SECTION HEADING

WHO DOES THIS PRIVACY NOTICE APPLY TO? 

WHAT’S OUR APPROACH TO PRIVACY?

HOW WILL WE USE YOUR PERSONAL INFORMATION?

WHEN WILL WE SHARE YOUR PERSONAL INFORMATION WITH OTHERS?

CIRCUMSTANCES     IN     WHICH     WE    WILL     SEND    YOUR      PERSONAL

INFORMATION OUTSIDE THE EEA

WHAT RIGHTS DO YOU HAVE UNDER DATA PROTECTION LAW?

HOW CAN YOU GET IN TOUCH WITH US?

HOW CAN YOU COMPLAIN ABOUT OUR USE OF YOUR PERSONAL INFORMATION?

HOW WILL WE NOTIFY YOU OF ANY CHANGES TO OUR PRIVACY NOTICE?

1.

 We must be upfront about how we intend to use your personal information and must use your personal information fairly. Providing privacy information to individuals (such as in this privacy notice) is one aspect of using personal information fairly. 

2.

 We must only use your personal information if we have a legal basis to do so under data protection law. These legal bases include: 

•                  That we need to use your personal information to perform a contract between us (or to take steps at your request prior to entering into a contract); 

•                  That we (or someone else) has a legitimate reason for needing to use your personal information and those legitimate interests are not outweighed by your rights or interests. We must balance our respective rights and interests before we can rely upon this legal basis.

3.

 We are only permitted to share your personal information with others in certain circumstances and if we take steps to ensure that your personal information will be secure.

4.

 Generally speaking, we must only use your personal information for the specific purposes we have told you about. If we want to use your personal information for other purposes, we need to contact you again to tell you about this. 

5.

 We must not hold more personal information than we need for the purposes we have told you about and must not retain your personal information for longer than is necessary for those purposes (this is known as the “retention period”). We must also dispose of any information that we no longer need securely. 

6.

 We must ensure that we have appropriate security measures in place to protect your personal information. 

7.

 We must act in accordance with your rights under data protection law.

8.

 We must not transfer your personal information outside the European Economic Area (“EEA”) unless certain safeguards are in place. 

What personal information we will use 

•

Your name;

•

Your address;

•

Your previous address;

•

Your email address; 

•

Your telephone number;

•

Your driver’s licence

•

Bank details; 

•

Finance details;

•

Home owner details;

•

Employment details;

•

Vehicle details.

How we will obtain the personal information

•

Provided by you when using our services, or making an enquiry.

What purposes we will use the

personal information for

•

We will use your name, address and other contact details to communicate with you about the services/vehicle(s) you have requested from us and to deliver any vehicle we have sourced for you. We will also use this information to deal with any enquiries you make; 

•

We will use your bank details to take payment for the vehicle(s), either directly or via a finance company; 

•

We will use the personal information provided by you to complete the finance request on

line direct with the finance providers we use, namely Motonovo Finance, Close Brothers Motor Finance,

Santander or Lex Auto Lease;

•

If your application for finance is accepted, we will keep a copy of your finance Agreement.

The legal bases for processing we rely upon

•

Our use of your personal information is necessary for the performance of the contract between us or to take steps prior to entering into the contract.

How long we retain the personal information and why 

•

We will keep your personal information for six years in case of any contractual disputes and also to ensure we have the necessary information about the services/vehicle(s) provided should you wish to use our services again. 

Consequences        of         not providing/permitting us to obtain personal information 

•

Without provision of your personal information we will be unable to supply goods or services to you.

What personal information we will use 

•

Your name and contact details;

•

Your bank account details.           

How we will obtain the personal information

•

Provided by you when you agree to supply to us or provide us with services.                  

What purposes we will use the

personal information for

•

To enter into an agreement with you, to contact you, to administer the agreement between us and to pay you. 

The legal grounds we rely upon

•

The use of your personal information to enter into an agreement for supply of goods or services, for correspondence in relation to the services and associated matters and to make payment for goods/services

provided will be necessary for the purposes of taking steps prior to entering into a contract with you and for the performance of the contract between us.  

How long we retain the personal information and why 

•

We will retain your personal information for the duration of the provision of services and for 6 years thereafter incase there should be any contractual dispute. 

Consequences        of         not providing/permitting us to obtain personal information 

•

Without your personal information, we will not be able to engage you to provide us with goods/services nor will we be able to pay you.  

What personal information we will use 

•     Your image captured on the CCTV

cameras

What purposes we will use the personal information for

•        To prevent crime and protect buildings and assets from damage, disruption, vandalism and other crime;

•        For the personal safety of staff, visitors and other members of the public, and to act as a deterrent against crime; 

•        Assisting in the maintenance of public order;

•        To support law enforcement bodies in the prevention, detection, investigation and prosecution of crime;

•        To provide assistance with civil claims;

•        To assist in day-to-day management, including ensuring the health and safety of staff and others.

The legal basis for processing we rely upon

• It is in our legitimate interests to protect our buildings and assets from crime and vandalism and to prevent and detect unlawful acts.

How      long    we    retain      the

personal information and why 

•

Data recorded by the CCTV system will be digitally recorded and stored securely on hard drives. The digital recording system will automatically overwrite old images with newer data every 20-30 days.

