We, Endeavour Automotive Ltd, take information security and data protection very seriously. We are committed to ensuring that your privacy is protected. This Privacy Statement describes how we use the personal data that we collect from you, or that you provide, when you:
The content of this statement may change from time to time so you may wish to check this page occasionally to ensure you are still happy to share your information with us. Where possible, we will also contact you directly should there be any material change in the terms within this statement.
The “Company” (referred to as the “Data Controller” in this statement)
Endeavour Automotive Limited (also referred to as "we", "us" and "our"), a company incorporated in England and Wales under registered number 08048653 and whose registered office is at The Hyde, Edgware Road, London, England, NW9 6NW.
For the purposes of the Data Protection Legislation, the Company is the data controller and this statement applies to all Endeavour Automotive UK legal entities and trading names including Regent Automotive Limited, Volvo Cars London and Vernon Haddock Cars Limited.
To contact us regarding any data or privacy matter, please either write to Marketing Department, Endeavour Automotive, The Hyde, Edgware Road, London, England, NW9 6NW or email firstname.lastname@example.org.
“Data Protection Legislation”
The General Data Protection Regulation 2016, any other directly applicable European Union regulations relating to privacy, and any data protection legislation from time to time in force in the UK including the Data Protection Act 2018 or any successor legislation.
Any company with which personal data is shared:
“Personal Data” or “Personal Information”
Any information relating to an identified or identifiable natural person.
Any website or online portal (including social media) operated by the Company through which personal data is captured.
Endeavour Automotive websites or portals may contain links to other websites outside of our group. Our Privacy Statement only applies to websites controlled by us. We are not responsible for the content, privacy or security of other websites. We encourage you to read the privacy notice of every website that you visit.Our website and services are not intended for children and we do not knowingly collect data relating to children.
What information do we collect?
We collect personal data from you when you use our websites, contact centre, at off-site events or when you visit one of our dealerships. We may also obtain information about your vehicle, and whilst some of this information does not identify you personally, it provides us with information about how you use our services and engage with us (we use this information to improve our services and make them more useful to you). The information we collect includes some or all of the following:
How is your Personal Data collected?
We use different methods to collect personal data about you, including:-
We do not collect any “special categories of Personal Data” about you (this include details about your race or ethnicity, religions or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic or biometric data).Nor do we collect any information about criminal convictions and offences.
Using Your Personal Information
There are various ways in which we may use or process your personal information, adhering to one or more of the following criteria:
Where you have provided your consent to at least one preferred contact method (direct mail, telephone, email, SMS), we may use and process your information to contact you from time to time about promotions, events, products, services or information which we think may be of interest to you.
We never share your personal information with third parties without ensuring you give your permission for us to send it to them.
Consent can be withdrawn freely and at any time by using the relevant unsubscribe features in our marketing messages, or by contacting customer services.
We may use and process your personal information where it is necessary for us to carry out activities for which it is in our legitimate interests as a business to do so. Examples include:
You have the right to object to us processing your information on Legitimate Interest grounds at any time by using the relevant unsubscribe features in our marketing messages, or by contacting customer services.
We may use and process your personal information to carry out our obligations arising from any contracts entered into between you and us (or one of our selected partners), including to manage payments, fees and charges and to collect and recover money owing to us.
We may use and process your personal information to comply with a legal obligation to which we are subject (for example to register your vehicle with the DVLA).
Safety & Security
We may use and process your personal information to contact you if there is any sort of product recall affecting the safety, security or performance of your vehicle or associated products.
Sharing Your Personal Information
The information you share with us will only be disclosed to relevant employees to be used for the relevant purpose stated above. We will not otherwise disclose your personal data to any third party unless one of the following applies:
External third parties with whom we may share data in the above circumstances include:-
Credit Reference Agencies
In order to process your application we will supply your personal information to one or more credit reference agencies (CRAs) and they will give us information about you, such as about your financial history.We do this to assess creditworthiness and product suitability, check your identity, manage your account, trace and recover debts and prevent criminal activity.
We will also continue to exchange information about you with CRAs on an ongoing basis, including about your settled accounts and any debts not fully repaid on time.CRAs will share your information with other organisations.Your data may also be linked to the data of your spouse, and joint applicants or other financial associates.
The identities of the CRAs, and the ways in which they use and share personal information, are explained in more detail at:
Call Credit / Equifax / Experian:
Managing Your Personal Information & Your Rights
You have a number of rights as an individual regarding the personal information we hold about you, which include:
For more information about these rights, please see the website of the Information Commissioner’s Office at ico.org.uk.
You can exercise the above rights and/or manage your information by contacting us using the details below:
Post: Marketing Department, Endeavour Automotive Ltd, The Hyde, Edgware Road, London NW9 6NW
Data Retention Policy
We will only hold your personal data for as long as it is necessary to fulfil the purpose it was collected for, or as required by law, or as set out in any relevant contract we have with you.
The only exceptions to the periods mentioned above are where the law requires us to hold your personal information for a longer period (or delete it sooner) or you exercise your right to have the information erased (where it applies) and we do not need to hold it in connection with any of the reasons permitted or required under the law
Please note, retaining your personal data is not the same as using your personal data, and for archive purposes we may retain your data for a longer period than we can use it depending on which element of the “Using your personal information?” criteria we use above.
