Privacy Policy

Last updated: January 25, 2025

1. Introduction

Car Market UK ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or use our services.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Name and contact details (email address, phone number, postal address)
• Vehicle preferences and requirements
• Financial information for financing applications
• Communication records with our team
• Account credentials if you create an account

2.2 Technical Information

We automatically collect certain technical information, including:

• IP address and browser type
• Device information and operating system
• Website usage patterns and analytics
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal information for the following purposes:

• Providing our car market services and customer support
• Processing transactions and managing financing applications
• Sending newsletters and marketing communications (with consent)
• Improving our website and services
• Complying with legal obligations and preventing fraud
• Conducting market research and analytics

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

• Contract performance: When necessary to fulfill our services
• Legitimate interests: For business operations and improvements
• Consent: For marketing communications and non-essential cookies
• Legal obligations: When required by law

5. Information Sharing and Disclosure

We may share your information with:

• Service providers: Third-party companies that assist our operations
• Financial institutions: For processing financing applications
• Legal authorities: When required by law or to protect our rights
• Business partners: With your consent for relevant services

We never sell your personal data to third parties for their marketing purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Access controls and employee training
• Secure data storage and backup procedures

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. Retention periods vary based on data type and purpose:

• Customer records: 7 years after last transaction
• Marketing communications: Until you withdraw consent
• Website analytics: 26 months
• Support communications: 3 years

8. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal requirements)
• Restriction: Limit how we process your data
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: For consent-based processing

To exercise these rights, contact us at [email protected].

9. Cookies Policy

We use cookies and similar technologies to enhance your browsing experience. For detailed information about our cookie usage, please see our Cookie Policy.

10. International Transfers

Your data may be transferred to and processed in countries outside the UK. We ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the updated policy on our website and updating the "Last updated" date.

13. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

14. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters.

ICO Website: https://ico.org.uk