This privacy policy

This Privacy Policy applies to The NewVehicle.com website and associated services (the “Website”) and governs data collection, retention and usage. By using the Website, you agree to the data practices described in this Privacy Policy.

Background

Who we are

NewVehicle.com is a trading style of iVendi Limited. Our registered address is Llys Eirias, Abergele Road, Colwyn Bay, LL29 8BW, registered number 07003191.

We take the protection of your data very seriously.

As well as being authorised and regulated by the Financial Conduct Authority (FRN 679767) the Company is also certified to ISO 27001 standards. This means we adhere to international best practices with regards Information Security.

We are also registered with the Information Commissioners Office (ICO) Z2032942. The ICO is the UK’s independent authority set up to uphold information rights in the public interest. It promotes openness by public bodies and data privacy for individuals.

What we do

The financial services industry is heavily regulated with an aim to protect all the parties involved, especially you, the consumer. Buying a vehicle can be complicated and can involve not just the vehicle you are buying, but also any trade-in, finance settlement, new finance agreement and a host of added value insurance products a retailer may offer to you, such as warranty and GAP insurance.

Consumers, such as you, need time to fully understand the commitment they are making and whether the products are suitable for their current and future needs.

Our technology solutions log all key events and contact between the consumer, the vehicle retailer and finance lenders to enable a full audit trail of activity. The aim is to protect everyone involved and to be able to provide as much detailed information as possible when asked.

How is your personal data involved?

When you have an account with the Website, there are three different ways in which your personal data is processed:

Account Data

When you access the Website, create an account and use the Website and associated services, we collect and process your personal data so you can benefit from all the functionality available and use it as you want to. This is personal data you give to us, for example, when creating and accessing your account, and searching for vehicles and finance products.

Retailer Data

When you search for a particular vehicle and make enquiries about it through your account, we pass some of your personal data to the relevant vehicle retailer. That retailer will become a controller of the personal data they have access to.

Finance Data

When you search for a finance product for a vehicle you want to buy, we pass some of your personal data to the relevant finance product provider. The product provider will become a controller of personal data they have access to.

How we collect your personal data

We use different methods to collect data from and about you including through:

Direct interactions

You may give us your personal data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

• create an account on the Website;
• subscribe to our service or publications;
• request marketing to be sent to you;
• enter a competition, promotion or survey; or
• give us feedback or contact us.

Automated technologies or interactions

As you interact with the Website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our Cookie Policy for further details.

Third parties or publicly available sources

We will receive technical and personal data about you from Analytics providers. Please refer to our Cookie Policy.

What information do we process?

To allow you to use the functionality available through our services, we process the following information about you:

Account Data

When you create and access your account with the Website, we process the following personal data:

Identity Data 

includes first name, last name, username or similar identifier and date of birth.

Contact Data

Includes email address and telephone numbers.

Transaction Data

Includes details about products and services you have purchased using our platform.

Technical Data

Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, access times, browser plug-in types and versions, operating system and platform, referring website addresses, and other technology on the devices you use to access the Website.

Profile Data

Includes your username and password, purchases or orders made by you, your interests (including details of vehicles of interest on websites using Website functionality), preferences, feedback and survey responses.

Usage Data

Includes information about how you use the Website, products and services, including when you use our support function.

Marketing and Communications Data

Includes your preferences in receiving marketing from us and our third parties and your communication preferences.

Retailer Data

When you search for, reserve and/or purchase a vehicle using the Website, we pass information about you and the vehicles you are interested to the relevant retailer making that vehicle available for purchase.

• Share your name and contact details with the relevant retailer.
• Redirect your card transaction to www.stripe.com to be processed. For further information regarding how Stripe use your information please read their privacy policy.
• Your card details will never be stored or processed by iVendi.
• When you complete a vehicle purchase using the Website, the retailer will retain its own records about the transaction, and we will keep a limited record of the transaction within your account for you to access.
• Each retailer will have its own privacy policy, which you should check (and make sure you are comfortable with) before sharing any personal data with that retailer.

Finance Data

When you search and/or apply for a finance product using the Website, we pass information about you, and the vehicle you intend to buy using that finance product, to the relevant finance product provider:

• We will share your name and contact details with the relevant provider.
• We will share other information with the provider that you provide to us for the purpose of processing your finance application.
• When you complete a finance application using the Website, the provider will retain its own records about the application, and we will keep a limited record of the application within your account for you to access.
• Each provider will have its own privacy policy, which you should check (and make sure you are comfortable with) before sharing any personal data with that provider.

Using your personal information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal obligation.

Generally, we do not rely on consent as a legal basis for processing your personal data, but we will make it clear to you if we need to. We will get your consent before sending third party direct marketing communications to you via email or text message; you have the right to withdraw consent to marketing at any time by contacting us.

