1. Personal Data We Hold and Use

We may collect and process the following types of personal data:

• Name, address, contact details (phone, email)

• Identification documents (e.g., driving licence)

• Financial and payment information

• Purchase and service history

• Vehicle information (e.g., registration, VIN)

• Marketing preferences

• Communications with us

2. Source of Personal Data

We collect personal data:

• Directly from you when you interact with us

• From third-party providers (e.g., finance companies, credit reference agencies)

• From publicly available sources

• From your use of our website, services, or vehicles

3. Reason for Using Your Personal Data

We use your data:

• To provide you with our products and services

• To process payments, financing, and vehicle orders

• To deliver customer service and support

• To manage customer accounts and vehicle records

• For safety, security, and legal compliance

• To send marketing (with your consent)

4. Legitimate Interests

We may use your personal data where necessary for our legitimate interests, such as:

• Managing business operations and service improvement

• Ensuring security and fraud prevention

• Conducting marketing and promotional activities (with opt-out options)

5. Sharing and Disclosure of Your Personal Data

We may share your data with:

• Service providers and suppliers

• Vehicle manufacturers and finance partners

• Legal, regulatory, or governmental authorities

• Third-party marketing partners (if consented)

• IT and cloud hosting providers

We ensure all third parties respect the security of your data and comply with applicable laws.

6. Withdrawing Your Consent

Where we rely on your consent to process your personal data, you may withdraw it at any time by contacting us. Withdrawal does not affect the legality of processing prior to your withdrawal.

7. Transfer Outside the UK/EEA

Your data may be transferred outside the UK or EEA where necessary. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent protections under data protection laws.

8. Changes to Your Data

Please notify us if your personal data changes so we can keep it up to date. You may request corrections at any time.

9. Monitoring Communications

We may monitor or record communications for:

• Training and quality assurance

• Security and fraud prevention

• Compliance with legal obligations

10. Use of Automated Decisions

We may use automated decision-making for:

• Credit checks and finance eligibility

• Marketing segmentation

Where applicable, you have the right to request human intervention and to challenge the decision.

11. Retention of Your Data

We retain personal data only for as long as necessary:

• For the purposes outlined above

• As required by legal and regulatory obligations

• According to internal data retention policies

12. Your Data Protection Rights

Under data protection law, you have the following rights:

• Right to access your data

• Right to correct or erase your data

• Right to restrict or object to processing

• Right to data portability

• Right to lodge a complaint with the ICO (UK’s Information Commissioner’s Office)

13. Your Right to Object

You have the right to object to:

• Processing based on legitimate interests

• Direct marketing

We will comply with your objection unless we have compelling legitimate grounds.

14. Opting Out of Marketing

You can opt out of receiving marketing communications at any time by:

• Clicking “unsubscribe” in our emails

• Contacting us directly

We will update your preferences as soon as possible.

15. Changes to This Privacy Notice

We may update this Privacy Notice from time to time. The latest version will always be available on our website with the date of the last update.