We are committed to respecting your privacy. This notice is to explain how we may use personal information we collect when you:
References to we, our or us in this privacy notice are to Cawdor Group, being Cawdor Cars (Newcastle Emlyn) Limited.
1. PERSONAL INFORMATION
When you interact with us, particularly when you purchase a vehicle, parts or services, you may provide us with personal information about you, such as your name, address, gender, date of birth, telephone number, email address, occupation or job title, payment and financial information, including bank details, information about your vehicle including service history and your Motability details.
You may also need to provide us with a copy of identification documents such as your passport, driving licence and/or a utility bill. These documents will include additional personal information about you such as (depending on the nature of the document) your nationality, place of birth, photograph and passport / driving licence number.
Depending on the nature of our interactions with you, there may be certain essential personal information that we have to collect from you so that we can provide you with the information, goods or services that you have requested. This will vary depending on the relationship we have with you.
For example, if you contact us with an enquiry about a vehicle you are interested in purchasing we will need to collect contact details so that we can get in touch with you. If you then decide to place an order for that vehicle we will need to collect additional information so that we can process that order, including your postal address and payment information.
We may also ask you for additional personal information which it is optional for you to provide but which will allow us to improve the service that we provide to you. For example, you may provide us with additional contact details to make it easier for us to get in touch with you, or with additional information about your circumstances and preferences to allow us to better tailor our services to you.
We will always aim to make it clear which personal information it is necessary for you to provide and which personal information is optional. However, if you are unsure as to whether you are required to provide any particular piece of personal information please ask.
Each of our dealerships has CCTV for security purposes and the safety of our staff. We may therefore collect CCTV footage of you if you visit our premises.
2. USES MADE OF THE INFORMATION
We are committed to protecting your privacy, and will only use your personal information in accordance with applicable data protection legislation, including the Data Protection Act 1998 and (once applicable) the General Data Protection Regulation and the UK implementing legislation.
Specifically, we may use your personal information as follows:
To perform our obligations in respect of an order you place, including:
Where you have expressly consented to us doing so, including:
Where it is necessary to protect your vital interests, including where we need to tell you about a potential safety issue or product recall;- for carrying out checks to prevent money laundering; and
Where it is necessary for compliance with legal obligations, including:
Where we otherwise have a legitimate interest in doing so, including:
3. SHARING OF YOUR PERSONAL INFORMATION WITH THE MANUFACTURER
- it is in our legitimate interest to do so, as we are required to do so by the terms of our agreement with the manufacturer and to maintain our on-going relationship with the manufacturer;
- it is required to fulfil your order or other transaction, handle complaints or provide you with a service or information that you have requested;
- it is in the manufacturer’s legitimate interest to have that information, to enable it to communicate important information to you, better understand customer demographics and requirements and (where you have agreed to receive marketing communications) to send you information that it believes may be of interest to you; and
- it is also in your interest that we share your personal information with the manufacturer, so that you can receive important safety information and other relevant communications.
4. OTHER CIRCUMSTANCES IN WHICH WE MAY SHARE YOUR PERSONAL INFORMATION
- a finance provider and/or broker for the purposes of investigating the options available to you, obtaining a proposal and putting that finance agreement in place;
- a third party providing value added services to you such as:- an insurance provider; roadside assistance service providers; customer contact centres; mobility and car hire providers; any party you have given us permission to speak to (such as a relative or friend), your motor insurance company and other people and companies associated with you
- providers of outsourced services, such as- hosting and IT support or maintenance services and IT security (to the extent necessary for the provider to provide those outsourced services to us); direct marketing communications agencies and consultants; market research and market analytics service providers; legal, accountancy, auditors and other professional advisers; data storage and destruction companies; customer loyalty programmes
- our employees and employees of the manufacturer of your vehicle
- third parties with which we may choose to improve our processes, products or services or to investigate the possibility of new processes, products or services.
- the prospective seller or buyer of any business or assets in the event that we sell or buy any business or assets.
