This Privacy Policy lets you know what happens to personal data that you provide to us or that we may collect about you. We hope that the following sections will answer any questions that you may have but if not, please get in touch with us.
This Policy was last updated on 24 May 2018 to take into account new requirements under the General Data Protection Regulation regarding how we inform you about the ways in which we use your personal data, and your rights in relation to that data. Any changes we may make to this Policy in the future will be posted on this page. You can also obtain an up to date copy of this Policy from any dealership or by contacting us using the details set out in section 1 below.
This Policy applies only to personal data processed by or on behalf of the Rybrook Group. We represent a number of vehicle brands and we share some of your information with the relevant manufacturer. For details of the manufacturers’ privacy policies please visit their websites.
1. About us and how to contact us
In this Policy “Rybrook Group”, “we” or “us” refers to each of Rybrook Holdings Limited and its subsidiary companies. Our operating companies are:
- Rybrook Limited
- Rybrook Cars Limited
- Rybrook Motors Limited
- Rycliff Cars Limited
- Rybrook Services Limited
You can find the details of the Rybrook Group company that you are dealing with using the information set out in Appendix A.
You can contact us on any matters relating to your personal data by emailing data@rybrook.co.uk or by writing to Data Compliance, Rybrook Holdings Limited, 6 Athena Court, Athena Drive, Tachbrook Park, Warwick, CV34 6RT.
2. What personal data do we collect and why
We collect information from you when you visit our website or dealership locations, purchase something from us, enquire in person about our products (vehicles, parts and accessories) or services, contact us by telephone, email or other means, or respond to a communication from us. We may also receive information about you from the relevant manufacturer. The provision of information to us is largely voluntary; however, if you do not provide us with Transaction information or Preference information, we may not be able to fulfil your order or provide you with updates.
Category of personal data
Contact information
Examples of your personal data
Name, Address, Email Address, Telephone Number.
Category of personal data
Vehicle information
Examples of your personal data
Your new and/or existing car registration, mileage, service history, vehicle history and vehicle diagnostic data.
Category of personal data
Test Drive information
Examples of your personal data
Contact information, copy of your driving licence.
Category of personal data
Transaction information
Examples of your personal data
Contact information, together with purchase details, delivery details, payment details, your driving licence (or other forms of identification), any relevant Vehicle Finance information, any communications we have about your purchase.
Category of personal data
Vehicle Finance information
Examples of your personal data
If you require finance for your vehicle purchase, we will need further information such as proof of address, previous addresses, number of dependants, your marital status, your occupation, your employer, your bank details and any other relevant information requested by the finance provider.
Category of personal data
Sensitive information
Examples of your personal data
Information relating to medical conditions and/or any disability where necessary to enable us to assist with specially enabled vehicles for those eligible.
Category of personal data
Legal information
Examples of your personal data
Fraud checks or flags raised about your transactions, payment card refusals, complaints, copies of documents you provide to prove your identity where the law requires this (eg driving licence).
Category of personal data
Preference information
Examples of your personal data
Your marketing preferences, your account settings including any default preferences, any preferences we have observed, such as the types of offers that interest you, or the areas of our website that you visit.
Category of personal data
Communications
Examples of your personal data
Communications we may have with you, whether relating to a transaction or not. Please note that we normally record calls to and from our dealership sites.
Category of personal data
Voluntary information
Examples of your personal data
Any voluntary information you provide us with, such as hobbies and interests, and responses to surveys or competition entries.
Category of personal data
Observed information
Examples of your personal data
Details of your online browsing activities on our website, such as the pages, products or areas of our website that you visit, or which link has brought you to our website from our email communications or third-party websites. This includes the new and used vehicle searches that you perform on our website.
This information may be identifiable to you because you are logged in to your account, or because we have collected details of your IP address or the device that you have used to access the website. This may also give us the geographic region which your device reports that you are located in.
CCTV footage at our dealership premises.
We use the data we collect about you for various purposes. European data protection legislation sets out specific “lawful bases” for processing personal data. The basis on which we process different information about you and the purpose of that processing are explained below.
Lawful basis and purpose
Consent: To send you direct marketing in accordance with the preferences you select when you sign up to receive updates, purchase products, or via our preferences centre https://www.rybrook.co.uk/update-personal-information.
What personal data do we use
Contact information, Preference information, Communications, Voluntary information
Lawful basis and purpose
To use cookies or other similar technologies, as more fully described in our Cookies Statement https://www.rybrook.co.uk/cookie-policy.
What personal data do we use
Observed information
Lawful basis and purpose
Entering into and performance of our contract with you: To discuss and negotiate a transaction (including arranging test drives), fulfil your order, take payment and deliver your products or services to you, to deal with any complaints or any after sales services, including for warranty purposes.
