Privacy Policy

What Data We Collect

We collect personal data directly from you when you interact with our services. This includes information you provide when enquiring about vehicles, requesting finance quotes, completing application forms, or contacting our team.

The types of personal data we collect may include:

• Full name, date of birth and contact details (email, phone number, address)
• Employment and income information
• Financial information relevant to credit applications
• Vehicle preferences and purchase history
• IP address and browsing activity through cookies and analytics
• Records of our communications with you

We also receive personal data from third parties, including finance partners, credit reference agencies, and fraud prevention services as part of our lending verification process.

How We Use Your Data

We use your personal data for the following purposes:

• Processing and assessing finance applications and quotations
• Verifying your identity and conducting anti-fraud checks
• Communicating with you about our services and your enquiries
• Administering contracts and managing customer relationships
• Complying with legal and regulatory obligations
• Improving our website performance and user experience
• Marketing communications (only where you have opted in)

We will never use your data for purposes beyond those outlined in this policy or as permitted by law without obtaining your explicit consent first.

Legal Basis for Processing

Under GDPR, we process your personal data on the following legal bases:

• Contract: To fulfil our obligations to you as a customer and to perform services you have requested
• Legal Obligation: To comply with regulatory, tax and legal requirements
• Legitimate Interest: To operate our business, maintain security, prevent fraud, and improve our services
• Consent: For marketing communications and non-essential cookies (only where you have explicitly opted in)

When we rely on legitimate interest, we balance this against your right to privacy and have assessed that our legitimate business interests do not outweigh your rights.

Data Sharing and Third Parties

We may share your personal data with the following categories of third parties:

• Finance Partners: Full Metal Finance, Paddington Business Finance and other authorised lenders to process your application
• Credit Reference Agencies: To verify creditworthiness and assess lending risk
• Fraud Prevention Services: To detect and prevent fraud
• Legal and Regulatory Bodies: Where required by law or court order
• Payment Processors: To process payments securely
• Service Providers: IT support, website hosting and analytics providers who process data on our behalf

All third parties are contractually obligated to keep your data secure and use it only for the purposes specified. We do not sell your personal data to third parties for marketing purposes.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can ask us to correct inaccurate or incomplete data
• Right to Erasure: You can request deletion of your data in certain circumstances
• Right to Restrict Processing: You can limit how we use your data
• Right to Data Portability: You can request your data in a portable format
• Right to Object: You can object to certain processing activities
• Rights Related to Automated Decision-Making: You have rights relating to profiling and automated decisions

To exercise any of these rights, please contact us at the details provided below. We will respond to your request within 30 days.

Data Retention

We retain your personal data for the duration necessary to provide our services and fulfil the purposes for which it was collected. Retention periods are determined by legal, regulatory and business requirements:

• Customer records and communications: retained for 6 years after the last transaction (for tax and legal compliance)
• Finance application data: retained for the duration of any finance agreement plus 6 years
• Marketing preferences: retained until you unsubscribe
• Website analytics and cookies: retained as per individual cookie policy

After the retention period expires, we securely delete your data unless we are required to keep it by law.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. For detailed information about how we use cookies, the types of cookies we use, and how to manage your preferences, please see our full Cookie Policy.

You can control cookie preferences through your browser settings or through our cookie consent banner on first visit to the website.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These safeguards include:

• Encryption of data in transit (SSL/TLS) and at rest
• Access controls limiting employee access to personal data
• Regular security assessments and testing
• Secure data transmission protocols
• Employee training on data protection responsibilities

However, no system is completely secure. If there is a breach of your personal data, we will notify you and the relevant authorities as required by GDPR.

Contact Details and Data Subject Rights

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your data is processed, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been processed unlawfully. The ICO can be contacted at www.ico.org.uk.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. We will notify you of any material changes by updating the "Last updated" date and, where appropriate, by posting a prominent notice on our website. Your continued use of our services constitutes your acceptance of the updated policy.