Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

• Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.
• Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.
• Your right to erasure – You have the right to ask us to delete your personal information. Read more about the right to erasure.
• Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.
• Your right to object to processing – You have the right to object to the processing of your personal data. Read more about the right to object to processing.
• Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data
  portability.
• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.
  
  If you make a request, we must respond to you without undue delay and in any event within one month. To make a data protection rights request, please contact us using the
  contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information to provide services and goods are:

• Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply,except the right to object. To be clear, you do have the right to withdraw your consent at any time.
• Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: collecting and using personal information such as names, contact details, addresses, payment information, and purchase history to provide you products, services, and related support. This information allows us to process orders, manage warranties, schedule appointments, communicate important updates, and verify identity to prevent fraud. The benefits of processing this information include: Ensuring you receive the correct product and service, protecting you from fraudulent transactions, and maintaining accurate records to provide high-quality service. We have carefully considered the potential impact and believe that these benefits outweigh any minimal risk to your privacy. We limit the data we collect to what is necessary, handle it securely, and do not use it for purposes unrelated to providing our
  services and goods.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for the operation of customer accounts and guarantees are:

• Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: collecting and using personal information such as names, contact details, addresses, purchase history, and payment information to operate customer accounts and manage vehicle guarantees. This information allows us to accurately track warranties, provide timely
  updates, handle service requests, and resolve any issues related to guarantees. The benefits of processing this information include: Ensuring you receive the correct support for your vehicle, maintaining accurate records for effective service delivery, and protecting both you and the dealership from potential errors or disputes. We have carefully assessed the potential impact and determined that the benefits of providing reliable service and managing guarantees outweigh any minimal privacy risk. We only collect the information necessary for these purposes and handle it securely, ensuring it is not used for unrelated activities.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information to prevent, detect, investigate or prosecute crimes are:

• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: collecting and using personal information such as names, contact details, purchase history, financial transaction information, and CCTV footage of public areas to prevent, detect, investigate, and report criminal activity. This includes protecting our customers, staff, and business from fraud, theft, or other unlawful activity. The benefits of processing this information include: Ensuring the safety and security of people and property, preventing financial loss, and supporting law enforcement when required. We have carefully assessed the impact and determined that the benefits of crime prevention and security outweigh
  any minimal privacy risks. Data is only collected and used when necessary, handled securely, and not used for unrelated purposes.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for service
updates or marketing purposes are:

• Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: collecting and using personal information such as names, contact details, purchase or viewing history, and marketing preferences to provide service updates and relevant promotions to our existing customers. This information allows us to send timely reminders about
  vehicle servicing, inform you about products or offers relevant to your vehicles, and improve our services based on your needs. The benefits of processing this information include: Helping you maintain your vehicle, providing information that may be useful, and ensuring efficient communication. We have carefully considered the impact and determined that the benefits of maintaining accurate, relevant communication and improving customer service outweigh any minimal privacy risks. We only collect the information necessary for these
  purposes and handle it securely, giving customers the option to opt out at any time.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for research or archiving purposes are:

• Legitimate interests – we’re collecting or using your informationbecause it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:collecting and using personal information such as purchase history, service records, and anonymized customer trends to analyze business performance, improve our services, and maintain accurate records for internal reporting and archiving. This information helps us understand customer preferences, optimize stock selection, and ensure that we continue to meet customer needs effectively. The benefits of processing this information include: Providing better services, making informed business decisions, and maintaining accurate historical records. We have carefully considered the potential impact and determined that the
  benefits of improving our services and maintaining accurate records outweigh any minimal privacy risks. We only collect the information necessary for these purposes, anonymize data whenever possible, and handle it securely.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for legal requirements are:

• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information for recruitment purposes are:

• Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: collecting and using personal information such as contact details, employment history, education history, right to work information, and relevant references to assess candidates fairly and efficiently during the recruitment process. This allows us to identify suitable candidates for roles, make informed hiring decisions, and ensure the safety and integrity of our workplace. The benefits of processing this information include: Selecting candidates who are qualified and suitable for the role, protecting staff and customers by ensuring a safe and trustworthy workforce, and maintaining efficient recruitment procedures. We have carefully
  considered the impact and determined that the benefits of processing this information outweigh any minimal privacy risks. Data is only collected where necessary, handled securely, and not used for unrelated purposes.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

• Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
• Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:collecting and using personal information such as names, contact details, addresses, payment information, purchase and service history, correspondence, call recordings, photos, and relevant records to investigate and resolve customer queries, complaints, or claims efficiently and fairly. This information allows us to understand the issue, respond promptly, and take appropriate action to resolve disputes. The benefits of processing this information include: Ensuring you receive accurate and timely responses, maintaining trust in our services, and preventing or correcting errors. We have carefully considered the potential impact and
  determined that the benefits of resolving queries and complaints outweigh any minimal privacy risks. We limit data collection to what is necessary, handle it securely, and do not use it for unrelated purposes.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.