What personal data do we use
Vehicle information, Test Drive information, Transaction information, Preference information, Communications, Voluntary information
Lawful basis and purpose
To share information with financial providers should you require vehicle finance for your purchase.
What personal data do we use
Vehicle Finance information
Lawful basis and purpose
Should you require a specially enabled vehicle, we will process your Sensitive information to ensure that you receive the correct vehicle.
What personal data do we use
Sensitive information
Lawful basis and purpose
Complying with legal obligations: To confirm your identity, keep records required by law or to evidence our compliance with laws, including tax laws, consumer protection laws and data protection laws. To provide information to law enforcement agencies or other authorities where we are required to do so, including in the event of any offences committed while driving one of our vehicles.
What personal data do we use
Potentially any category (where relevant)
Lawful basis and purpose
Our legitimate interests: For our internal business administration, to manage customer accounts, including keeping general records of customers, sales, customer care and other interactions, and to protect genuine customers and our business from fraud. This is necessary in order for us to operate efficiently, deal with any issues which may arise and to protect ourselves against any future legal claims and ourselves and others against fraudulent transactions.
What personal data do we use
Vehicle information, Transaction information, Legal information, Preference information, Communications
Lawful basis and purpose
Where you are an existing customer or have been in discussions to purchase products or services, to provide you with updates and promotional offers about our products and/or services, MOT/Service reminders and invitations to events, where you have not opted out of receiving such communications from us. This is necessary to support our commercial objectives. We will ensure that we are providing you with relevant details of our products and services where these are of interest to you. They will only ever be sent in line with your stated preferences and interests and you can update your preferences at any time.
What personal data do we use
Contact information, Preference information, Communications, Voluntary information
Lawful basis and purpose
Similarly, if you are not an existing customer but have previously enquired about our products or services, to market to you by post or telephone unless you have asked us not to do so.
What personal data do we use
Contact information, Preference information, Communications, Voluntary information
Lawful basis and purpose
To manage any competitions or other promotions that you have chosen to participate in.
What personal data do we use
Contact information, Preference information, Communications, Voluntary information
Lawful basis and purpose
To target our direct marketing: This means that we use the information you provide us with and that we observe from your interactions with us to build a better picture of the type of offers we can provide which you might be interested in, so that the communications you receive are more relevant to you. We believe this is justified as you are in control over whether you receive our direct marketing (through our preference centre and each time we contact you) and you can restrict our use of cookies.
What personal data do we use
Transaction information, Preference information, Communications, Voluntary information, Observed information
Lawful basis and purpose
To improve our marketing activity more generally: This means we use information about you and about our other customers to work out what is working and what is not in terms of our marketing activity or our sales performance, so that we can develop our websites and offers to be more relevant to our customers generally, to improve your online experience and the services we offer. We will also use information provided by your device to recommend the intended geographic website for the location it reports you as being in. Where possible, we will use statistical or pseudonymised data for these purposes.
What personal data do we use
Transaction information, Preference information, Communications, Voluntary information, Observed information
Lawful basis and purpose
To safeguard our premises and property.
What personal data do we use
Observed information (including CCTV footage)
Lawful basis and purpose
Your vital interest: To contact you if there are urgent safety or product recall notices to communicate to you or where we otherwise reasonably believe that the processing of your personal information may prevent or reduce any potential harm to you.
What personal data do we use
Contact information
3. What are your rights?
You have certain legal rights, which are summarised below, in relation to any of your personal data which we hold.
Where our processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. If you do decide to withdraw your consent we will stop processing your personal data for that purpose. Your withdrawal of your consent won’t impact any of our processing up to that point.
In cases where we are processing your personal data on the basis of our legitimate interest, you can ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue to process your personal data.
Your right
Right of access
What does it mean?
Subject to certain conditions, you are entitled to have access to your personal data (this is more commonly known as submitting a “data subject access request”).
Limitations and conditions of your right
If possible, you should specify the type of information you would like to see to ensure that our disclosure is meeting your expectations.
We must be able to verify your identity. Your request may not impact the rights and freedoms of other people, eg privacy and confidentiality rights of other individuals.
Your right
Right to data portability
What does it mean?
Subject to certain conditions, you are entitled to receive the personal data which you have provided to us and which is processed by us by automated means, in a structured, commonly-used machine readable format.
Limitations and conditions of your right
If you exercise this right, you should specify the type of information you would like to receive (and where we should send it) where possible to ensure that our disclosure is meeting your expectations.
This right only applies if the processing is based on your consent or on our contract with you and when the processing is carried out by automated means (ie not for paper records). It covers only the personal data that has been provided to us by you.
Your right
Rights in relation to inaccurate personal or incomplete data
What does it mean?
You may challenge the accuracy or completeness of your personal data and have it corrected or completed, as applicable.
