Protecting your personal information

Privacy Policy

Privacy Policy of Auto Pro Cars

Auto Pro Cars values your privacy and is dedicated to safeguarding your personal data. This privacy notice explains how we handle your personal data when you visit our website, no matter where you access it from. It also outlines your privacy rights and how the law protects your information.

1) Key Information About Us and Our Commitment to Your Privacy
Purpose of This Privacy Notice and How It Affects You
  • This privacy notice is designed to inform you about how Auto Pro Cars collects and processes your personal data through your use of our website. This includes any data you provide when signing up for a newsletter or making a purchase.
  • Our website is not intended for children, and we do not knowingly collect personal data from individuals under the age of 16.
  • It’s important that you read this privacy notice alongside any other privacy or fair processing notices we may provide when collecting or processing your personal data, so that you are fully informed about how and why we use your data. This notice is intended to supplement, not replace, those other notices.
Controller

Auto Pro Cars is the controller and is responsible for your personal data (referred to as 'the Company,' 'we,' 'us,' or 'our' in this privacy notice). We have appointed a Data Privacy Manager to oversee matters related to this privacy notice. If you have any questions about this notice, or if you wish to exercise your legal rights, please contact our Data Privacy Manager using the details provided below.

Contact Details
  • Full name of legal entity: Auto Pro Cars
  • Name of Data Privacy Manager: Adnan Faisal
  • Email address: info@autoprocars.co.uk
  • Postal address: 84A Ford End Road Bedford England MK40 4JX
  • Telephone number: 07399999188
  • You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters (www.ico.org.uk). However, we would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first.

    It is important that the personal data we hold about you is accurate and up-to-date. Please inform us of any changes to your personal data during your relationship with us.
Third-Party Links

This website may contain links to third-party websites, plug-ins, and applications. Clicking on these links or enabling these connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy policies. When you leave our website, we encourage you to review the privacy notice of every website you visit.

2) The data we collect about you

Personal data, or personal information, refers to any information that can identify an individual. This does not include data where the identity has been anonymized (anonymous data). We may collect, use, store, and transfer various types of personal data about you, which we have grouped as follows:

  • Identity Data: Includes your first name, maiden name, last name, username or similar identifier, marital status, title, date of birth, and gender.
  • Contact Data: Includes billing address, delivery address, email address, and telephone numbers.
  • Financial Data: Includes bank account details and payment card information.
  • Transaction Data: Includes details about payments to and from you, as well as other information about the products and services you have purchased from us.
  • Technical Data: Includes your internet protocol (IP) address, login credentials, browser type and version, time zone setting, location, browser plug-in types and versions, operating system, platform, and other technology on the devices you use to access our website.
  • Profile Data: Includes your username and password, purchase or order history, your interests, preferences, feedback, and survey responses.
  • Usage Data: Includes information about how you use our website, products, and services. We also collect, use, and share Aggregated Data, such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but does not, in itself, identify you. For example, we may aggregate your Usage Data to calculate the percentage of users who access a particular feature on our website. However, if we combine Aggregated Data with your personal data so that it can directly or indirectly identify you, we will treat the combined data as personal data and handle it in accordance with this privacy notice.
  • Special Categories of Personal Data: We do not collect any Special Categories of Personal Data about you. This includes data related to your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health information, and genetic or biometric data. We also do not collect information regarding criminal convictions and offenses.
If You Fail to Provide Personal Data

In cases where we are required by law to collect personal data, or where it is necessary for the performance of a contract we have with you, if you fail to provide that data when requested, we may be unable to fulfill the contract or provide the services we offer. For example, if we need certain information to deliver a service to you, we may not be able to proceed without it. In such cases, we may have to cancel a service you have with us. If this happens, we will inform you at the time.

3) How Is Your Personal Data Collected?

We use various methods to collect data from and about you, including through:

  • Direct Interactions: You may provide us with your Identity, Contact, and Financial Data by filling in forms or corresponding with us by post, phone, email, or other means. This includes personal data you provide when you:
  • Apply for our services;
  • Make an enquiry;
  • Postal address: 84A Ford End Road, Bedford, Bedfordshire, MK40 4JX
  • Telephone number: 01234 637805
  • You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters (www.ico.org.uk). However, we would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first.

    It is important that the personal data we hold about you is accurate and up-to-date. Please inform us of any changes to your personal data during your relationship with us.
  • Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data using cookies, server logs, and other similar technologies. Additionally, we may receive Technical Data about you if you visit other websites that employ our cookies. Please refer to our cookie policy for further details.

