT YOU; HOW WE USE IT AND WHICH LEGAL BASIS WE RELY ON 2.1. When we process your personal information described in this section, we rely on the following legal bases, depending on the specific processing operation: 2.1.1. Legitimate Business Interest. We process your data based on legitimate interests in order to: a. Protect you, us, or others from security threats; b. improve our Website performance; c. enable or administer our business, such as: for sales, rebates, reward and/or loyalty schemes, invoicing and platform maintenance; and d. understand and improve our business or customer relationships generally. 2.1.2. Consent. At the time you registered to use the Service, you were given an option to receive our company newsletter and other marketing materials. If you elected to receive these communications, the processing is based on consent. If you would like to stop receiving marketing communications from us, please click on the unsubscribe link at the bottom of any marketing communication sent via email or reply “stop” to any marketing communications sent via text. 2.1.3. Performance of Contract. The processing is necessary for the performance of a contract to which you are a party or in order to take steps at the request of you prior to entering into a contract. 2.1.4. Legal obligation. The processing is necessary for compliance with a legal obligation to which we are subject. 2.2. We process the following categories of personal information for the following purposes: 2.2.1. Usage Data. When you use the Service we will collect the following information: E.g., details on your browser (such as type, version, language); operating system and interface; website from which you are visiting us (referrer URL); webpage(s) you are visiting on our Website; date and time of accessing our Website and time zone difference; access status/HTTP status code; volume of data transferred; internet protocol (IP) address; information gathered via cookies (see below Section 6 for further information on Cookies). 2.2.1.1. Purpose: Usage Data will be used to provide you access to the Website and to maintain or restore the security of the Website, or to detect technical faults and/or errors in the transmission of electronic communications. 2.2.2. Account and Order Data. If you register an account on our Service and/or order a product from the available catalogues or a service, we may process the following data about you: E.g., name; email address; password; billing and shipping address (including company, if applicable), telephone number (including mobile), payment details; type and amount of product; purchase price, order date; order status; product returns; customer care requests; correspondence; certain communication we receive from you; and other information you provide when using the Service. 2.2.2.1. Purpose: Account and Order Data will be used for account administration; providing the desired products or services; carry out the contractual relationship, the transaction and the product order; providing customer support; compliance with legal obligations; defending, establishing and exercising legal claims; and improving your customer experience. Additionally, subject to your marketing preferences, collected at the time you register for an account, we may send you texts, marketing emails, or mailings to notify you about products or services that may be of interest to you. If you would like to stop receiving marketing communications from us, please click on the unsubscribe link at the bottom of any marketing communication sent via email or reply “stop” to any marketing communications sent via text. You may not opt-out of receiving service-related messages that are not promotional in nature and are needed to manage your account and/or orders. 2.2.3. Correspondence-related Data. If you send us personal correspondence, such as emails, texts, or letters, or responses to surveys and questionnaires; provide us with information by phone or if you provide feedback on your experience with the Websites, Apps, or an LKQ facility we may save the information in a profile specific to you. Additionally, we collect and store the personal information you provide when you contact Us, including (as the case may be) your first name, last name, telephone/mobile number, e-mail, and your message. 2.2.3.1 Purpose: Correspondence enables us to provide services and information to you, improve your customer experience and helps make our contact with you as productive as possible. 2.2.4. Non-identifying and Aggregated Information. We may collect and use non-identifying information for any lawful purpose, service administration, tracking users’ movements around the Service, and to improve our business and the Service and we may share it with third parties including for commercial purposes. 2.3. In addition to the purposes listed above, we may also use your personal information to protect against and prevent fraud, unauthorized transactions, claims, and other liabilities, and manage risk exposure, including by identifying potential hackers and other unauthorized users. 2.4. The following table describes what categories of data we process for what purposes, and on what legal basis we rely on:

