Information Notice
Last updated: March 2026
This Information Notice explains how Sion Jones Commercials Ltd and our finance partners process your personal data when you apply for vehicle finance. This document is provided in accordance with Article 14 of the General Data Protection Regulation (GDPR).
Overview
When you apply for van finance through Sion Jones Commercials Ltd, we collect and process personal data from you. We also share your data with our finance partners, credit reference agencies, and other third parties as necessary to assess your application and arrange finance on your behalf.
This notice explains what data we collect, who we share it with, why we process it, and what rights you have.
Data Controllers
Primary Data Controller
Sion Jones Commercials Ltd acts as the primary data controller for your personal data.
Joint Data Controllers
The finance lender you are introduced to will also act as a joint data controller for your personal data. Each finance organization will provide you with their own privacy information explaining how they process your data.
What Personal Data We Collect
For finance applications, we collect the following categories of personal data:
Identification Data
Full name, date of birth, national insurance number, passport details or driving license information
Contact Data
Home address, telephone number(s), email address
Employment Data
Employment status, job title, company name, business address, length of employment
Financial Data
Income information, financial commitments, bank account details, credit history
Vehicle Information
Vehicle type, registration number, purchase price, intended use
Declarations
Information about your creditworthiness, any previous debt issues, fraud or other criminal history
Who We Share Your Data With
Finance Lenders
We share your personal data with finance lenders on our panel so they can assess your application and make a lending decision. Lenders act as joint data controllers and will have their own privacy policy.
Credit Reference Agencies (CRAs)
We and our finance partners share your personal data with credit reference agencies including:
- Equifax
- Experian
- TransUnion
CRAs use this data to create a credit report and share credit history information with lenders. This helps lenders assess your creditworthiness and the risk of lending to you.
Fraud Prevention Services
We may share your data with fraud prevention services to verify your identity and prevent fraud, money laundering, and other financial crime.
Insurance Partners
If you request insurance as part of your finance arrangement, we will share necessary data with insurance providers to arrange insurance on your behalf.
Other Service Providers
We may share your data with other service providers who assist us in providing our services, such as document verification services, IT service providers, and payment processors.
Legal and Regulatory Bodies
We may disclose your data to law enforcement, regulatory authorities, and other organizations if required by law.
Legal Basis for Processing
We process your personal data on the following legal bases:
Contract (Article 6(1)(b))
We process your data to enter into and perform a contract with you for providing finance brokerage services.
Legal Obligation (Article 6(1)(c))
We process your data to comply with legal obligations under financial regulations, money laundering regulations, and tax law.
Legitimate Interest (Article 6(1)(f))
We process your data for legitimate business interests including fraud prevention, credit risk assessment, and improving our services. We have balanced these interests against your right to privacy.
Consent (Article 6(1)(a))
We process your data with your explicit consent for specific purposes such as marketing communications.
How Long We Keep Your Data
Active Applications
During the application and arrangement process, we hold your data actively for as long as required to complete the transaction (typically 2-4 weeks).
Archived Data
After the transaction is complete or declined, we retain your data for 6 years for legal, tax, and regulatory compliance purposes.
Credit Files
Credit reference agencies retain your data for periods determined by their retention policies. Your credit file information is typically retained for 6 years.
Your Data Protection Rights Under GDPR
As a data subject, you have the following rights:
Right of Access
You have the right to request a copy of the personal data we hold about you and to receive information about how we process it.
Right to Rectification
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, subject to legal retention obligations.
Right to Restrict Processing
You have the right to request that we restrict how we process your personal data.
Right to Data Portability
You have the right to request a copy of your personal data in a structured, commonly-used, machine-readable format.
Right to Object
You have the right to object to certain types of processing, including processing for legitimate interests and marketing.
Right to Withdraw Consent
Where we rely on consent as the legal basis for processing, you have the right to withdraw consent at any time.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we are not processing your data in accordance with GDPR.
Credit Reference Agencies and Your Credit File
How CRAs Use Your Data
Credit reference agencies use your personal data to:
- Build a credit report about you
- Assess credit risk
- Prevent fraud and detect financial crime
- Verify your identity
- Provide information to other lenders and creditors
- Conduct data analytics and credit scoring
Your Rights with CRAs
You have the right to request your credit file from any CRA and to request that they correct inaccurate information. Contact details for major CRAs are:
- Equifax: www.equifax.co.uk
- Experian: www.experian.co.uk
- TransUnion: www.transunion.co.uk
How to Exercise Your Rights
To exercise any of your data protection rights, please contact us:
Email: sales@sionjonescommercials.co.uk with the subject line "DATA SUBJECT REQUEST"
Phone: 01656 502099 (Mon–Fri, 8am–4pm)
Mail: Sion Jones Commercials Ltd, 1 The Portway, Porthcawl, CF36 3XB
We will respond to your request within 30 days. In some cases, we may require additional information to verify your identity before we can respond to your request.
Questions or Complaints
If you have questions about this Information Notice or how we process your data, please contact us at:
Email: sales@sionjonescommercials.co.uk
Phone: 01656 502099
Address: 1 The Portway, Porthcawl, CF36 3XB
If you are unhappy with how we handle your data, you can lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