- to credit reference agencies for the purposes of carrying out searches, a record of which searches will be kept and may be used by other entities in assessing applications from you and/or members of your household for credit in the future; and
- to other lenders for fraud detection, monitoring and prevention purposes.
5. TRANSFERRING YOUR PERSONAL INFORMATION INTERNATIONALLY
- a country in the European Economic Area or that is otherwise considered to have data protection rules that are equivalent to those in the United Kingdom; or
- a country which is not considered to have the same standards of protection for personal data as those in the United Kingdom, in which case we will take all steps required by law to ensure sufficient protections are in place to safeguard your personal information, including where appropriate putting in place contractual terms approved by the relevant regulatory authorities.
6. RETENTION, UPDATING AND REMOVAL OF YOUR PERSONAL INFORMATION
Retention
Where you provide us with personal information we may retain this information for future use, including:
The duration for which we retain your personal information will differ depending on the type of information and the reason why we collected it from you. However, in some cases personal information may be retained on a long term basis: for example, personal information that we need to retain for legal purposes will normally be retained for at least six years in accordance with usual commercial practice and regulatory requirements. How long we keep data is primarily determined by how long we need it for the purposes we told you we were going to use it for, time periods set out in law and the period we need to keep it to defend ourselves against legal action. We also retain certain details for such period as may be necessary to validate and handle any motor insurance claims we receive after the statute of limitations has expired and any claims we receive where the claimant was not aware of the injuries until a long time after they were caused.
Right To Rectification
It is important to ensure that the personal information we hold about you is accurate and up-to-date, and you should let us know if anything changes, for example if you move home or change your phone number or email address. You may be able to update some of the personal information we hold about you through our customer portal. Alternatively, you can contact us using the details in paragraph 13.
Right Of Access
You have a right to know what personal data we hold on you, why we hold the data and how we are processing the data. Please send you request using the details in paragraph 13 with as much information and detail as possible to help us identify the information you wish to access (ie date range, subject of request) and to allow us to deal with your request efficiently. To answer your request, we may ask you to provide identification for verification purposes.
Upon receipt of a request, we will have 30 days to provide a response, with an extension of two further months if required. If we require more time to deal with your request, we will notify you of the delay, and the factors resulting in the delay, within 30 days of the receipt of the request. If we refuse your request, we will notify you within 30 days of the receipt of the request accompanied by the reason for the refusal.
We will not charge a fee for any requests, provided we do not consider them to be unjustified or excessive. If we do consider these to be unjustified or excessive, we may charge a reasonable fee (also applicable for multiple copies) or refuse the request.
You are entitled to contact the Information Commissioner’s Office (ICO) (or the Office of the Data Protection Commissioner in the Republic of Ireland) if we refuse your request.
Right To Unsubscribe From Marketing
Where you have given us your consent to use your personal information in a particular manner, you have the right to withdraw this consent at any time, which you may do by contacting us as described in paragraph 13. Please note however that the withdrawal of your consent will not affect any use of your personal information made before you withdrew your consent.
If you want to stop receiving any information from us, such as news and updates , please let us know by updating your preferences through our customer portal or contacting us using the details in paragraph 13. It may take up to 28 days to unsubscribe you from marketing.
Your decision to stop receiving information from us may result in the deletion of some of the personal information that we hold about you, but we may still retain personal information we require for other purposes, including where it is required for record keeping purposes.
Right To Be Forgotten
In certain circumstances you may be entitled to request the erasure of personal information that we hold about you:
To make a request of this nature, please contact us, providing full details of the personal information you want to be erased and the reason(s) for your request. We will consider all requests upon receipt and confirm to you whether we are able to agree to your request.
In certain circumstances we may need to retain some information to ensure your preferences are respected on completion of our duties. For example, we cannot erase all information about you where you have also asked us not to send you marketing material. Otherwise, your preference not to receive marketing material would be erased.
