Heading
Close X
Menu
Privacy Statement:
At Croyland Motors Limited we take your data privacy very seriously and have created a Data Privacy Statement that details how we use, store and share your data.
This Statement is therefore designed to provide you with appropriate information, assurance and confidence that we are handling your data in a secure, professional manner, with the respect it deserves. This statement therefore addresses what personal information we collect and how we handle the personal information shared with us. Please read the following carefully to understand our views and internal practices.
For the purposes of the General Data Protection Regulations (GDPR), the data controllers are Croyland Motors Limited, trading as Croyland car Megastore with the Data Protection contact being Mrs Annette Frid.
What information we collect from you and why:
We will not collect any personally identifiable information about you unless you provide it to us voluntarily. If you do not want your personal data collected, please do not submit it to us. Some information provided may be legally or contractually required and therefore, if not provided, will limit the services that Croyland Motors Limited are able to provide.
We collect personal data from our customers in order to process your order. We do not use this data for any reason(s) other than those listed below. We also process personal information using a CCTV system to monitor and collect visual images for the purposes of security and the prevention and detection of crime.
When you make an enquiry online or in our showroom, we will need to take a selection of customer details from you to enable us to process your order.
We may collect, store and use the following kinds of personal information:
By providing us with your contact details and providing consent, you are confirming that you are happy to receive correspondence from Croyland Motors Limited. In being able to manage the ways we contact you, four key methods will be used; Telephone, Post, Email, Text Message (SMS).
This information will help us to invoice and register your vehicle and any products you may purchase prior to your collection.
Prior to a test drive of one of our vehicles, we will also need the following information for insurance purposes:
If you are applying for finance through one of our financial lenders, we will need to collect:
The finance companies need to collect this information to enable them to undertake credit checks for any finance products.
What we do with your information:
We use the personal data we collect from you to manage your order, contact you throughout the process and to make you aware of any offers we feel may be of benefit to you.
We will have to disclose your personal information to the third parties that are pertinent to your purchase. For example, if you are obtaining finance through one of our lenders, we will need to pass your information through for them to process. Another example would be the registration of any products that you purchase with your vehicle. We will need to use your information to register them online.
Who we may share your information with:
While it is not our policy to disclose information to third parties unless clearly stated at the point of collection and with documented consent, there may be circumstances when we are legally obliged to do so, for example:
We may disclose your personal information to any of our staff where it would be reasonable to do so (if consent is necessary to facilitate this sharing we will ensure it is obtained prior to processing).
We may disclose your personal information to any member of our group of companies where it would be reasonable to do so (if consent is necessary to facilitate this sharing we will ensure it is obtained prior to processing).
Croyland Motors Limited have carried out specific vetting of third parties to ensure that they are compliant with GDPR and further ensure that your personal data is handled in a manner required under legislation. Please note that Croyland Motors Limited will never sell your information on.
Linked Sites:
Some links provided in this Site may lead to sites furnished by independent site owners. If you use these links, you leave this Site. The information presented therein is the sole responsibility of those site owners Croyland Motors Limited trading as Croyland Car Megastore have no control or responsibility for the content of independent sites and provides these links to its visitors for their convenience. If you decide to access any of the third party sites from this Site, you do so entirely at your own risk. Please check their policies before you submit any personal data to these websites.
When completing a purchase with Croyland Motors Limited trading as Croyland Car Megastore you should be provided with information describing Croyland Motors Limited trading as Croyland Car Megastore privacy practices and related policies that explain that certain personal information that you provide to the dealer may be shared with Vauxhall or others in accordance with this Statement.
What rights do you have over your Personal Information?
Under GDPR, individuals have by far greater ownership of the way in which they are able to manage their own personal information. There are now eight areas in which you have rights, known as the Data Subject Rights and they are broken down as follows;
Right to Access/Subject Access Requests – The Right to Access provides you with the opportunity to obtain all the information Croyland Motors Limited hold about you as an individual (also known as Subject Access Requests). The GDPR allows Croyland Motors Limited one month to provide you with all the information we hold about you, your vehicle and your address. This will solely be in relation to the person making the request. We will review all our manual and electronic data and provide you with everything accordingly. If your request specifies what documentation you require, this will assist us in responding to your request more quickly.
