Effective Date: 18/04/2025
The Car Collection is committed to protecting your personal data and handling it with transparency, integrity, and security. This Privacy Policy outlines how we collect, use, store, and share your information, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.
1. Information We Collect
We only collect personal information that you voluntarily provide, such as:
-
Your name, email address and phone number when you contact us, create an account, or book a service.
-
Payment details when completing a transaction (processed securely via trusted third-party payment providers.
-
Any content you upload to the app, including vehicle media and related personal notes or descriptions.​
​
We do not use cookies or automated tracking technologies for advertising or analytics purposes.
2. How We Use Your Information
We only process your personal data where we have a lawful basis to do so. This includes:
-
Contractual necessity – to fulfil our service to you.
-
Legal obligation – for compliance with legal or regulatory requirements.
-
Legitimate interest – to improve our service or respond to inquiries.
-
Consent – where you have explicitly agreed to us processing your data for a specific purpose.
3. How We Protect Your Information
We use the information you provide to:
-
Respond to inquiries and manage customer relationships.
-
Deliver services, such as uploading and managing content within the app.
-
Facilitate secure payments and bookings.
-
Maintain the functionality, safety and security of the platform.
-
Comply with legal or regulatory requirements.
4. How We Protect Your Information
We implement robust technical and organisational security measures, including:
-
Industry-standard encryption for data storage and transmission.
-
Secure login processes including PassKey authentication (PIN, biometric).
-
Strong password policies and account lockout after repeated failed attempts.
-
Secure servers and restricted access for authorised personnel only.
-
​
Despite our best efforts, no digital platform can be entirely risk-free. However, we are committed to continually reviewing and enhancing our security measures.
5. Sharing Your Information
We do not sell your data. We only share your personal information when necessary and only with trusted third parties such as:
-
Secure payment processors (e.g. Monzo or equivalent).
-
Professional service providers (e.g. legal or IT support), bound by confidentiality agreements.
-
Legal authorities, when required by law.
​
All third parties are required to comply with GDPR and only process data in line with our instructions.
6. International Data Transfers
We primarily store and process your data within the UK. Where data is transferred outside of the UK or EEA (e.g. cloud services), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO.
7. Your Rights Under GDPR
You have the following rights:
-
Access – request a copy of the personal data we hold about you.
-
Rectification – request corrections to inaccurate or incomplete data.
-
Erasure – request deletion of your data (where legally permissible).
-
Restriction – limit how your data is processed.
-
Objection – object to processing based on legitimate interests.
-
Data Portability – request a copy of your data in a usable format.
-
Withdraw Consent – where processing is based on consent, you can withdraw it at any time.
​
To exercise these rights, contact us at: support@thecarcollection.co.uk
​
We aim to respond within 30 days and will never charge for reasonable requests.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law or regulation.
​
When your data is no longer needed, it is securely deleted.
9. Updates to the Privacy Policy
We may update this Privacy Policy occasionally. Any changes will be posted on this page with an updated effective date. If material changes occur, we will notify you directly via email or app notification where applicable.
10. Contact Us
If you have any questions or concerns about this policy or your personal data, please contact us:
​
Email: support@thecarcollection.co.uk
Address:
The Car Collection
Royal Mills
2 Cotton Street
Manchester
M4 5BZ
​
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the UK’s Information Commissioner’s Office (ICO) – www.ico.org.uk.