Jaybee Motors – Privacy Statement

1. Introduction

At Jaybee Motors we take your privacy seriously and will only use your personal information for the following purposes:

• To administer your account and to enable us to provide you with the products and services you have requested from us

• To contact you about any products or services that may be of interest to you

2. Collecting Personal Information

The personal information we collect from you will depend upon the nature of your enquiry or the product or service you purchase from us. We may collect, store and use the following kinds of personal information:

• Information that you provide to us when making an enquiry via our website, telephone or at our dealership;

• Information that you provide to us when signing up to any distribution lists to receive correspondence from us;

• Information relating to any purchases you make of our goods or services, including any other transaction details (including your address, telephone number and payment details)

2. Using Personal Information

Personal data we receive will be used for the purposes it was provided. The legal basis for processing your personal information is one of the following:

• Meeting the terms of your order and/or performance of a contract;

• To send statements, invoices and payment reminders to you, and collect payments from you;

• It is necessary to protect the vital interest of you or other persons, such as safety issues regarding your vehicle

• To send promotional marketing material which we believe may be of interest to you, if you have requested it (you can inform us at any time if you no longer wish to receive this information via the data preferences centre on our website);

• It is necessary for the performance of a contract;

• It is necessary to comply with mandatory legal or statutory obligations;

• It is necessary for the purposes of our legitimate interests as data controller; or whereby you have given us permission to use the personal data

3. Disclosing Personal Information

• We may disclose your personal information to any of our staff, agents, suppliers or subcontractors where it would be reasonable to do so. (If consent is necessary to facilitate this sharing we will ensure it is obtained prior to processing)

• We may disclose your personal information to any member of our group of companies where it would be reasonable to do so including our manufacturing partners and nominated partner suppliers. (If consent is necessary to facilitate this sharing we will ensure it is obtained prior to processing)

• We may be legally obliged to disclose your personal information:

• To the extent that we are required to do so by law;

• In connection with any ongoing or prospective legal proceedings;

• In order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk);

• To any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information].

“Manufacturer(s)” and “Nominated Suppliers” detailed below:

• Renault UK

• Dacia UK

• MG Motor UK Ltd

• AMS Insurance Services Ltd

• Autoprotect

• edynamix UK Ltd

• EmAC Limited

• Renault Financial Services Ltd

• Santander Consumer Finance Ltd

• Evolution Funding Ltd

• HPI Equifax Limited

• Motability Operations Limited

• Automated First Registration and Licensing System (AFRL)

• Financial Conduct Authority

• DVLA

• G-Forces Web Management Limited

• Cox Automotive Retail Solutions

• Pinewood Technologies PLC

• Automotive Compliance Ltd

• Ixtar G3 Global

• BP Chargemaster

• Rolec

• Podpoint

• Plug In Vehicle Car Grant (PiCVG)

4. Security of personal information

• We will take all reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information

• We will store all the personal data you provide on our secure servers

• All details of financial transactions entered via our website will be protected by encryption technology

• We take steps to ensure that any third parties we work with have security protocols and policies in place to manage and record your data privacy and preferences correctly and that your data is stored securely in accordance with the legislation.

5. Your rights

Under data privacy laws, you have the rights to:

1. Request deletion or correction of your personal data;

2. Request access to your personal data;

3. Request that your personal data be transferred to another person

Our online Data Preference Center helps you to exercise the rights that data privacy laws give you and control your personal information. It contains separate forms, as set out below.

Marketing Preferences

• On the “marketing preferences” tab, you can tell us how you would like us to send you marketing information or ask us to stop marketing to you entirely.

Change your Data

• If we do hold information about you, you can also ask us to correct any mistakes by completing the form on the “Change your data” tab.

Delete your Data

• You can ask us to delete the information we hold about you by completing the form on the “delete your data” tab.

You may instruct us to provide you with any personal information we hold about you, via a Subject Access Request. Upon receipt of a SAR request:

• We will, after confirming identity, provide all relevant data we may hold to you in the most practical format unless otherwise stipulated and reasonably possible

• We may withhold personal information that you request to the extent permitted by law

• If you instruct us to no longer process your personal data we will do so as quickly as possible

• If you instruct us to destroy any/all of your personal data we may hold we will do so as quickly as possible

• We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you

6. Our Website

Our website is powered by G-Forces Web Management Limited (“GForces”), our third-party web services provider. GForces is committed to ensuring that data is processed in accordance with applicable data privacy laws and is kept secure. GForces is certified to the standard of ISO27001 (an international standard for information security). GForces uses Amazon Web Services, Inc. as its cloud platform provider. All data processed by GForces is stored on Amazon’s web servers in the EEA.

If you visit our website

When someone visits our website, GForces collects standard internet log information (your IP address, browser, and type of device) and details of visitor behaviour patterns (where you joined our site from, the path you take through our site and where you leave). These are stored against unique ids (which are strings of numbers). GForces collects this information for the legitimate business purpose of monitoring the number of visitors to the various parts of the site, the general geographic location of visitors and engagement levels, which in turn enables it to make improvements to its websites and services and provide business intelligence. This information is only processed in a way which does not identify anyone. It is kept indefinitely.

GForces also uses Google Analytics to collect standard internet log information and details of visitor behaviour patterns, which are stored against unique ids (i.e. strings of numbers). We collect this information for the legitimate business purpose of monitoring website traffic and engagement levels, which in turn enables us to make improvements to our website and the way we sell our cars and services. This information is only processed in a way which does not identify anyone. It is kept indefinitely.

If you use our enquiry forms

When you submit information using an online form, GForces processes the data collected and stores it for 31 days for the legitimate business purpose of enabling us to access the information and deal with your request (it is then kept for a further 14 days in GForces’ routine back-ups for business continuity purposes). If you enter your post code, GForces stores the first part of it (e.g. ‘OX14’ or ‘SW1’) and links it to standard internet log information already collected (it is used for the same purposes as that information, as outlined above).

7. Cookies

Our website http://www.jaybee.co.uk uses cookies to give you a better online experience. The cookies used in relation to our website include:

• Strictly Necessary Cookies

• Performance Cookies

• Functionality Cookies

• Targeting Cookies

8. ICO Registration

We are registered as a data controller with the Information Commissioner’s Office and our details are:

JAYDEE MOTORS LTD

OXFORD ROAD

BODICOTE

BANBURY

OXFORDSHIRE

OX15 4AB

Registration number: Z689357X

9. Data Protection Officer

Any Data Protection issues can be directed to Data Protection Officer,

Jaybee Motors

Oxford Road

Bodicote

Banbury

OX154AB

OR:

enquiries@jaybee.co.uk