Privacy Notice

Thank you for providing this privacy notice, which outlines the information processed by SUPERCAR LEASE Ltd and your Trading Style SUPERCAR LEASE. This notice clarifies that “information” includes personal and financial data that is subject to various processing activities, such as collection, use, sharing, storage, and deletion.

It’s crucial for organizations to inform individuals about how their data is processed and used. By being transparent and providing clear explanations, you ensure that individuals are aware of their data privacy rights and can make informed decisions about their personal information.

Additionally, you mentioned that this privacy notice is subject to updates to reflect changes in data processing. Regularly reviewing and updating your privacy notice is essential to ensure its accuracy and relevance, especially as data processing practices may evolve over time.

Users should periodically check this page to stay informed about any changes and ensure they are comfortable with how their data is being processed. This approach aligns with best practices in data privacy and helps foster trust between organizations and individuals.

As always, ensuring that your data processing practices comply with relevant data protection regulations is essential to safeguarding user privacy.

Who we are

As SUPERCAR LEASE, a trading company of SUPERCAR LEASE Ltd, we are committed to safeguarding your privacy and protecting your data when we process it. We may act as either a data controller or a data processor in various situations:

Data Controller:

1. We process customer data (such as name, address, identification data, and financial data) collected from a customer to facilitate their leasing or purchase of a motor vehicle.
2. Customer data collected by one of our suppliers (e.g., Visitor Chat) on behalf of SUPERCAR LEASE is processed for the purpose of facilitating the purchase of a motor vehicle.
3. Customer data may be processed in various formats, including audio data (e.g., live phone calls, call recordings), text (e.g., emails), or paper/electronic image format (e.g., customer proof of identity documents).

Data Processor:

1. We process customer data on behalf of car finance provider companies (lenders) to facilitate the approval of applications for vehicle finance or vehicle leasing.
2. This data may be in different formats, including audio, electronic text, or paper/electronic image format. It may include customer proof of identity documents and financial data, including credit checks.

We take data privacy seriously and ensure that your information is processed responsibly and in accordance with applicable data protection regulations. Our commitment is to protect your personal and financial data, maintain its confidentiality, and use it only for the specific purposes stated in this notice.

If you have any questions or concerns about how your data is processed, please do not hesitate to contact us. Our head office address is provided, along with a telephone number for further communication. Your privacy and satisfaction are our top priorities.

Data that we collect

As part of providing, you with the goods/services you are applying for, we collect certain personal data. We only collect the information necessary to deliver and manage the requested goods/services. If you choose not to provide this information, we may be unable to fulfil your request for the goods/services advertised.

Data collected from you includes:

1. Name
2. Address and address history
3. Telephone number
4. Email address
5. Date of birth
6. Employment details
7. Proof of identity documents
8. Financial information
9. Call recordings

 In some cases, we may also collect data from third parties, which includes:

1. Credit history
2. Entitlement to drive
3. Claims history
4. Lifestyle information

We do not collect any special category or criminal conviction data unless it is relevant and necessary for providing the goods/services you are applying for. The data collected from third parties may include driving convictions, driving disqualifications, other conviction information, and CCJs.

One of the third parties we collect data from is the DVLA (Driver and Vehicle Licensing Agency), from whom we obtain your identity details and information on driving convictions and disqualifications.

Please be assured that we handle your personal data with utmost care and in compliance with relevant data protection laws. The information you provide and the data we collect from third parties are used solely for the purpose of facilitating your request and delivering the requested goods/services. If you have any questions or concerns about how your data is collected and used, do not hesitate to reach out to us.

Our Legal Basis for Processing Your Information

As a data controller, we process your personal data based on various legal grounds, ensuring that your rights and freedoms are respected. The legal bases for processing your information are as follows:

1. Contractual Necessity: We only collect the information necessary to enter a contract with you and provide the requested services. This includes car purchase or car leasing services. Without this data, we cannot fulfil our obligations under the contract.
2. Consent: As the data subject, you provide consent for us to process your personal data for specific purposes, such as communicating with you about our services and exchanging information for warranty/aftersales. You have the right to withdraw your consent at any time.
3. Legitimate Interests: Data protection law allows us to use personal information for legitimate reasons that do not infringe upon your rights and freedoms. For instance, we may use your data for checks to prevent fraud and money laundering. When relying on legitimate interests as the legal basis for
4. processing, we carefully consider its impact on you and ensure that your rights are upheld.
5. Developing Products and Services: Some of the information we collect may help us enhance our products and services to better meet the needs of our customers. If we use your data for these secondary purposes, we either obtain your consent or anonymize the data to remove any identifying information.

