Privacy Policy

We are committed to protecting and respecting your privacy.

Everyone has rights with regard to the way in which their personal  information is handled. During the course of our activities we will  collect, store and process personal information about our customers,  suppliers and other third parties, and we recognise that the correct and  lawful treatment of this data will maintain confidence in the  organisation and will provide for successful business operations.

This policy sets out the basis on which any personal information we  collect from you, or that you provide to us, will be processed by us.  Please read the following carefully to understand our views and  practices regarding your personal information and how we will treat it.

When processing your information, we must comply with the six  enforceable principles of good practice. These provide that your  personal information must be:

• processed lawfully, fairly and in a transparent manner,
• processed for specified, explicit and legitimate purposes,
• adequate, relevant and limited to what is necessary,
• accurate and kept up-to-date,
• kept for no longer than is necessary, and
• processed in a manner than ensures appropriate security.

We may collect, use, store and transfer different kinds of personal information about you, including:

• Identity Data, such as your name, marital status, title, date of birth, gender, National Insurance Number.
• Contact Data, such as your home address, email address and telephone numbers,
• Financial Data, such as bank account details, and details of any finance agreements you wish to settle as part of a transaction with us.
• Document Data, such as your V5 vehicle registration document,  and copies of your driving licence, passport, utility bill and other  documents that verify your identity,
• Transaction Data, including details about payments to and  from you, and other details of products and services we may supply,  including payment made on your behalf to your finance company to settle a  finance agreement.
• Where You Represent A Business Entity, the name of the organisation you represent, that organisation’s Contact Data, Financial Data and Transaction Data
• Technical Data, including IP addresses, your log-in data,  browser type and version, time-zone setting and location, browser  plug-in types and versions, operating system and platform and other  technology on the devices you use to access our website,
• Profile Data, which can compiled from valuations made by you, feedback and survey responses,
• Usage Data, including information about how you use our website
• Marketing Data, such as your preferences in receiving communications from us

Information relating to your racial or ethnic origin, political  opinions, religious or philosophical beliefs, trade union membership,  health, criminal convictions, sex life or sexual orientation, or certain  types of genetic or biometric data is known as ‘special category’ data.

During the course of dealing with you, we do not expect to collect any ‘special category’ data about you.

We may obtain personal information by directly interacting with you, such as:

• when you use the appointment booking tool available on our website,
• entering into an agreement with us to sell your vehicle,
• participate with our social media team through an online platform,
• enter a competition, promotion or survey organised by us, or otherwise providing us with feedback,
• corresponding with us by phone, email, letters or otherwise.

We may also collect personal information about you from third parties or publicly-available sources, such as:

• providers of technical, payment and delivery services,
• Companies House, or other open-source websites that enable us to  validate information to satisfy terms of our contract, for example,  confirmation of business/asset ownership, where we suspect or reasonably  believe an individual is not acting in accordance with the terms of our  contract.

We will only use your personal information when the law allows us to.  Most commonly, we will use your personal information in the following  circumstances:

• you have given us consent,
• we need to perform a contract we are about to enter into, or have entered into, with you,
• where it is necessary for our or a third party’s legitimate  interests, and your interests and rights do not override those  interests, or
• where we need to comply with a legal or regulatory obligation.

We will only use ‘special category’ information where the law allows us to do so.

We will only use your personal information for the purpose(s) for which  we collected it, unless we reasonably consider that we need to use it  for another reason and that reason is compatible with the original  purpose. If we need to use your personal information for an unrelated  purpose, we will notify you and we will explain the legal basis which  allows us to do so.

It is a requirement for you to provide use with your name, contact details & postcode for the purpose of us providing you with your valuation. If you wish to sell your vehicle to us, is a contractual  requirement for you to provide us with certain information, namely your  name, address, email address, vehicle registration details and bank  account information, and other proofs we may request to satisfy our  contract.

If you do not provide us with information required to obtain a  valuation or to enter into contract with us to sell your vehicle, we  will be unable to provide you with our service.