Right To Restriction
You have the right to restrict the extent of personal data processed by us in circumstances where;
Where processing is restricted, your personal data will only be processed with your consent for the establishment, exercise or defence of legal claims; for the protection of the rights of other people; or for reasons important to public interest.
We will contact you to confirm where the request for restriction in fulfilled and will only lift the restriction after we have informed you that we are doing so.
Right To Data Portability
You have the right to the provision of all personal data held in relation to you in a structured, commonly used and machine readable format where:
You may also request that we send this personal data to another controller where technically feasible.
Right To Object
You have the right to object to the processing of your personal data. However, the processing must have been undertaken on the basis of legitimate interest by us. If you wish to object to the processing of data, please contact us with your request as described in paragraph 13. We will then stop processing your personal data unless it is required for legal proceedings
Right Not To Be Subject To Automated Decision Making Including Profiling
You have a right not to be subject to a decision based solely on automated processing or profiling where such decisions would have a legal effect or a significant impact on you. In such circumstances you have a right to object to such processing.
7. CALL RECORDING
Please note that all calls may be recorded for training, monitoring and quality purposes. All recordings will be handled strictly in accordance with the provisions of this privacy notice.
8. COOKIES AND LOG FILES
When you browse our website, we may use “cookies” to keep track of your visit and give you a better browsing experience.
Cookies are uniquely assigned to you, and can only be read by a web server in the Peter Vardy domain that issued the cookie to you.
The majority of the cookies on our website do not collect or store personal data, we only store standard internet log data for our internal reporting purposes. We do this to find out things such as the number of visitors to the various parts of our web site. We collect this information in a way which does not identify anyone, keeping your privacy as well as allowing us to improve the web site wherever possible.
Through the use of a cookie, we us tracking telephone numbers on our website which are unique to each individual user which processes the following three pieces of personal data:
The Cawdor web site does collect some additional personally identifiable information but this is always done through asking you the user to enter details such as your email address. We will never capture personal information without making you aware first.
You still have the ability to accept or decline cookies. Most Web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of our website.
You can view a list of the cookies used on the Cawdor website here. To find out more about cookies in general, including how to see what cookies have been set and how to manage and delete them, visit http://www.allaboutcookies.org
10. SECURITY
The protection of your personal information is very important to us and we have in place various security measures to ensure that your personal information is kept secure.
However, you should be aware that the method you use to get in contact with us, such as email or post, may not be entirely secure and your personal information may be susceptible to being intercepted in transit. Equally, your personal information is at risk if a malicious third party gains access to your account on our customer portal or to any other place where your personal information is stored, such as your email account.
You should therefore take all reasonable steps to keep your personal information secure, including choosing a secure password for your account on our customer portal and your email account and not disclosing your passwords to anybody else. You should use a unique password for every account.
We will never:
10. ENQUIRIES, ISSUES AND COMPLAINTS
You are entitled by law to ask for a copy of your personal information at any time. Please contact us using the details in paragraph 12.
In the unlikely event that you have any concerns about how we use your personal information, please contact us as described in paragraph 12.
This includes situations where you want to request the rectification or erasure of your personal information, restrictions to be placed around how we use your personal information, or to object to a particular use.
If we are unable to resolve your complaint, you may make a complaint to the Information Commissioner’s Office. Please see https://ico.org.uk/for-the-public/raising-concerns for more information.
11. CHANGES TO THIS PRIVACY NOTICE
We reserve the right to alter this privacy notice at any time. Such alterations will be posted on our website. You can also obtain an up-to-date copy of our privacy notice from any dealership or by contacting us as described in paragraph 13. Should you object to any alteration, please contact us.
12. CONTACTING US
If you need to contact us about this notice or any matters relating to the personal information we hold on you, you can write to the Data Protection Officer, New Road, Newcastle Emlyn, SA38 9BA or email dataprotection@cawdorcars.co.uk.
You can also submit various data privacy requests here.