• Respond to your enquiries and to provide the information or service you requested (for example, arranging a quote or test drive).
Protecting your personal information

Privacy Policy

BrandNewCars.co.uk (Brand New Cars Ltd) respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, use, store and disclose information when you use our website, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

In particular, we adhere to data protection principles requiring that personal data is processed lawfully, fairly, transparently, and only for specified purposes.

By using our site or submitting information to us, you consent to the practices described below.

 

Information We Collect

We collect only the personal data you choose to provide to us. Through our contact form, you may provide:

  • Contact information: your name, email address, and telephone number.
  • Enquiry details: any message or request you include with your contact form submission.

We do not require or collect any sensitive personal data (special category data).

We also do not collect financial or insurance information, as we do not offer finance or insurance services. Aside from the data you submit, we automatically collect limited usage information via cookies and similar technologies (see Cookies and Tracking Technologies below).

This may include your IP address, device and browser details, and pages you visit, but it is used only in anonymised form.

How We Use Your Information

We use your personal data only for the purposes described in this policy. Typically, we process your information to:

  • Respond to your enquiries and to provide the information or service you requested (for example, arranging a quote or test drive).
  • Manage our relationship with you, such as scheduling appointments or answering follow-up questions.
  • DCommunicate with you by email or phone when necessary (for example, to confirm a booking or answer questions).
  • Improve our website and services, such as enhancing user experience or understanding customer interest (using aggregated, anonymised data).

Under UK GDPR, every processing activity must have a lawful basis. For the above purposes we rely on one or more of the following lawful bases:

  • Legitimate interests (Article 6(1)(f)): We have a legitimate interest in operating our business and responding to your enquiries. It is necessary to process your contact details to communicate with you and manage our services, and this does not override your privacy
  • Consent (Article 6(1)(a)): Where you explicitly consent (for example, opting in to receive marketing or newsletters), we rely on that consent to send you the relevant communications. You are free to withdraw your consent at any time.
  • Contract performance (Article 6(1)(b)): If you enter into an agreement with us (for example, purchasing a vehicle), we may process your data to fulfil our contractual obligations.
  • Legal obligation (Article 6(1)(c)): If required by law (for example, in tax or safety compliance), we may process personal data to comply with legal requirements.

We will not use your personal data for any purpose incompatible with those stated here. In each case, we ensure the processing is necessary and proportionate. We do not engage in automated decision-making or profiling.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your experience and analyze site usage. In particular, we use Google Analytics (a service by Google LLC) to collect information about how you use our site (e.g. pages visited, session duration, referrers). Google Analytics uses cookies to generate reports about website traffic and usage patterns. These cookies do not directly identify you personally and are used solely for statistical purposes.

In compliance with UK privacy law (PECR and UK GDPR), we provide clear information about our use of cookies and seek your consent for non-essential cookies. When you first visit the site, you will be presented with a cookie banner giving you the option to accept or decline analytics cookies. You may disable cookies at any time via your browser settings, although this may affect your experience. You can also opt out of Google Analytics tracking by installing Google’s browser add-on.

By consenting to cookies or continuing to browse with them enabled, you agree to our use of cookies as described. All information collected via cookies is handled in accordance with this Privacy Policy and applicable law.

Data Sharing and Disclosure

We do not sell or share your personal data with third parties for marketing purposes. We will only disclose your information in the following limited circumstances:

  • Service providers: We may use trusted third-party service providers (e.g. our web host, IT support, email or SMS services) to perform services on our behalf. Such providers will have access only to the personal data necessary to carry out their duties and are required to keep it confidential and secure.
  • Legal requirements: We may disclose your information if required to do so by law (for example, in response to a court order or law enforcement request) or to protect our rights and safety.
  • Regulatory compliance: If applicable, we will provide information to governmental or regulatory bodies as required by law.

We do not otherwise share your personal data with anyone outside Brand New Cars Ltd. We do not provide any financial or insurance details to third parties, as we do not offer those services.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes set out in this policy, and to comply with our legal obligations. Once your data is no longer needed (e.g. after all enquiries are completed or upon your request), we will securely delete or anonymise it. We periodically review the personal data we hold and securely erase any data that is out-of-date or unnecessary. The UK GDPR’s storage limitation principle requires that data “be kept in a form which permits identification of data subjects for no longer than is necessary”, and we adhere to this requirement.

In some cases, we may retain certain information (such as basic contact details) longer if needed to comply with accounting, tax or audit obligations, but only to the extent required by law.

Your Rights Under UK GDPR

Under the UK GDPR you have the following rights regarding your personal data:

  • Right of access: You have the right to request a copy of the personal data we hold about you.
  • Right to rectification: You may request correction of any inaccurate or incomplete data we hold.
  • Right to erasure: Also known as the “right to be forgotten,” you can ask us to delete your personal data when there is no valid reason for us to continue processing it.
  • Right to restrict processing: You can ask us to suspend processing your data if you contest its accuracy or object to its processing.
  • Right to data portability: If applicable, you have the right to receive your personal data in a structured, commonly used format and to request that we transmit it to another controller.
  • Right to object: You can object to our processing of your personal data where we rely on legitimate interests or performance of a task in the public interest, including for direct marketing. In most cases you may withdraw consent or object to processing without affecting the lawfulness of prior processing.

If you wish to exercise any of these rights, please contact us (see Contact Us below). We will respond to your request in accordance with applicable law. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated.

Security Measures

We implement appropriate technical and organisational measures to protect your personal data. We use industry-standard security measures such as firewalls, encryption, secure servers, and access controls to prevent unauthorised access, accidental loss, destruction or damage of your data. Access to personal information is restricted to our staff and authorised parties who need it to perform their duties, and they are obliged to keep it confidential.

Our security practices comply with the UK GDPR’s “security principle,” which mandates processing personal data in a manner that ensures its security, including protection against unauthorised or unlawful processing and against accidental loss or damage. We regularly review our security procedures to ensure their effectiveness.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time (for example, if our practices or legal requirements change). When we make changes, we will revise the “Last Updated” date at the end of this policy. We encourage you to revisit this page periodically to stay informed about how we collect and protect your information. If we make any material changes, we will notify you by posting a notice on our website or sending you an email.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, or if you wish to exercise your rights, please contact us:

  • Email: info@brandnewcars.co.uk
  • Phone: (+44) 7477 700077
  • Address: Wellington Gate East Grinstead, West Sussex, RH19 3GE

Last Updated: 15 June 2025.