Personal information submitted to us will be used as follows:

• To register you as a user of the Website.
• To administer your vehicle and finance product search, finance application and vehicle purchase.
• To create a record of the steps you have taken and the choices you made during your finance application.
• To reserve a vehicle via a retailer website.
• To communicate with you in relation to your finance application and the Website.
• To manage our relationship with you, including telling you about changes to this Privacy Policy, and asking you to give feedback and/or take surveys.
• To personalise your experience on the Website or websites which utilise the Website.
• To administer and protect our business and the Website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data).
• To deliver relevant Website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.
• To use data analytics to improve the Website, products/services, marketing, customer relationships and experiences.
• To make suggestions and recommendations to you about products and/ or services that may be of interest to you.
• To create anonymised demographic, statistical data. It will not be possible to identify you individually once the data has been anonymised. This data could be derived from your personal data but is not considered personal data in law as this data will notdirectly or indirectly reveal your identity. For example, we may aggregate your personal data to calculate the percentage of users accessing a specific Website feature. However, if we combine or connect this anonymised data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Policy.

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

We will not provide your personal information to any third parties for the purpose of direct marketing without your permission.

We try to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.

We may use your personal data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing). You will receive marketing communications from us if you have requested information from us or used the Website in certain ways, and you have not opted out of receiving that marketing.

We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.

You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you. Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of e.g. using your account or completing a transaction through the Website.

Sharing your personal information

We use vetted and approved technology vendors to provide our services, to the extent necessary for the performance of any contract we enter into with you. This includes companies providing the following services for the Website.

Please refer to our Cookie Policy for details of how we manage cookies and information tracking.

Note that we also provide your personal data to vehicles retailer and finance product providers that are relevant to how you use the Website. We do not control these third parties, and are not responsible for their privacy statements or processes. We encourage you to read the privacy policy of every third party you deal with using the Website.

Disclosures

We may be obliged to disclose your personal information:

• to the extent that we are required to do so by law;
• in connection with any legal proceedings or prospective legal proceedings;
• in order to establish, exercise or defend our legal rights, including providing information to others for the purposes of fraud prevention;
• due to a court order.

Except as provided in this Privacy Policy, we will not provide your personal data to third parties.

Security of your personal information

We will take reasonable technical and organisational precautions to protect any information we hold in our records from loss, misuse and unauthorised access, disclosure, alteration and destruction.

Data is stored in compliance with the UK/EU GDPR in secure data centres in the United Kingdom or European Economic Area or third country with an EU Adequacy Finding. All data is encrypted both when transmitted and when stored.

iVendi have successfully obtained certifications in the following:

• Cyber Essentials Plus
• ISO/IEC 27001
• ISO/IEC 20000
• ISO/IEC 9001

Policy amendments

We may update this Privacy Policy from time-to-time by posting a new version on the Website. You should check this page occasionally to ensure you are happy with any changes. Any changes will be compliant with current Data Protection Legislation.

Your rights

As a Data Subject (person whose personal data is processed under this policy) you have certain rights under current Data Protection Legislation, including:

Right to Access

You may instruct us to provide you with a copy of any personal information we hold about you.

Right to Rectification

You may request that incorrect personal information is corrected.

Right to Erasure

You may request that your personal data is erased where it is no longer needed for the purpose for which it was collected and another lawful basis for processing does not exists.

Right to object

You may object to processing of your personal data where legitimate grounds do not exist for processing.

Right to Restrict Processing

You may request that your personal data are not processed, rather than erased, where there are grounds to continue storing the data (e.g. for legal reasons or while a dispute is resolved) but you no longer wish your data to be processed.

Right to Transfer

You can request that we transfer your personal data to you or to a third party. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Right to Withdraw Consent

You can withdraw your consent where we are relying on it to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

Our Information Security and Compliance team will examine your request and respond to you as quickly as possible.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Data Retention Times

Your basic personal information (email account and contact details) will be retained for the length of time you choose to keep your NewVehicle.com account open.

Your card details will never be stored by iVendi.

The data retention period for all other data will depend on whether a finance application was paid out or not.

When a finance application is not paid out, all other associated data will be retained for a period of 12 months before being automatically removed.

When a finance application is paid out, data associated to the finance application and prior related activity will be retained for 12 years. This may seem like a long time, however, either party may have reason to question as to why something happened well after a finance or insurance product has ended. The Website will be able to provide information in the best interests of all parties.

Contact

If you have any questions about this Privacy Policy or our treatment of your personal data or wish to exercise your rights in relation to your personal data, please write to us by email to:

dpo@ivendi.com

Or by post to:

Data Protection Officer
iVendi Limited
Llys Eirias
Abergele Road
Colwyn Bay
LL29 8BW
Tel: 03452260503

If you remain dissatisfied with how we have handled your personal data, you may wish to contact the Information Commissioner’s Office by:

• Post: Customer Contact, Information Commissioners Officer, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
• Telephone: 0303 123 1113
• Visiting the ICO website: www.ico.org.uk

For EU citizens please contact our representative within the EU using the details below:

eurepresentative@ivendi.com

or by post to:

Beck Service GmbH
Mr. Hendrik Sievers
Ericusspitze 4
20457 Hamburg
Germany
Tel: +49 40 3010070

We last updated this privacy notice on 27^th February 2024. We keep this privacy policy under regular review and update it if any of the information changes.