    For more information about how we handle your data, please see our privacy policy.
  • Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources as set out below:
  • Technical Data from the following parties:
  • (a) analytics providers;
  • (b) advertising networks; and
  • (c) search information providers.
  • Contact, Financial and Transaction Data from providers of technical, payment and delivery services.
  • Identity and Contact Data from data brokers or aggregators.
  • Identity and Contact Data from publicly available sources.
4) How we use your personal data

We will only process your personal data when permitted by law. In most cases, we will use your personal data under the following circumstances:

  • When it is necessary to fulfill the contract we are about to enter into or have already entered into with you.
  • When it is essential for our legitimate interests (or those of a third party), provided your interests and fundamental rights do not override those interests.
  • When we need to comply with a legal or regulatory obligation.

In general, we do not rely on consent as the legal basis for processing your personal data, except for when sending third-party direct marketing communications to you via email or text message. You have the right to withdraw your consent to marketing at any time by contacting us.

Purposes for which we will use your personal data

We use various methods to collect data from and about you, including through:

  • Purpose/Activity
  • Type of data
  • Lawful basis for processing including basis of legitimate interest
  • To register you as a new customer
  • (a) Identity (b) Contact
  • Performance of a contract with you
  • To process and deliver your enquiry, request or order including: (a) Manage payments, fees and charges (b) Collect and recover money owed to us (c) Manage financial applications
  • (a) Identity (b) Contact (c) Financial (d) Transaction (e) Marketing and Communications
  • (a) Performance of a contract with you (b) Necessary for our legitimate interests (to recover debts due to us)
  • To manage our relationship with you which will include: (a) Notifying you about changes to our terms or privacy policy (b) Asking you to leave a review or take a survey
  • (a) Identity (b) Contact (c) Profile (d) Marketing and Communications
  • (a) Performance of a contract with you (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our services)
  • To enable you to partake in a prize draw, competition or complete a survey
  • (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications
  • (a) Performance of a contract with you (b) Necessary for our legitimate interests (to study how customers use our services, to develop them and grow our business)
  • To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)
  • (a) Identity (b) Contact (c) Technical
  • (a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) (b) Necessary to comply with a legal obligation
  • To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you
  • (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Technical
  • Necessary for our legitimate interests (to study how customers use our services, to develop them, to grow our business and to inform our marketing strategy)
  • To use data analytics to improve our website, services, marketing, customer relationships and experiences
  • (a) Technical (b) Usage
  • Necessary for our legitimate interests (to define types of customers for our services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)
  • To make suggestions and recommendations to you about services that may be of interest to you
  • (a) Identity (b) Contact (c) Technical (d) Usage (e) Profile
  • Necessary for our legitimate interests (to develop our services and grow our business)
Marketing

We are dedicated to offering you options regarding how your personal data is used, especially in the areas of marketing and advertising. To support this, we have implemented the following controls for managing your personal data preferences:

Promotional offers from us

We may use your Identity, Contact, Technical, Usage, and Profile Data to assess what we believe may interest you, including products, services, and offers that could be relevant to your needs. This process is how we determine the marketing content we send to you. You will receive marketing communications from us if you have requested information or purchased services from us, provided you have not opted out of receiving such communications.

Opting out

You can request that we or third parties stop sending you marketing messages at any time. You can do this by logging into the website and adjusting your marketing preferences, by using the opt-out links in any marketing communication we send, or by contacting us directly. Please note that opting out of marketing messages will not affect the processing of personal data you have provided as part of a service purchase, service experience, or other transactions.

Cookies

You can configure your browser to block all or certain cookies, or to alert you when websites attempt to set or access cookies. However, please be aware that disabling or refusing cookies may affect the functionality of some parts of this website. For more details on the cookies we use, please refer to our cookie policy.

Change of purpose

We will only use your personal data for the purposes for which it was originally collected, unless we reasonably determine that it is necessary to use it for another purpose that is compatible with the original one. If you would like an explanation of how the new purpose is compatible with the original, please contact us. If we need to use your personal data for a purpose that is unrelated to the original, we will inform you and explain the legal basis that allows us to do so. Please note, we may process your personal data without your knowledge or consent, in accordance with the rules outlined above, when required or permitted by law.

5) Disclosures of your personal data

We may need to share your personal data with the parties listed below for the purposes outlined in the table in paragraph 4 above.

  • External Third Parties as defined in the Glossary.
  • Third parties to whom we may sell, transfer, or merge parts of our business or assets, or with whom we may seek to acquire or merge. In the event of such a change in ownership, the new owners may use your personal data in the same manner described in this privacy notice.
6) International transfers

We do not transfer your personal data outside the European Economic Area (EEA).

7) Data security

We have implemented appropriate security measures to protect your personal data from accidental loss, unauthorized access, misuse, alteration, or disclosure. Access to your personal data is restricted to employees, agents, contractors, and third parties with a legitimate business need. They are only allowed to process your data according to our instructions and are bound by confidentiality obligations. We have established procedures to address any suspected data breaches and will notify you and the relevant regulatory authorities if required by law.

