Privacy Policy

  • Home
  • Privacy Policy

Privacy Policy

Last updated [July 29th, 2022]

Our Privacy Policy forms part of and must be read in conjunction with, the website Terms and Conditions. We reserve the right to change this Privacy Policy at any time.

We respect the privacy of our users and every person who visits our site www.carfinancesurrey.co.uk. Here, CAR FINANCE SURREY refers to as (“we”, “us”, or “our”). We are committed to protecting your personal information and your right to privacy under this Privacy Policy. If you have any questions or concerns about our policy or our practices with regard to your personal information, please contact us at Info@carfinancesurrey.co.uk.

When you visit our website www.carfinancesurrey.co.uk (“Site”) and use our services, you trust us with your personal information. We take your privacy very seriously. In this privacy notice, we describe our privacy policy. We seek to explain to you in the clearest way possible what information we collect, how we use it, and what rights you have concerning it. We hope you take some time to read through it carefully, as it is important. If there are any terms in this privacy policy that you do not agree with, please discontinue the use of our site and our services.

ABOUT US

We can offer car finance for people with good or bad credit in Surrey, Crawley, Kent, Essex and London. In fact, anywhere in the UK.

 

We are located in the United Kingdom.

Please read this privacy policy carefully as it will help you make informed decisions about sharing your personal information with us.  

  1. WHAT INFORMATION DO WE COLLECT?

The personal information you disclose to us

We collect personal information that you voluntarily provide to us when expressing an interest in obtaining information about us or our products when participating in activities on the Site or otherwise contacting us.

The personal information that we collect depends on the context of your interactions with us and the Site, the choices you make, and the products and features you use. The personal information we collect can include the following:

Name and Contact Data. When you registered with us, we collect your first and last name, email address, bank statement, Salary slips and other similar contact data.

Credentials. We collect passwords, password hints, and similar security information used for authentication and account access.

Information automatically collected

We automatically collect certain information when you visit, use, or navigate the Site. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser, and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Site and other technical information.  If you access our site with your mobile device, we may automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information, and IP address. This information is primarily needed to maintain the security and operation of our Site, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Policy.

Information collected from other Sources

We may obtain information about you from other sources, such as public databases, joint marketing partners, social media platforms (such as Facebook, Instagram, Tiktok, and Twitter), as well as from other third parties. 

If you have chosen to subscribe to our newsletter, your first name, last name and e-mail address will be shared with our newsletter provider. This is to keep you updated with information and offers for marketing purposes. We send email content to our customers that may include the following: Transaction mail, Shipping notification, Weekly deal, Promotion, and Activity.

  1. HOW DO WE USE YOUR INFORMATION?

We use your personal information for these purposes in reliance on our legitimate business interests (“Business Purposes”), to enter into or perform a contract with you (“Contractual”), with your consent (“Consent”), and/or for compliance with our legal obligations (“Legal Reasons”). We indicate the specific processing grounds we rely on next to each purpose listed below.  

We use the information we collect or receive:  

  • To send administrative information to you related to your account, our business purposes, and/or for legal reasons. We may use your personal information to send you a product, and new feature information, and/or information about changes to our terms, conditions, and policies.
  • Deliver targeted advertising to you for our Business Purposes and/or with your Consent. We may use your information to develop and display content and advertising (and work with third parties who do so) tailored to your interests and/or location and to measure its effectiveness. [For more information, see our Cookie Policy.
  • Request Feedback for our Business Purposes and/or with your Consent. We may use your information to request feedback and to contact you about your use of our Site.
  • To protect our Site for Business Purposes and/or Legal Reasons.  We may use your information as part of our efforts to keep our Site safe and secure (for example, for fraud monitoring and prevention).
  • To enable user-to-user communications with your consent. We may use your information to enable user-to-user communications with each user’s consent.
  • To enforce our terms, conditions, and policies for our business purposes and as legally required.
  • Respond to legal requests and prevent harm as legally required. If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.
  • For other Business Purposes. We may use your information for other Business Purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and evaluating and improving our Site, products, services, marketing, and your experience.
  • WILL YOUR INFORMATION BE SHARED WITH ANYONE?