•

Where footage has been requestedby thepolice, prosecution agencies, legal representatives or people whose images have been recorded and retained the usual retention period may be overridden and the footage will be retained until the matter is resolved.

Who we share the personal information with

•

the police;

•

prosecution agencies;

•

relevant legal representatives; 

•

people whose images have been recorded and retained.

Who are our finance partners? 

•

Our service partners include Motonovo Finance, Close Brothers Motor Finance, Santander and Lex Auto Lease.   

Why we need to share your personal information with them 

•

We use the finance partners described above to enable us to arrange car finance on your behalf.

The legal bases we rely upon when sharing your personal information 

•

The sharing of your personal data with our finance partners is necessary for the performance of our contract with you.

What precautions do we take?

•

We only deal with large reputable finance companies who have appropriate security and privacy procedures in place. Their privacy notices can be viewed on their websites.

If we sell, transfer or merge parts of our business or our assets

As we continue to develop our business we may choose to sell, transfer or merge parts of our business or our assets.  Alternatively, we may seek to acquire other businesses or merge with them. During any such process, we may need to disclose your personal information to

other parties (such as potential purchasers or investors). Where we do so, we will be relying upon our legitimate business interests. 

However, we will only share your personal information in this way if the third parties in question agree to keep your personal information safe and private. 

Also, if, for example, a merger happens, the purchaser will only be able to use your personal information in the ways set out in this privacy notice. 

Legal or regulatory requirements

On occasion, we may be required to disclose your personal information to organisations such as the courts or the police to comply with legal obligations we are subject to and/or to prevent fraud or crime. 

Protecting our business 

From time to time we may need to disclose your personal information in connection with steps we need to take to protect our business interests or property. 

Professional advice and legal action

We may need to disclose your personal information to our professional advisers

(for example, our lawyers and accountants) in connection with the provision by them of professional advice and/or the establishment or defence of legal claims. 

Your rights

What this involves

What our obligations are

A right of access 

This is a right to obtain access to your personal data and various

supplementary information. 

•                  We must provide you with a copy or your     personal information      and the       other

supplementary information without undue delay and in any event within 1 month of receipt of your request; 

•                  We cannot charge you for doing so save in specific circumstances

(such as where you request further copies of your personal information). 

A right to have personal data rectified

•          This is a right to have    your

personal information rectified if it is inaccurate or incomplete.

•                  We must rectify

any inaccurate or incomplete information without undue delay and in any event within 1 month of receipt of your request;

•                  If          we             have disclosed         your personal information      to others, we must

(subject to certain exceptions)

contact         the recipients to inform them,            that          your

personal information requires rectification.

A right to erasure

•

•

•

This is a right to have    your

personal

information

deleted            or removed. 

This     right     only applies in certain circumstances (such as where we no longer need the personal information for the purposes for which it was collected).

We have the right to refuse to delete or remove your personal data in certain circumstances.

•

•

If this right applies, we must delete or remove            your

personal information without undue delay and in any event within 1 month of receipt of your request;

If we have disclosed your personal information to others, we must

(subject to certain exceptions)

contact            then recipients to inform them    that      your personal information      must be erased.

   A       right       to

portability

data

•

•

•

This is a right to obtain and re-use your     personal information      for your     own

purposes;

It includes a right to ask that your personal information      is transferred      to another organisation (where technically feasible).

This right only applies in certain limited circumstances. 

•

•

•

If this right applies we must provide your personal information to you in a structured, commonly used and machine

reasonable form 

Again, we must act without undue delay and in any event within 1 month of receipt of your request;

We cannot charge you for this service. 

A right to object 

•

This is a right to object to the use of your     personal information.

•

If you object to us using   your personal information      for direct   marketing,

•

•

•

The right applies in certain             specific circumstances only. 

You can use this right to challenge our use of your personal information based on our legitimate interests;

You can also use this right to object to use of your personal information      for direct marketing.

•

we       must             stop using             your

personal information in this way as soon as we receive             your request. 

If you object to other uses of your personal information,

whether we have to stop using your personal information will depend on the

particular circumstances. 

automated making

decision

•

This is a right not to be subject to a decision which is made solely on the basis         of

automated processing of your personal information where the decision in question will have a legal impact on you or a similarly significant effect. 

•

•

Where such a decision is made, you must be informed of that fact as soon as reasonably practicable;

You then have 21 days from receipt of the notification to request that the decision is reconsidered or that a decision is made that is not based solely on automated processing;

•

Your request must be complied with within 21 days. 

A        right    to         restrict processing 

•

•

This is a right to ‘block’ or suppress processing of your personal information.

This right applies in         various

circumstances,

•

If we are required to restrict our processing of your personal information we will be able to store it but not otherwise use it. 

including where you contest the accuracy of your information).

•

We may only retain enough information about you to ensure that the restriction is respected in future. 

•

If we have disclosed your personal information to others, we must

(subject to certain exceptions) contact them to tell them             about   the restriction on use. 

Postal address

Unit 7, Swift Business Centre, Keen Road, Ocean Park, Cardiff, CF24 5JR

Email address 

neil.price@ask4cars.co.uk

Phone number 

029 2049 7272