Right of Rectification – If you believe that the information that Croyland Motors Limited hold about yourself is incorrect, inaccurate or incomplete, the right of rectification ensures that you can contact us and we will update it accordingly. We will provide you with confirmation once the update has taken place.
Right to Erasure – Under GDPR, you have the option for all records of your personal information held by Croyland Motors Limited to be erased. There are however a number of exemptions to this right, given that we may have legal or contractual rights to retain your person information. If, however, it is felt that Croyland Motors Limited hold information about you which is no longer necessary for the initial purpose it was collected, your right to erasure will be granted.
Right to Data Portability - GDPR provides you with the opportunity for your personal information to be provided back to you in a portable format. This means that you can transfer your data to a different provider without the need for you to provide it again to them.
Right to Withdraw Consent – Croyland Motors Limitedlikes to give you the opportunity to manage the way in which we communicate with you. Under GDPR, this is known as the Right to Withdraw Consent. If for any reason, you would no longer wish for us to contact you, either entirely, or via certain methods, this right can be used. This simply means that Croyland Motors Limited will update your contact preferences within our systems, as well as advising third parties with whom we have supplied your information of your updated preferences also.
Right to be Informed – This right encompasses the need for transparency over how we use your data and is the intention for this entire document. It ensures that Croyland Motors Limited supply appropriate notification about our processing activities and ensure that they are concise, transparent, easily accessible, written in clear, plain language and free of charge.
Right to Restrict Processing – This allows you the opportunity to let us hold your data but not process it for marketing purposes. If you request this right to be actioned, Croyland Motors Limited will place you on a suppression list where it is no longer processed.
Right to Object – Under GDPR you can object to processing based on legitimate interest or a task classified as being in public interest, direct marketing and processing for purposes of scientific/historical research and statistics.
How we store your information:
We will take all reasonable technical and organisational precautions to prevent the loss, misuse of, or alteration of your personal information. We will store all the personal data you provide on our secure servers. Our servers are secured with a Watchguard Firewall with built in Anti-Virus, Intrusion Protection, Web-Blocker, Data Loss Protection, Botnet Detection, Spam-Blocker and Geo-Location Blocker which are all updated daily.
What happens if your personal Data is Breached ?
As detailed throughout this statement, we will endeavour to ensure that your personal information is retained in accordance to legislation. However, if for any reason we discover that your personal information has been breached in anyway, including lost, stolen or hacked, dependant on the level of its severity, we will ensure that the Information Commissioners Officer (ICO) and you, as a customer, are made aware within 72 hours of us understanding that a breach has been made.
Croyland Motors Limited staff have been trained in being able to understand and appreciate whether personal information has been breached, and have a duty of care to ensure that the Data Protection Officer is informed as soon as a breach has been identified.
Action will then be taken to minimise the risk to your personal data as seen fit in accordance to the incident including following guidance from the Data Protection Officer and the ICO. We will also inform you once we are fully aware that the additional security measures have been put in place to further secure your information.
How do you contact us regarding your Personal Data and how it is handled?
If you wish to contact us regarding:-
Please note, we may require proof of identity in order to complete some requests. A copy of your driving licence is the most suitable.However other forms of photographic identity are also acceptable.
If you remain unhappy with the manner in which your data is being handled and/or you feel that the response is not sufficient, please contact the Information Commissioners Officer (ICO) using their website www.ico.org.uk who are the supervisory authority for data protection within the UK.
We are registered as a data controller with the Information Commissioner’s Office and our Registration Number is: Z6298650
Our Data Protection Officer is Mrs Annette Frid.
Croyland Motors Limited t/a Croyland Car Megastore is an appointed representative of ITC Compliance Limited which is authorised and regulated by the Financial Conduct Authority (their registration number is 313486). Permitted activities include advising on and arranging general insurance contracts and acting as a credit broker not a lender.
We can introduce you to a limited number of finance providers. We do not charge fees for our Consumer Credit services. We may receive a payment(s) or other benefits from finance providers should you decide to enter into an agreement with them, typically either a fixed fee or a fixed percentage of the amount you borrow. The payment we receive may vary between finance providers and product types. The payment received does not impact the finance rate offered.
All finance applications are subject to status, terms and conditions apply, UK residents only, 18’s or over, Guarantees may be required