Rest assured that we handle your personal data responsibly and in compliance with relevant data protection regulations. Your privacy and data security are our top priorities, and we aim to use your information for legitimate and lawful purposes while respecting your rights as a data subject. If you have any concerns or require further information about our data processing practices, please don’t hesitate to contact us.

What we will do with customers’ information

As a data controller, we process your personal data in the United Kingdom. We may share your information with third parties when necessary to provide the goods/services you have applied for or when there is a legal obligation to do so (e.g., The FCA or The Police to prevent and investigate fraud and other crimes and to confirm your identity).

The processing of your data will involve the following:

1. Purchasing or Leasing a Motor Vehicle: We collect proof of identity information, payment card or other customer payment information, and driving license information to establish your identity for selling or leasing a motor vehicle.
2. Facilitating Car Finance Quotations: We may share your information with credit brokerages or funders who may use automated decision making, including data from credit reference agencies, to assess your suitability for the goods/services requested.
3. Customer Services and Administration of Our Services: We may monitor or record calls, emails, SMS messages, or other communications for quality control, training, system operation, regulatory compliance, and crime prevention.
4. After Transaction Processing: We may conduct after-transaction surveys through an independent third-party survey company to improve our products and services. Additionally, we may use a third-party email marketing company to run marketing campaigns if you consent to receiving marketing communications from us.
5. Handling Enquiries and Complaints: We investigate complaints to provide a high standard of service and prevent future complaints.
6. Transfer of Information During Restructure, Sale, or Takeover: Your information may be transferred or shared with any organization that your account has been or may be transferred to following a restructure, sale, or takeover of SUPERCAR LEASE Ltd or any of our trading styles.

We respect your privacy rights and handle your personal data responsibly. Your data is used for legitimate and lawful purposes, and we ensure that it is securely processed and protected. If you have any questions or concerns regarding our data processing practices, please feel free to contact us.

Who the customers’ data will be shared with

We take your data privacy seriously and ensure that any sharing of customers’ personal data is conducted in compliance with the Data Protection Act (2018) and the General Data Protection Regulation (2018).

In certain instances, it might be necessary for us to share your personal information with other organizations. This sharing may include:

1. Other Parts of Our Business: We may share your information within different departments or divisions of our own business to facilitate the provision of our products and services.
2. Selected Providers: We may share your data with selected providers who assist in delivering our products and services. This could include the organizations that provide our chatbox and marketing services.

It’s important to note that we will not share your data with third parties outside of those explicitly mentioned in this Privacy Notice. We prioritize data security and only share information when it is necessary to fulfil our contractual obligations, provide you with the requested goods/services, or comply with legal requirements.

Your privacy is a top priority, and we strive to ensure that any sharing of your personal data is conducted responsibly and in line with applicable regulations. If you have any questions or concerns about data sharing, please don’t hesitate to get in touch.

Whether the data will be sent overseas

Supercar Lease Ltd does not send customer data outside the European Economic Area (EEA). This commitment to keeping customer data within the EEA ensures that data protection standards and regulations.

Whether the data will be sent overseas

Your data retention policy is important for ensuring that personal information is managed responsibly and in compliance with legal and regulatory requirements. Here’s a summary of your data retention approach:

Data Retention Periods: The length of time you retain personal information is determined by the purpose for which it was collected and your legal and regulatory obligations. Once the data is no longer needed for the specified purposes or the outlined purposes below, you either anonymize or delete the information. Personal information is not retained in an identifiable format longer than necessary.

Additional Determinants:

1. Legal Claims: You retain personal information if it’s needed to establish, bring, or defend legal claims.
2. Legal Requirements: If the law requires you to hold personal information for a longer period or to delete it sooner, you adhere to those requirements.
3. Erasure Requests: If individuals exercise their right to have their information erased, you comply with their request.
4. Uncompleted Transactions: If a purchase or lease of a vehicle doesn’t proceed, you may still keep the information.
5. Enquiries: If contact doesn’t progress beyond an enquiry, you delete the information when it becomes clear that the individual will not proceed.