3. HOW WE SHARE INFORMATION 3.1 We may transfer your personal information to (internal and external) recipients for the processing purposes described above as follows:  3.1.1. Within LKQ: Depending on the categories of personal Data and the purposes for which the personal Data has been collected, different internal departments within LKQ may receive personal information and process them either as an independent data controller or a data processor. For example, our IT department may have access to Usage Data, and our sales departments may have access to Account and Order Data. Moreover, other departments within LKQ may have access to certain personal information about you on a need to know basis, such as the legal department, the finance department or internal auditing.  3.1.2. Sharing with Other Users:  The Service may allow users to connect and communicate with others, in a limited capacity. 3.1.3. Sharing with Third Parties:    3.1.3.1. Service Providers.  We use third parties to help us operate and improve the Service (e.g. hosting providers, e-commerce service providers). We may provide these third parties with information we collect, and they may collect information from you and about your use of the Service. The processing by these third parties will, unless specifically noted otherwise in this Notice, be governed by a contractual agreement requiring them to process the Data solely on behalf of LKQ when performing the Services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, or providing similar services on behalf of LKQ.    3.1.3.2. Insolvency and Business Transitions. If we ever file for bankruptcy or engage in a business transition such as a merger or joint venture with another company, or if we purchase, sell, or reorganize all or a part of the Service or our business or assets or the business or assets of our affiliates, we may disclose your personal information, including to prospective or actual purchasers in connection with one of these transactions. 3.1.3.3. Regulators, authorities and other Third Parties. We may also transfer your Data to governmental agencies and regulators (e.g. ICO, tax authorities), courts, government authorities, and independent external advisors acting as controllers (e.g., lawyers, accountants, auditors etc.) all in accordance with applicable law. 4. INFORMATION SECURITY MEASURES 4.1 Keeping secure personal information that we collect is of great concern and paramount importance to us. Whilst we have mechanisms in place to safeguard your personal information once we receive it, no storage or transmission of data can be guaranteed to be 100% secure. When you provide information to the Service, you do so at your own risk and fully understand and agree to accept the risks of unauthorized access, use and disclosure of your personal information that may occur despite our compliance with this Notice and implementation of security technologies. 4.2 Subject to section 7 below, we will keep your personal information in a file specific to you, and store your personal information at our offices and data centers as well as those of our service providers.  Other than data in the UK (stored in a UK location) all other data will be stored in the EU. If you reside in the United States, you should note that any personal information we collect may be subject to United States’ laws, and may be subject to disclosure to the governments, courts or law enforcement or regulatory agencies of the United States, pursuant to the laws of the United States.  For written information about our policies and practices regarding foreign service providers, contact our Privacy Department (see Section 11 below).  5. ACCESSING AND UPDATING YOUR PERSONAL INFORMATION 5.1 If you would like to update your personal information associated with your Account, you may make changes in the “My Account” or “Settings” portions or relevant sections of the Service.  Aside from updates you make, at any time, you may challenge the accuracy or completeness of your personal information in our records. If you successfully demonstrate that your personal information in our records is inaccurate or incomplete, we will update the personal information as required. Where appropriate, we will transmit the updated information to any third parties who have access to your personal information.  5.2 If you would like to cancel your Account, request access or a correction to your personal information (other than corrections you can make in the “My Account” or “Settings” portions or relevant sections of the Service), please contact us at the relevant email address and contact number provided at the bottom of this notice.  If you do not want your information accessed or stored as described in this Notice, you should not access, use, or register an Account with the Service.  5.3 Further rights under applicable laws remain unaffected (see e.g. Section 8 below). 6. RETAINING YOUR INFORMATION. Your personal information will be retained as long as necessary to provide you with the Services and products requested. Once you have terminated the contractual relationship with us and/or you have deleted your Account, we will remove your personal data from our systems and records and/or take steps to properly anonymise it so that you can no longer be identified from it (unless we need or have a right to keep your information to comply with legal or regulatory obligations to which LKQ is subject – e.g., taxation purposes - or to meet our legitimate interests).