We encourage you to notify us of any changes regarding your personal data as soon as they occur, including changes to your contact details, telephone number.
Limitations and conditions of your right
This right only applies to your own personal data. When exercising this right, please be as specific as possible.
Your right
Right to object to or restrict our data processing
What does it mean?
Subject to certain conditions, you have the right to object to or ask us to restrict the processing of your personal data.
Limitations and conditions of your right
As stated above, this right applies where our processing of your personal data is necessary for our legitimate interests. You can also object to our processing of your personal data for direct marketing purposes.
Your right
Right to erasure
What does it mean?
Subject to certain conditions, you are entitled to have your personal data erased (also known as the “right to be forgotten”), eg where your personal data is no longer needed for the purposes it was collected for, or where the relevant processing is unlawful.
Limitations and conditions of your right
We may not be in a position to erase your personal data, if for example, we need it to (i) comply with a legal obligation, or (ii) exercise or defend legal claims.
Your right
Right to withdrawal of consent
What does it mean?
As stated above, where our processing of your personal data is based on your consent you have the right to withdraw your consent at any time.
Limitations and conditions of your right
If you withdraw your consent, this will only take effect for future processing.
If you wish to exercise any of your rights please contact data@rybrook.co.uk.
Please contact us if you have any concern about how your personal information is processed and we will try to resolve your concerns. If you are not satisfied with our response or you consider that we are in breach of our obligations under data protection laws you may make a complaint to the Information Commissioner’s Office. Please see the Information Commissioner’s website https://www.ico.org.uk for more information.
4. Who do we share personal information with and where are they?
Information collected by one Rybrook Group company may be shared with other companies in the Rybrook Group for the purposes of administrative efficiency.
In order to make certain products and/or services available to you we sometimes share your data with trusted third parties.
As explained above, we represent a number of vehicle brands and we share some of your information with the relevant manufacturer. If your enquiry leads to the purchase of a vehicle your information will be shared with the relevant manufacturer for warranty, registration and safety recall purposes. We may also share your information to ensure that you receive the appropriate aftersales support for your vehicle. We will ask for your consent to pass your information to the manufacturer for marketing purposes.
If you enquire about the purchase of a vehicle with a finance agreement or related financial products such as insurance, we will disclose your information to our selected finance partners. If you are accepted for finance, the finance company will become the data controller for your information and we recommend that you read their privacy policy to see how they will use your data.
To ensure that the data that we hold remains up to date we periodically cleanse our databases using consumer credit reporting agencies to check contact information.
We may use third party service providers such as events management companies, call centres and mailing houses to support our marketing activities. We may also use service providers in less direct ways, such as in the provision of our payment and finance systems, or fraud verification.
We have agreements with our service providers which restrict how they are able to process your personal information and require them to keep it secure. If any service provider is based outside of the European Economic Area, we will ensure that the provider is either a current subscriber to the EU/US Privacy Shield, or we have an appropriate contract for the international transfer of personal information with them.
Our website also contains scripts from third party affiliates who will gather Observed information about you in order to verify referrals from third party advertising. We do not process this information but it is collected directly by them and processed in accordance with their privacy policies. For a list of affiliates, please see our Cookie Policy https://www.rybrook.co.uk/cookie-policy.
We may share any of your personal data with a prospective purchaser of all or any part of our business, on the basis of our legitimate interests and the interests of our purchaser, so that they can appropriately value the business and assess any risks and continue doing business with you after the acquisition.
5. How long do we keep your information for?
We will only retain your personal information for the purposes set out in this Policy and for as long as we have a legal or business requirement to do so. By law, different retention periods apply to different types of records and data, however the longest we will normally hold any personal data is 7 years from the date of your last transaction, for taxation, accounting and risk management purposes. This may be extended in the event of a query, investigation or dispute until fully resolved.
APPENDIX A – LIST OF DEALERSHIPS
Company
Rybrook Limited
Brand (Dealership)
BMW (Shrewsbury, Warwick, Wolverhampton, Worcester)
MINI (Shrewsbury, Stratford, Wolverhampton, Worcester)
BMW Motorrad (Wolverhampton)
Rolls-Royce (Birmingham, Bristol)
Company
Rybrook Cars Limited
Brand (Dealership)
Jaguar (Conwy, Huddersfield, Warrington)
Land Rover (Conwy, Copley, Huddersfield)
McLaren (Birmingham, Bristol)
Volvo (Chester, Warrington)
Rybrook Specialist Cars (Birmingham, Bristol)
DealerPX (Online only)
Company
Rybrook Motors Limited
Brand (Dealership)
Porsche (Chester)
Company
Rycliff Cars Limited
Brand (Dealership)
Bentley (Bristol)
Lamborghini (Bristol)