Your approach to data retention strikes a balance between maintaining necessary information and respecting individuals’ rights. It aligns with best practices for data protection, ensuring that personal data is handled responsibly throughout its lifecycle. This policy helps build trust with customers, as they know that their information is treated with care and in accordance with applicable laws.

Data Retention

When we collect your personal information, the length of time we retain it is determined by the purpose for which we use that information and our legal and regulatory obligations.

Once we no longer require the information for the specified purposes for which it was collected or the purposes outlined below, we would either anonymise or delete the information. We would not retain personal information in an identifiable format for longer than is necessary.

Other determinants on the length of time that we retain your personal information are:

• The need to use your personal information to establish, bring or defend legal claims.
• The requirement by law for us to hold your personal information for a longer period, or to delete it sooner.
• Your decision to exercise your right to have the information erased (where this applies).

If you decide not to go ahead with your purchase or lease of a vehicle, then we may still keep your information.

If your contact with us does not proceed beyond an enquiry alone, then we would delete your personal information immediately it becomes clear that you will not be proceeding.

Customers’ Rights

As a valued customer of SUPERCAR LEASE, you hold several rights concerning your data and how it’s processed. These rights ensure transparency, control, and the protection of your personal information:

1. Right to Be Informed: You have the right to be informed about how your personal data will be used. We provide this information through our privacy notice, which outlines the purposes of data processing.
2. Right to Access: You can request access to the personal data we hold about you. We’ll provide you with a copy of this information free of charge.
3. Right to Rectification: If you notice inaccuracies in your personal information, you have the right to request corrections.
4. Right to Erasure (Right to Be Forgotten): You can request the deletion of your personal data from our records, subject to certain conditions.
5. Right to Restrict Processing: You can object to specific uses of your personal data, including objecting to direct marketing efforts.
6. Right to Data Portability: You have the right to receive your personal data in a format that is easily readable and transferable.
7. Right to Object: You can object to the use of your personal data for specific purposes.
8. Rights Related to Automated Decision Making: You can refuse the use of your personal data for automated decision making or profiling without human intervention.

If you wish to exercise any of these rights or make a Subject Access Request, you can find detailed information on how to do so on our data rights page. Your data rights are essential for ensuring that your personal information is treated with respect and care, and we are committed to upholding these rights in accordance with relevant data protection regulations.

How customers make a complaint

If you have a complaint or concern related to our data processing practices, you can start by reaching out:

By Email: You can email your complaint to: complaints@SuperCarLease.co.uk

If, for any reason, we are unable to address your validated request within a month, you retain the right to escalate the matter to the Information Commissioner’s Office (ICO), which serves as the data protection arbitrator. You can find details on how to contact the ICO at the following web address: http://supercarlease.co.uk

Your feedback and concerns are valuable to us, and we are committed to addressing them in a timely and responsible manner while maintaining compliance with data protection regulations.

Keeping your data safe

Your commitment to ensuring the security of customer information is commendable. Here’s a summary of your security measures:

Security Commitment: You prioritize the security of customer information and take steps to prevent unauthorized access or disclosure.

Comprehensive Protection: To safeguard and secure the information you collect, you have implemented suitable physical, electronic, and managerial procedures.

Continuous Enhancement: Your security measures are not static. Instead, they are continually improved to align with technological advancements.

Your dedication to maintaining the security of customer data through comprehensive and evolving measures demonstrates your responsibility and commitment to data protection. This approach is vital for building trust with customers and maintaining their confidence in your services.

How we use cookies

A succinct explanation of cookies and their purpose. You acknowledge the importance of obtaining user consent before placing cookies on their devices. You also provide a reference to your Cookie Policy for more information on how cookies work and guidance on controlling their use during visits to your websites. This approach enhances user transparency and empowers them to manage their online privacy effectively.

Updates to this Privacy Notice

You provide a clear indication of the last update to this privacy notice, which was on 10th August, 2023. You emphasize the importance of keeping the privacy notice up-to-date in line with changes in business practices. You recommend that individuals review the notice each time they provide personal information.

Furthermore, you assure transparency by stating that any future changes to the privacy notice will be posted on the same page and, when necessary, highlighted elsewhere on the website. This practice helps users stay informed about how their data is managed and reinforces your commitment to transparent communication.