Last updated: 30 January 2024
Summary
Crowson Motors understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of everyone who visits this website and will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law. The information you provide to us will be held for Crowson Motors on servers based in the UK, and, except as explained below, we will not transfer it, or authorise its transfer, outside the UK. We will always adhere to data protection legislation, including but not limited to, the Data Protection Act 2018 and the UK GDPR. We aim to inform you of your rights in a way that is concise, transparent, intelligible, easily accessible, and uses clear and plain language.
Please read this Privacy Policy carefully and ensure that you understand it. This Policy acts as your right to be informed of any and all such data processing activities conducted by us.
Introduction
In this Privacy Policy, the following terms shall refer to their intended meaning:
We refer to Crowson Motors Limited and its trading names as we, us and our (or similar).
We refer to you as the person whose personal information (defined below) we collect, use and process.
We refer to website as the website you are currently visiting, crowsons-spalding.co.uk.
What information do we collect?
We may collect and process information about you depending upon your use of our website. We will not collect any special category or sensitive personal data. We aim to keep the collection of personal data to a minimum.
In particular, we may collect and process the following information:
- Full name
- Address
- Telephone number
- Email address
- Vehicle information (including registration number, VIN and mileage)
- Date of birth
- National Insurance number
- Purchase history
- Annual salary
- Date and time you use our services
- Pages you visit on our website
- IP address
- GPS location (where you have permitted access to this)
- Internet browser
- Cookies
- Live Chat records
- Any contact between you and us
We may collect information about you that we receive from third parties. This information may include your contact details, vehicle information and purchase history. Please note this list is not exhaustive and we may collect other types of information not mentioned.
If you provide personal information on behalf of another individual, you must ensure you have their permission before giving this personal information to us and that they are aware of how we use this information in accordance with this Privacy Policy.
How do we use personal information?
We will only use your personal information for the purposes for which it was originally collected unless we reasonably believe that another purpose is compatible with that or those original purposes and need to use your personal information for that purpose. If we do use your personal information in this way and you wish us to explain how the new purpose is compatible with the original, please contact us. If we need to use your personal information for a purpose that is unrelated to, or incompatible with, the purposes for which it was originally collected, we will inform you and explain the legal basis which allows us to do so.
We use your personal information for our business activities. We may use your personal information in the following ways:
- To contact you to respond to enquiries and requests regarding the potential purchase of goods and/or services.
- To fulfil our obligations under any contracts between you and us.
- To respond to a request for a vehicle valuation.
- To carry out any requests received from you if you have a My Car account.
- To notify you of any changes to the business, including changes to services.
- To obtain feedback through surveys regarding your experience with us or the manufacturer of your vehicle.
- To remind you of vehicle-related work due, including MOT reminders, service reminders, recall and campaign reminders.
- To check and take a copy of your driving licence when you test drive a vehicle or are provided with a courtesy car to enable us to check for any penalties. For this purpose, we will also require your National Insurance number.
- To communicate with you regarding a competition entry you have entered.
Your personal information may be used by our employees, contractors, partners and disclosed third parties in order to comply with our legal obligations to carry out any activities, including but not limited to court orders, or to apply the terms of any agreement we have with you or concerning you to investigate or prevent suspected crime, or to protect our rights, property and safety including that of our customers, employees and other third parties.
With your permission or where permitted by law, we may also use your personal information for marketing purposes, which may include contacting you by email, telephone, text or mail with information, news and offers on our goods and services. You will not be sent any unlawful marketing or spam. We will always work to fully protect your rights and comply with our obligations, and you will always have the opportunity to opt-out. We will always obtain your express opt-in consent before sharing your data with third parties for marketing purposes and you can opt-out at any time by amending your contact preferences.
How do we store your personal information?
For Data Protection Legislation purposes, we are the data controller of your personal information that we collect and process. We will only store your personal information in the United Kingdom.
Your data protection rights
Under the Data Protection Legislation, you have the following rights, which we will always work to uphold:
Your right of access
Your right to rectification
Your right to be forgotten
Your right to restriction of processing
Your right to object to processing
Your right to data portability
You are not required to pay any charge for exercising your rights. If you make a request, we will have one month to respond to you.
How long do we keep your personal information?
We will not retain your personal information for any longer than is strictly necessary in light of the reason(s) for which it was first collected. Your personal information will be retained for the following periods:
- Contracts between you and us including invoices will be retained for 10 years.
- Driving licence information for courtesy vehicles and test drives will be retained for 3 months.
- CCTV recordings will be retained for 3 months.
How Do We Use Your Personal Data?
Under the Data Protection Legislation, we must always have a lawful basis for using personal data.
We will only use your personal data for the purpose(s) for which it was originally collected unless we reasonably believe that another purpose is compatible with that or those original purpose(s) and need to use your personal data for that purpose. If we do use your personal data in this way and you wish us to explain how the new purpose is compatible with the original, please contact us.