8) Data retention
How long will you use my personal data for?

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including meeting any legal, accounting, or reporting obligations. In determining the appropriate retention period, we consider factors such as the nature, amount, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for processing the data, whether those purposes can be achieved by other means, and any applicable legal requirements.

9) HYour legal rights

Under certain circumstances, you have rights regarding your personal data under data protection laws. (For more details, please refer to the glossary.)

  • Request access to your personal data.
  • Request correction of any inaccuracies in your personal data.
  • Request the deletion of your personal data.
  • Object to the processing of your personal data.
  • Request the restriction of processing your personal data.
  • Request the transfer of your personal data.
  • Withdraw your consent to the processing of your personal data.

If you wish to exercise any of the rights listed above, please Contact Us.

No fee usually required

You will not be charged a fee to access your personal data or exercise any of your other rights. However, we may charge a reasonable fee if your request is clearly unreasonable, repetitive, or excessive. In such cases, we may also refuse to comply with your request.

What we may need from you

To help us confirm your identity and ensure your right to access your personal data (or exercise any of your other rights), we may request specific information from you. This is a security measure to prevent unauthorized disclosure of personal data. We may also reach out for additional information related to your request in order to expedite our response.

Time limit to respond

We aim to respond to all valid requests within one month. However, if your request is particularly complex or you have made multiple requests, it may take longer. In such cases, we will notify you and provide updates on the status of your request.

10) Glossary
LAWFUL BASIS

Legitimate Interest refers to our business’s interest in managing and operating our activities in a way that allows us to provide you with the best service and a secure experience. We ensure that we carefully consider and balance any potential impact (both positive and negative) on you and your rights before processing your personal data for our legitimate interests. We will not use your personal data in ways where our interests are outweighed by the impact on you, unless we have your consent or are otherwise required or permitted by law. If you would like more information on how we assess the balance of legitimate interests and potential impacts, please contact us. Performance of Contract means processing your personal data when it is necessary to fulfill a contract we have with you, or to take steps at your request prior to entering into such a contract. Comply with a Legal or Regulatory Obligation means processing your personal data when it is necessary for us to meet legal or regulatory obligations we are subject to.

THIRD PARTIES
External Third Parties
  • Service providers acting as processors or joint controllers, including those who provide finance, website, IT, and system administration services.
  • Professional advisers acting as processors or joint controllers, such as lawyers, bankers, auditors, and insurers, who provide consultancy, banking, legal, insurance, and accounting services.
  • HM Revenue & Customs, regulators, and other authorities based in the United Kingdom, acting as processors or joint controllers, who require reporting of processing activities in certain circumstances.
YOUR LEGAL RIGHTS

You have the right to:

  • Request access to your personal data (commonly known as a "data subject access request"). This allows you to receive a copy of the personal data we hold about you and verify that we are processing it lawfully.
  • Request correction of your personal dataThis enables you to have any incomplete or inaccurate data we hold about you corrected. Please note, we may need to verify the accuracy of the new data you provide.
  • Request erasure of your personal data This allows you to ask us to delete or remove your personal data if there is no valid reason for us to continue processing it. You also have the right to request erasure if you have successfully objected to processing (see below), if we have processed your data unlawfully, or if we are required to erase it to comply with local law. However, please note that we may not always be able to fulfill your request due to specific legal reasons, which we will inform you of, if applicable, at the time of your request.
  • Object to the processing of your personal dataYou can object if we are processing your data based on legitimate interests (or those of a third party) and you have a specific reason to believe that processing negatively impacts your fundamental rights and freedoms. You also have the right to object if we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your data, which override your rights and freedoms.
  • Request restriction of processing of your personal data This allows you to ask us to suspend the processing of your personal data in the following situations: (a) if you want us to verify its accuracy; (b) if the data is being used unlawfully, but you prefer we do not erase it; (c) if you need us to retain the data even though we no longer need it, in order to establish, exercise, or defend legal claims; or (d) if you have objected to our use of your data and we need to verify whether we have overriding legitimate grounds to continue processing it.
  • Request the transfer of your personal data You can ask for your personal data to be provided to you or a third party in a structured, commonly used, machine-readable format. Please note that this right applies only to automated data that you have initially consented to us using, or that we used to perform a contract with you.
  • Withdraw consent at any time if we are relying on your consent to process your personal data. Please note that withdrawing consent will not affect the lawfulness of any processing that occurred before you withdrew it. If you withdraw your consent, we may no longer be able to provide certain services, and we will inform you if this is the case at the time of your request.