We only share and disclose your information in the following situations:

  • Compliance with Laws. We may disclose your information where we are legally required to do so to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal processes, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).
  • Vital Interests and Legal Rights. We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.
  • Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. 
  • Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • Third-Party Advertisers. We may use third-party advertising companies to serve ads when you visit the Site. These companies may use information about your visits to our Site and other websites that are contained in web cookies and other tracking technologies to provide advertisements about goods and services of interest to you.
  • Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this privacy policy. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
  • Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.
  • With your Consent. We may disclose your personal information for any other purpose with your consent.
  • Other Users. When you share personal information (for example, by posting comments, contributions, or other content to the Site) or otherwise interact with public areas of the Site, such personal information may be viewed by all users and may be publicly distributed outside the Site in perpetuity.

    1. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

    We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy.

    1. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

    Information collected from you may be stored and processed globally in various countries in which our Company or agents or contractors maintain facilities, and by accessing our sites and using our services, you consent to any such transfer of information outside of your country. 

    Such countries may have laws that are different, and potentially not as protective, as the laws of your own country. Whenever we share personal data originating in the European Economic Area we will rely on lawful measures to transfer that data, such as the Privacy Shield or the EU standard contractual clauses. If you reside in the EEA or other regions with laws governing data collection and use, please note that you are agreeing to the transfer of your personal data to the United States and other countries in which we operate. By providing your personal data, you consent to any transfer and processing in accordance with this Policy. We will not transfer your personal information to an overseas recipient.

    1. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?

    The Site may contain advertisements from third parties that are not affiliated with us and which may link to other websites, online services, or mobile applications. We cannot guarantee the safety and privacy of data you provide to any third parties. Any data collected by third parties is not covered by this privacy policy. We are not responsible for the content or privacy and security practices and policies of any third parties, including other websites, services, or applications that may be linked to or from the Site. You should review the policies of such third parties and contact them directly to respond to your questions.

    1. HOW LONG DO WE KEEP YOUR INFORMATION?

    We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). 

    When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

    1. HOW DO WE KEEP YOUR INFORMATION SAFE?

    We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your personal information, the transmission of personal information to and from our Site is at your own risk. You should only access the services within a secure environment.

    Personal data shall be processed and stored as long as required for the purpose they have been collected for.

    Therefore:

    • Personal data collected for purposes related to the performance of a contract between us and you shall be retained until such contract has been fully performed.
    • Personal Data collected for the purposes of the Company’s legitimate interests shall be retained as long as needed to fulfill such purposes. Users may find specific information regarding the legitimate interests pursued by the Company within the relevant sections of this document or by contacting the Company.
    •  

    • The company may be allowed to retain personal data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Company may be obligated to retain personal data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.

     

    • Once the retention period expires, personal data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification, and the right to data portability cannot be enforced after the expiration of the retention period.

    For Individuals in European Economic Area, Switzerland, and/or the United Kingdom

    • This section only applies to individuals that access or use our Service while located in the European Economic Area, Switzerland, and/or United Kingdom (collectively, the “Designated Countries”) at the time of data collection. We may ask you to identify which country you are located in when you use some of the Services, or we may rely on your IP address to identify which country you are located.

     

    • We act as a data controller with regard to any personal information collected from individuals accessing or using its Service. A “data controller” is an entity that determines the purposes for which and the manner in which any personal information is processed. Any third parties that act as our service providers or are otherwise acting on our behalf are “data processors” that handle your personal information in accordance with our instructions.

     

    • Legal Bases for Processing Your Personal Information. We describe our legal bases for processing throughout this Policy. Below is a list of the purposes described in our policy with the corresponding legal bases for processing:

    Users have given their consent for one or more specific purposes;

    • provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof;
    • processing is necessary for compliance with a legal obligation to which the Owner is subject;
    • processing is related to a task that is carried out in the public interest or the exercise of official authority vested in the Owner;
    • processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.
    • In any case, we will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