7. PROVISIONS FOR OUR USERS BASED IN THE UK and/or THE EUROPEAN ECONOMIC AREA  7.1 Your Rights: 7.1.3 Right to withdraw your consent. If you have given your consent regarding certain types of processing activities (in particular regarding the receipt of certain direct marketing communications), you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal. You can withdraw your consent by clicking on the withdraw option in relevant communication or by contacting your relationship manager (for existing customers).   7.1.4 Additional data privacy rights. Pursuant to applicable data protection law, you may have the right to: (i) request access to your personal data; (ii) request rectification of your personal data; (iii) request erasure of your personal data; (iv) request restriction of processing of your personal data; (v) request data portability; and/or (vi) object to the processing of your personal data. Below please find further information on your rights to the extent that the GDPR or UK GDPR applies (as the case may be). Please note that these rights might be limited under the applicable (local) data protection law.  7.1.4.1 Right to request access to your personal data. As provided by applicable data protection law, you have the right to obtain from us confirmation as to whether or not personal data concerning you is processed, and, where that is the case, to request access to the personal data. The access information includes – inter alia – the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipients to whom the personal data have been or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access. You also have the right to obtain a copy of the personal data undergoing processing free of charge. 7.1.4.2 Right to request rectification. As provided by applicable data protection law, you have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement. 7.1.4.3 Right to request erasure (right to be forgotten). As provided by applicable data protection law, you have the right to obtain from us the erasure of personal data concerning you and we are obliged to erase such data.  7.1.4.4. Right to request restriction of processing. As provided by applicable data protection law, you have the right to obtain from us restriction of processing of your Data and we are obliged to restrict such processing. In this case, the respective personal data will be marked and may, with the exception of storage, only be processed by us with your consent or for certain purposes.   7.1.4.5 Right to request data portability. As provided by applicable data protection law, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those personal data to another entity without hindrance from us, where the processing is carried out by automated means and is based on consent pursuant to Art. 6(1)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR or the appropriate equivalent provisions in the UK GDPR as the case may be. 7.1.4.6 Right to object.  Under certain circumstances, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your data by us and we are required to no longer process your data. Such right to object especially applies if we collect and process your data for direct marketing purposes.  If you have a right to object and if you exercise this right, your data will no longer be processed for such purposes by us. You may exercise this right by contacting us as stated below.  Such a right to object does, in particular, not exist if the processing of your data is necessary to take steps prior to entering into a contract or to perform a contract already concluded. To exercise your rights, please contact us as stated below. You also have the right to lodge a complaint with the competent data protection supervisory authority in the United Kingdom (UK) or the relevant Member State (e.g., the place where you reside, work, or of an alleged infringement of the GDPR/UK GDPR). 8. INTERNATIONAL TRANSFERS.   8.1. It is sometimes necessary for us to share your data outside of the UK or the European Economic Area (EEA). This generally occurs when our service providers are located outside the UK or the EEA or you are based outside the UK or the EEA. 8.2. If this happens, we will ensure that the transfer will be compliant with the relevant data protections laws including the appropriate UK GDPR or GDPR (as the case may be). 8.3. Our standard practice is to use standard contractual clauses approved by the European Commission for such transfers (or similar).  8.4. Where the standard contractual clauses are not used, appropriate contractual, security and technical measures, will be in place that incorporate the appropriate GDPR (“LKQ Agreement”) so where data is transferred elsewhere any recipient shall at the very least enter in to an LKQ Agreement. 9. CHILDREN The Service is intended for users over the age of 18 and is not directed to children under 13 (“Children”).  We do not knowingly collect personal information from Children. If you become aware that a child has provided us with personal information without parental consent, please contact us at by using the contact information in the Privacy Questions section at the bottom of this Notice, and we will take steps to remove the information and terminate the child's Account. 10. MODIFICATION OF THIS NOTICE We will occasionally update this Notice, in our sole discretion.  When we post changes to this Notice, we will revise the "Effective Date” at the top of this Notice in order to notify you of changes.  We recommend that you check the Service from time to time to inform yourself of any changes in this Notice or any of our other policies.  If you do not agree to any update, please do not use the Service; by continuing to access or use the Service after a change to this Notice becomes effective, you agree to and accept the revised Notice as of the Notice Effective Date. 11. PRIVACY QUESTIONS If you have any questions about how we use your personal data that are not answered in this Notice, please email: privacy@eurocarparts.com or write to us at: Privacy Team c/o Legal Department, Euro Car Parts Limited, T2 Birch Coppice Business Park, Danny Morson Way, Dordon, Tamworth, England, B78 1SE. 12. DATA SUBJECT ACCESS REQUEST  If you wish to exercise your Access Rights regarding your personal data, please visit our dedicated portal:  https://privacyportal.onetrust.com/webform/3851eaea-a64c-4a2c-99e2-907f52d98962/c3ef20e8-d1bb-48d1-ac65-9de66499ac4c (“Portal”) or if you do not have online access, write to us at: DSAR c/o Legal Department at the above address.  (NB: The best way to contact us is through the Portal especially as postal requests may take longer to be received and therefore longer to process than online/email requests) 13. COMPLAINTS You have the right to make a complaint at any time to the local data protection supervisory authority which, for the UK, is the Information Commissioner's Office (ICO) (www.ico.org.uk). We would however, appreciate the chance to deal with your concerns before you approach the ICO, so please always contact us in the first instance.‍ Notice Updated:  March 2023