PRIVACY NOTICE FOR PRESTIGE AND CLASSIC CARS LIMITED, WEBSITE
Introduction
Prestige and Classic Cars Limited takes your privacy very seriously. This Privacy Notice is intended to set out your rights and answer any queries you may have about your personal data when using this website. If you need more information, please email TheDataChampion@prestigeandclassiccar.com or write to The Data Champion, Cuckoo Farm Barn, Rocky Lane, Wendover, Aylesbury Buckinghamshire HP22 6PR
The ways in which we process personal information have been developed in line with the requirements of the EU General Data Protection Regulation (the GDPR) and applicable national law.
Processing your personal data
Processing means manual or automated activities such as collection, use, storage, transmission and destruction.
What personal data is processed
Personal data is any information relating to a living person, from which they may be identified. When you interact with us via this website or use our services we will process only relevant personal data. To understand more about how your data is processed when interacting with this website, please refer to our Cookie Policy.
When using our website services, you will be asked to provide contact details (such as email, phone, name and address) to enable us to provide information and deliver services to you.
Payment information will be processed by our 3rd party payment provider PayPal: Prestige and Classic Cars Limited do not process your payment data directly.
Lawful basis for processing your data
Prestige and Classic Cars Limited and our relevant 3rd parties (for example payment providers, accountants, government agencies and our IT providers) will process your personal data as necessary for setting up and delivering the contract, and in accordance with our legal obligations.
We may monitor any customer activity to prevent, investigate and/or report fraud, suspected money laundering, terrorism, misrepresentation, security incidents or crime, in accordance with applicable law and our legitimate interests.
Your consent will be requested if we’d like to send you any marketing information either from Prestige and Classic Cars Limited or any of our partner organisations.
Where your data is stored
We store personal data on secure servers in the UK where it is protected by UK data privacy laws. All data is backed up in the UK. Our services to customers are entirely digital, so we have no paper documents that contain customers’ personal data.
Keeping your data secure
At Prestige and Classic Cars Limited appropriate technical and organisational controls are in place to keep your personal data secure. It will be viewed only by relevant, authorised personnel, who process sales and purchases, and who manage administration and accounting services.
Our web services are hosted by a specialist provider:
– All personal data is delivered to the supplier through controlled processes that are protected by appropriate measures, including encryption;
– Access to personal data is subject to audits and access logging and is restricted based on the business need;
– All staff who process personal data have been fully trained on respecting customers’ rights, collecting only the data that is needed, adhering to privacy by design, and following other privacy principles;
– The network infrastructure is secure and resilient: it is not subcontracted to other third-parties; and
– Data centres are staffed 24 hours a day every day of the year, with extensive physical security measures, including strict access control and CCTV.
Data Retention
For sales and purchases we will keep your personal data until we are fully satisfied the service has been provided, or sale/purchase contract has been concluded successfully and any queries have been resolved. Certain data has to be kept longer by law, e.g. financial records have a retention period of 7 years.
For enquires only, personal data will be deleted by us when it is no longer necessary to hold it for the original purpose it was collected, typically 2 months. Some 3rd parties may have a legal obligation to store personal data for longer than 2 months, but will not retain it for longer than necessary.
Sharing your information
Prestige and Classic Cars Limited and our relevant 3rd parties will share your personal information with third parties only if necessary for the performance of the contract or if we have a legal obligation to do so. Our 3rd parties include payment providers, accountants, government agencies and IT providers
We will not share your information with any other organisations, eg. for marketing, market research or commercial purposes, unless you give your clear consent for us to do that.
If you subscribe to receive such information, you can unsubscribe at any time, either through this website or by clicking ‘unsubscribe’ on any marketing email you receive. Alternatively please contact The Data Champion.
Individuals’ rights
You have a right to see what personal data we hold about you, by making a written request to The Data Champion.
If it is incorrect you can ask for it to be corrected and request for information we hold to be deleted.
We will delete any information that is no longer needed for the purpose for which it was collected, unless required to do so by law.
You have the right to object to processing. At your request, in certain circumstances, a restriction can be placed on the processing of personal data.
In certain circumstances, you also have the right to request that we transfer to another party the information that we hold about you – this is known as data portability.
Contacting Us
If you have any questions about the use of your personal data, or that of our 3rd parties, please email TheDataChampion@prestigeandclassiccar.com or write to The Data Champion, Cuckoo Farm Barn, Rocky Lane, Wendover, Aylesbury Buckinghamshire HP22 6PR
Complaints about personal data
If you are unhappy with the way the we process your personal data, please contact us in the first instance so that we may have the opportunity to put things right. A complaint may be made directly to the Information Commissioner’s Office (ICO). Under certain circumstances, if you are dissatisfied with the decision of the ICO, you also have the right to apply for judicial remedy.
Published November 2018
END OF POLICY