    • Your Individual Rights. We provide you with the rights described below when you use our Service. If you would like to exercise your rights under applicable law, please contact us at info@carfinancesurrey.co.uk. Please note, that we may seek to verify your identity when we receive an individual rights request from you to ensure the security of your personal information.
    • Right to Withdraw Your Consent. If we ever asked for your consent to process your personal information, you have the right to withdraw your consent at any time. A withdrawal of consent will not affect the lawfulness of our processing or the processing of any third parties based on consent before your withdrawal.
    • Right of Access. Upon your request, we will provide you with a copy of your personal information in our files without undue delay and free of charge, unless we are permitted by law to charge a fee. Your access may be limited to the extent it would adversely affect the rights and freedoms of other individuals.
    • Right to Rectification (or “Correction”). You may request to correct or update any of your personal information in our files. We may provide you with the ability to update some or all of your personal information directly via the Services.
    • Right to Erasure (or the “Right to be Forgotten”). Upon your request, we will erase any of your personal information in our files that: is no longer necessary in relation to the purposes for which it was collected or otherwise processed; was collected in relation to processing that you previously consented to, but later withdrew such consent; or was collected in relation to processing activities to which you object, and there are no overriding legitimate grounds for our processing.
    • Right to Restriction. You have the right to restrict our processing of your personal information under certain conditions. During the time which restriction of processing applies, we will only process your restricted personal information with your consent or for the establishment, exercise, or defense of legal claims or the protection of the rights of another natural or legal person or reasons of important public interest. We will inform you if or when the restriction is lifted.
    • Right to Object. You may object to our processing at any time and as permitted by applicable law if we process your personal information on the legal bases of consent; contract; or legitimate interests. We may continue to process your personal information if it is necessary for the defense of legal claims, or any other exceptions permitted by applicable law.
    • Right to Data Portability. If we process your personal information based on a contract with you or based on your consent, or the processing is carried out by automated means, you may request to receive your personal information in a structured, commonly used and machine-readable format, and to have us transfer your personal information directly to another “controller,” where technically feasible unless the exercise of this right adversely affects the rights and freedoms of others. Your right to data portability only applies to personal information provided by you to us.
    • Notification to Third Parties. When we fulfill your individual rights requests for correct (or rectification), erasure, or restriction of processing, we will notify third parties also handling the relevant personal information unless this proves impossible or involves a disproportionate effort. Upon your request, we will identify such third parties.
    • Automated Individual Decision-Making, Including Profiling. You have the right not to be subject to a decision based solely on automated processing of your personal information, including profiling, which produces legal or similarly significant effects on you, unless an exception applies under applicable law.

    • Limitations to Individual Rights Requests. We may limit your individual rights requests in the following ways:
      1. Where denial of access is required or authorized by law;
      2. When granting access would  have a negative impact on other's privacy;
      3. To protect our rights and properties; and
      4. Where the request is frivolous or burdensome.
    • Transfer of Your Personal Information. We transfer your personal information subject to appropriate safeguards as permitted under the applicable data protection laws. Specifically, when your personal information is transferred out of the Designated Countries, we have the required contractual provisions for transferring personal information in place with the third parties to which your information is transferred. For such transfers, we rely on legal transfer mechanisms such as Standard Contractual Clauses or we work with U.S.-based third parties that are certified under the EU-U.S. and Swiss-U.S. Privacy Shield Framework.
    • Right to Lodge Complaints. If you believe that we have infringed or violated your privacy rights under applicable law or this Policy, please contact us at info@carfinancesurrey.co.uk, so that we can work with you to resolve your concerns. You also have a right to complain to a competent supervisory authority situated in a Member State of your habitual residence, place of work, or place of the alleged infringement.
    • Cookies and similar data collection technologies
    • We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy.
      •  

    1. DO WE COLLECT INFORMATION FROM MINORS?

    We do not knowingly solicit data from or market to children under 16 years of age.  By using the Site, you represent that you are at least 16 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Site.  If we learn that personal information from users less than 16 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records.  If you become aware of any data we have collected from children under the age of 16, please contact us at Info@carfinancesurrey.co.uk.

    1. WHAT ARE YOUR PRIVACY RIGHTS?

    .Personal Information

    You may at any time review or change the information in your account or terminate your account by:

    • Contacting us using the contact information provided below

    Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, some information may be retained in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use, and/or comply with legal requirements.

    Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Site. 

    1. DATA PROTECTION OFFICER

    We have appointed a Data Protection Officer (“DPO”) who is responsible for overseeing questions about this privacy notice. If you have any questions about these privacy notices, including any requests to exercise your legal rights, please contact Data Protection Officer, at our e-mail at Info@carfinancesurrey.co.uk.

    1. DO WE MAKE UPDATES TO THIS POLICY?

    We may update this privacy policy from time to time. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.

    1. HOW CAN YOU CONTACT US ABOUT THIS POLICY?

    If you have questions or comments about this policy, email us at Info@carfinancesurrey.co.uk.