Privacy Policy

Last updated: [Date]

1. Introduction

This Privacy Policy explains how NextLane Automotive ("NextLane Automotive", "we", "us", or "our") collects, uses, discloses, and protects your personal data when you use our services, visit our premises, or interact with us through our websites, applications, and other channels. We are committed to protecting your privacy and handling your personal data in accordance with applicable data protection laws in England and the United Kingdom, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services or providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

NextLane Automotive [Address] [City], England [Contact email] [Contact telephone number]

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Identification and contact details

• Name and surname
• Postal address and billing address
• Email address
• Telephone number and mobile number
• Driver’s licence details (where required)

3.2 Vehicle and service-related data

• Vehicle registration number
• Vehicle Identification Number (VIN)
• Vehicle make, model, specification, and mileage
• Service and repair history
• Warranty and recall information

3.3 Transaction and payment data

• Details of purchases, leases, rentals, and service orders
• Payment method and transaction details (we do not store full payment card numbers; these are processed by secure payment providers)
• Financing or leasing details where applicable

3.4 Digital interaction and usage data

• Information collected when you visit our websites or use our online services, such as IP address, browser type, device identifiers, operating system, and access times
• Cookies and similar technologies usage data (for example, pages visited, links clicked, and navigation patterns)

3.5 Marketing and communication data

• Your marketing preferences
• Records of communications with you (emails, messages, call logs where permitted)

3.6 CCTV and on-premises data

• CCTV images and recordings when you visit our premises, used for security and safety purposes

4. How We Collect Your Personal Data

We collect personal data in various ways, including:

• Directly from you when you contact us, visit our premises, request a quote, make a booking, purchase a vehicle, arrange a service, or communicate with us by phone, email, or online forms
• Automatically when you use our websites or digital platforms through cookies and similar technologies
• From third parties, such as finance providers, credit reference agencies, insurance companies, vehicle manufacturers, authorised dealers, service partners, and publicly available sources, where permitted by law

5. Legal Bases for Processing

We process your personal data on one or more of the following legal bases:

• Performance of a contract: to enter into or fulfil a contract with you, such as for the sale, lease, or servicing of a vehicle
• Legal obligation: to comply with our legal and regulatory obligations (for example, tax, accounting, and product safety and recall requirements)
• Legitimate interests: to pursue our legitimate business interests, such as improving our services, ensuring network and information security, preventing fraud, and managing our relationship with you, provided that your rights and freedoms do not override these interests
• Consent: when you have given us clear consent for specific purposes, such as receiving electronic marketing communications. You can withdraw your consent at any time.

6. How We Use Your Personal Data

We may use your personal data for the following purposes:

• To provide, manage, and personalise our products and services, including vehicle sales, financing, leasing, maintenance, repairs, and related automotive services
• To process your orders, bookings, payments, and transactions
• To communicate with you regarding your enquiries, appointments, services, and contracts
• To manage your customer account and service history
• To send you important service-related notices, such as safety or recall information, warranty notifications, and changes to our terms
• To provide customer support and handle complaints or disputes
• To conduct marketing and promotional activities, where permitted, including sending you information about offers, new products, and services that may be of interest to you
• To monitor and improve our websites, services, and customer experience
• To ensure the security of our premises, systems, and staff, including through CCTV monitoring
• To comply with applicable laws, regulations, and requests from authorities, and to exercise or defend legal claims

7. Cookies and Similar Technologies

We use cookies and similar technologies on our websites and digital platforms to:

• Enable essential functionality
• Remember your preferences and improve usability
• Analyse traffic and usage to improve performance
• Support marketing and advertising activities, where consent is required and provided

You can manage your cookie preferences through your browser settings and, where available, our cookie banner or preference centre. Blocking certain types of cookies may affect the functionality of the website.

8. Sharing Your Personal Data

We may share your personal data with the following categories of recipients, only to the extent necessary and in line with applicable laws:

• Vehicle manufacturers, authorised dealers, and service partners for warranty, recall, maintenance, and support services
• Finance and leasing providers, credit reference agencies, and insurance partners when you apply for finance, leasing, or insurance products
• Payment service providers to process payments securely
• IT and hosting service providers, software providers, and other technical support partners
• Marketing, analytics, and communication service providers, where we use external partners to support our marketing and customer communication activities
• Professional advisors, such as lawyers, auditors, and consultants
• Law enforcement agencies, regulatory bodies, courts, or other public authorities where disclosure is required by law or necessary to protect our rights or the rights of others
• Potential buyers, investors, or business partners in connection with a merger, acquisition, or other business restructuring, subject to appropriate confidentiality protections

We do not sell your personal data.

9. International Transfers

Some of our service providers or partners may be located outside the United Kingdom. Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place, such as:

• An adequacy regulation by the UK government confirming that the destination country ensures an adequate level of data protection; or
• Standard contractual clauses or other appropriate contractual safeguards approved by the relevant data protection authorities.

You may contact us for further information about the safeguards we use when transferring personal data internationally.

10. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. Retention periods will vary depending on the type of data and our legal obligations, but we generally consider:

• The length of time we have an ongoing relationship with you
• Whether there is a legal obligation to retain the data
• Whether retention is advisable in light of our legal position (for example, for the establishment, exercise, or defence of legal claims)

Once personal data is no longer required, we will securely delete, anonymise, or otherwise dispose of it.

11. Your Rights

Under the UK GDPR and applicable data protection laws, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These may include:

• Right of access: to obtain confirmation as to whether we process your personal data and to receive a copy of it
• Right to rectification: to have inaccurate or incomplete personal data corrected
• Right to erasure: to request the deletion of your personal data in certain circumstances
• Right to restriction: to request the restriction of processing of your personal data in certain circumstances
• Right to data portability: to receive personal data you provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller where technically feasible
• Right to object: to object to processing based on our legitimate interests, and to object at any time to processing for direct marketing purposes
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal

To exercise any of your rights, please contact us using the contact details provided in this Privacy Policy. We may need to verify your identity before responding to your request.

12. Security of Your Personal Data

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, destruction, or damage. These measures include, where appropriate, encryption, access controls, secure storage, staff training, and regular security reviews.

However, no system or transmission of data over the internet can be guaranteed to be completely secure. You are responsible for keeping any account credentials and passwords confidential.

13. Children’s Privacy

Our services are not directed to children under the age of 16, and we do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without appropriate consent, we will take steps to delete such data.

14. Links to Third-Party Websites

Our websites and communications may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. The "Last updated" date at the top of this Policy indicates when it was last revised. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.

16. Contact and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact:

Data Protection Officer (if applicable) NextLane Automotive [Address] [City], England Email: [Contact email] Telephone: [Contact telephone number]

If you are not satisfied with our response, you have the right to lodge a complaint with the UK data protection authority:

Information Commissioner’s Office (ICO) Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Website: https://www.ico.org.uk Telephone: 0303 123 1113

By continuing to use our services, you acknowledge that you have read and understood this Privacy Policy.