We use your personal data for the following purposes:
Marketing
With your permission and/or where permitted by law, we may use your personal data for marketing purposes, which may include contacting you by email, telephone, text message or post with offers and reminders of our products and services. You will not be sent any unlawful marketing or spam. We will always work to fully protect your rights and comply with our obligations under the Data Protection Legislation and the Privacy and Electronic Communications (EC Directive) Regulations 2003, and you will always have the opportunity to opt-out. We will always obtain your express opt-in consent before sharing your personal data with third parties for marketing purposes and you will be able to opt-out at any time.
Contractual
We may use your personal information where this is necessary to fulfil a contract with you and to fulfil your orders, purchases and other transactions entered into with us.
Legitimate Interests
Processing requests to support customers with enquiries:
- Responding to correspondence (e.g. service requests, sales vehicles information).
- Provide vehicle support (e.g. technical problems, warranty-related services).
Operate administrative duties:
- Ensure we have the most up-to-date and accurate records of your personal data.
- Conduct information security checks against data loss, damage or theft.
- Comply with requests to exercise your rights of consent.
Vital Interests
We may sometimes process your personal data to contact you regarding outstanding safety recalls or missed campaigns.
Legal Obligation
If we need to use your personal data for a purpose that is unrelated to, or incompatible with, the purpose(s) for which it was originally collected, we will inform you and explain the legal basis which allows us to do so.
In some circumstances, where permitted or required by law, we may process your personal data without your knowledge or consent. This will only be done within the bounds of the Data Protection Legislation and your legal rights.
We have a duty to inform you of our privacy information at the time of collecting your personal data, and we will never contact you without your prior consent. You will always have the option to "opt-out" of any such communications.
How Long Do We Keep Your Personal Data?
The personal data that you provide is retained until you ask us to delete it.
How and Where Do We Store or Transfer Your Personal Data?
We will only store your personal data in the UK. This means that it will be fully protected under the UK GDPR.
Do We Share Your Personal Data?
We will not sell any of your personal data to any third parties for any purpose. We may disclose your information to the following providers to which we pass full responsibility to handle services on our behalf: roadside assistance services, mobility providers, contractors and sub-contractors, analytics service providers and legal service providers.
If any of your personal data is shared with a third party, as described above, we will take steps to ensure that your personal data is handled safely, securely, and in accordance with your rights, our obligations, and the third party's obligations under the law.
If we sell, transfer, or merge parts of our business or assets, your personal data may be transferred to a third party. Any new owner of our business may continue to use your personal data in the same way(s) that we have used it, as specified in this Privacy Policy.
In some limited circumstances, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.
How You Can Control Your Personal Data
In addition to your rights under the Data Protection Legislation, when you submit personal data via Our Site, you may be given options to restrict our use of your personal data. In particular, we aim to give you strong control over our use of your data for direct marketing purposes (including the ability to opt-out of receiving emails from us which you may do at the point of providing your details or by submitting a GDPR form).
Security of Personal Data
We have enforced strict procedures to monitor the collecting and processing of personal data.
As best practice, we undertake periodic information audits to ensure that the personal information we hold about you is compliant with our statutory obligations, including the effective measures we have implemented to evaluate our privacy information, as described in this Policy.
Can You Withhold Information?
You may access Our Site without providing any personal data at all. However, to use all features and functions available on Our Site you may be required to submit or allow for the collection of certain data.
How to Access Your Personal Data
If you want to know what personal data we have about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a Subject Access Request ("SAR").
All SARs should be made in writing and sent to gdpr@crowsons-spalding.co.uk. A SAR form is available for you to use. You do not have to use this form, but it is the easiest way to tell us everything we need to know to respond to your request as quickly as possible.
There is not normally any charge for a SAR. If your request is 'manifestly unfounded or excessive' (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.
We will respond to your SAR within two weeks and, in any case, not more than one month after receiving it. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress.
How We Use Cookies
Our Site may place and access certain first-party Cookies on your computer or device. First-party Cookies are those placed directly by us and are used by us. We use Cookies to facilitate and improve your experience of Our Site and to provide and improve our products and services. In addition, Our Site uses analytics services provided by Google, which also uses Cookies. Website analytics refers to a set of tools used to collect and analyse usage statistics, enabling us to better understand how visitors use Our Site. For more details, please refer to our Cookie Policy.
Contact Us
To contact us about anything relating to your personal data and data protection, including making a SAR, please use the following details:
Post: Crowson Motors Limited, Wardentree Lane, Pinchbeck, Spalding, Lincolnshire, PE11 3UG
Email: gdpr@crowsons-spalding.co.uk
Phone: 01775 710650
If you are unhappy, you have the right to lodge a complaint with the data protection regulator in the UK, please use the following details:
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Phone: 03031 231113
Email: casework@ico.org.uk