We may share your personal information with the parties set out below:

• the DVLA,
• other personnel within your organisation, or any other organisation  that is party to or otherwise has a legitimate interest in the agreement  between us and your organisation,
• providers of IT and system administration services to our business,
• our professional advisers (including solicitors, bankers, auditors and insurers),
• HM Revenue & Customs, the Information Commissioner’s Office,  Trading Standards, Law enforcement, regulators and other authorities who  require reporting of processing activities in certain circumstances,
• analytics and search engine providers that assist us in the improvement and optimisation of our website.
• third parties to whom we may choose to sell, transfer, or merge  parts of our business or our assets. Alternatively, we may seek to  acquire other businesses or merge with them. If a change happens to our  business, then the new owners may use your personal information in the  same way as set out in this policy.

We require all third parties to respect the security of your personal  information and to treat it in accordance with the law. We do not allow  our third-party service providers to use your personal information for  their own purposes and only permit them to process your personal  information for specified purposes and in accordance with our  instructions.

All information you provide to us is stored on our secure servers in the United Kingdom.

We will take all steps reasonably necessary to ensure that your data  is treated securely, including taking the following safeguards:

• PCI DSS standards. We never request or hold your credit card  or debit card details. Where you need to make a payment to a finance  company using your credit card, we use the secure WorldPay portal which  is fully compliant with PCI DSS standards. Our systems do not record any  of the information entered into this portal.
• Building entry controls & secure storage. Our data is  held at a Tier II data centre with secure access controlled via 24 hr  security, biometric access, internal & external CCTV & security  breach alarms. Our Central Support team operate in a building with  secure access & alarmed entry controlled by allocated swipe card  access internal & external CCTV, with visitors access logged via  reception, & escorted entry once in the building.
• Secure lockable desks and cupboards. Where documents  containing personal information are in paper form for an interim period,  they are stored in secure Desks and cupboards.
• Methods of disposal. Paper documents are disposed of by shredding in a manner that ensures confidentiality.
• Firewalls and Encryption. We use up-to-date and industry-standard firewall and encryption software technology.
• Overseas transfers. Whenever we transfer your personal  information outside the United Kingdom, we ensure a similar degree of  protection is afforded to it by ensuring that we apply appropriate  safeguards (either by transferring data only to recipients in the  European Union, to recipients in countries approved by the European  Commission, to recipients that are party to the EU-US Privacy Shield, or  by using specific contracts approved by the European Commission).

If you are concerned about the levels of data security in any of  those countries, please let us know and we will endeavour to advise what  steps will be taken to protect your data when stored overseas.

Unfortunately, the transmission of information via the internet is  not completely secure. Although we will do our best to protect your  personal information, we cannot guarantee the security of your data  transmitted to our website; any transmission is at your own risk. Once  we have received your information, we will use strict procedures and  security features to try to prevent unauthorised access.

You have various legal rights in relation to the information you give us, or which we collect about you, as follows:

• You have a right to access the information we hold about you  free-of-charge, together with various information about why and how we  are using your information, to whom we may have disclosed that  information, from where we originally obtained the information and for  how long we will use your information.
• You have the right to ask us to rectify any information we hold about you that is inaccurate or incomplete.
• You have the right to ask us to erase the information we hold  about you (the ‘right to be forgotten’). Please note that this right  can only be exercised in certain circumstances and, if you ask us to  erase your information and we are unable to do so, we will explain why  not.
• You have the right to ask us to stop using your information  where: (i) the information we hold about you is inaccurate; (ii) we are  unlawfully using your information; (iii) we no longer need to use the  information; or (iv) we do not have a legitimate reason to use the  information. Please note that we may continue to store your information,  or use your information for the purpose of legal proceedings or for  protecting the rights of any other person.
• You have the right to ask us to transmit the information we  hold about you to another person or company in a structured,  commonly-used and machine-readable format. Please note that this right  can only be exercised in certain circumstances and, if you ask us to  transmit your information and we are unable to do so, we will explain  why not.
• Where we use/store your information because it is necessary for our legitimate business interests, you have the right to object to us using/storing your information.  We will stop using/storing your information unless we can demonstrate  why we believe we have a legitimate business interest which overrides  your interests, rights and freedoms.
• Where we use/store your data because you have given us your specific, informed and unambiguous consent, you have the right to withdraw your consent at any time.
• You have the right to object to us using/storing your information for the purpose of contacting you regarding your valuation.

If you wish to exercise any of your legal rights, please contact our Customer Service Team by emailing us at enquiries@wesellanyauto.co.uk.