The security of your personal data is of the utmost importance to us. We are committed to providing appropriate security controls to protect your personal information against foreseeable problems.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach when we are legally required to do so.
If you require more information about your personal data security provisions, please contact customer services and we will be able to supply a more technical overview.
Our website is powered by G-Forces Web Management Limited (“GForces”), our third party web services provider. GForces is committed to ensuring that data is processed in accordance with applicable data privacy laws, and is kept secure. GForces is certified to the standard of ISO27001 (an international standard for information security). GForces uses Amazon Web Services, Inc. as its cloud platform provider. All data processed by GForces is stored on Amazon’s web servers in the EEA.
When visiting our website
When you visit our website, GForces collects standard internet log information (your IP address, browser, and type of device) and details of visitor behaviour patterns (where you joined our site from, the path you take through our site and where you leave). These are stored against unique ids (which are strings of numbers). GForces collects this information for the legitimate business purpose of monitoring the number of visitors to the various parts of the site, the general geographic location of visitors and engagement levels, which in turn enables it to make improvements to its websites and services, and provide business intelligence. This information is only processed in a way which does not identify anyone. It is kept indefinitely.
GForces also uses Google Analytics to collect standard internet log information and details of visitor behaviour patterns, which are stored against unique ids (i.e. strings of numbers). GForces collect this information for the legitimate business purpose of monitoring website traffic and engagement levels, which in turn enables us to make improvements to our website and the way we sell our cars and services. This information is only processed in a way which does not identify anyone. It is kept indefinitely.
When using our enquiry forms
When you submit information using an online form, GForces processes the data collected and stores it for 31 days for the legitimate business purpose of enabling us to access the information and deal with your request (it is then kept for a further 14 days in GForces’ routine back-ups for business continuity purposes). If you enter your post code, GForces stores the first part of it (e.g. ‘ME14’ or ‘SW1’) and links it to standard internet log information already collected (it is used for the same purposes as that information, as outlined above).
When using our LiveChat serviceWe use a third party provider, LogMeIn Inc., to supply our LiveChat service. If you use the LiveChat service we will collect any personal information that you volunteer to us. This is used for the legitimate business purpose of handling customer enquiries in real time and then following up in order to resolve them. This data is stored for 30 days by LogMeIn Inc. to enable us to access the information and deal with your enquiry. LogMeIn stores the information in the US under the EU-US privacy shield framework.
We also use a third party provider, Call It Automotive Limited to support our LiveChat service. Personal information that you volunteer to us via the LiveChat service may be shared with Call It Automotive for the legitimate business purpose of assisting with the handling of customer enquiries and follow ups. Personal information will be stored by Call It Automotive for a maximum of 2 years to enable us to access the information and deal with your enquiry. Call It Automotive stores the information in the EEA.
Managing your cookie preferences
You can accept or decline certain types of cookies by modifying the settings in your browser. However, you may find that disabling cookies means certain areas of the site do not function correctly and we cannot guarantee access to all the services we provide through our website. Also, if you delete all of your cookies, or use a different device to access our website, you may have to choose your preferences again.
If you enter any of our websites but choose not to alter the cookie settings, we will take this to mean that you are happy with the default settings (which allow all types of cookies to be used).
You can find information on how to disable or enable cookies by visiting www.allaboutcookies.org.
Online Remarketing Advertising
We use online remarketing advertising (facilitated by portals including Google, Bing & Facebook) to display relevant ads tailored to you based on what parts of the Endeavour website you have viewed by placing a cookie on your machine. This Cookie does not in any way identify you or give access to your computer but instead tells our remarketing partners you might be interested in seeing adverts related to the page you visited. This enables us to only display ads that are relevant to you.
If you do not wish to receive remarketing adverts, you can opt out by visiting the relevant portal’s Ads Preferences Manager.
Call Recording Policy
We track activity via telephone calls into our business using third-party providers to improve our marketing processes. We track which sources are effective at helping visitors find our website and make calls to us. We use IP addresses, geo-location data, caller telephone number, and voice recordings.
Telephone calls into our businesses are used only for training and monitoring purposes. We also record dates and times of incoming and outgoing calls (together with identifiable telephone numbers) for the purposes of tracking call volumes and billing.
All telephone call recordings are deleted once they have been listened to and reviewed, and we have a process in place to ensure sensitive personal information is not recorded or stored.
Any voicemails left on our systems are automatically deleted once they are listened to and can only be accessed by a member of staff using a secure PIN number. Any personal information left on voicemails is your implied consent for us to store your data for as long as it takes for us to access the voicemail and subsequently delete it.
Changes to this privacy statement
We keep our privacy statement under regular review; the updates will appear on our website. Please check it each time you visit this website or provide us with any personal data.
We last updated this privacy statement in November 2018.
Feedback on this policy
If you are unhappy with the way in which we have collected or processed your personal data or have any other complaint in relation to our handling of your personal data you can make a complaint to the Information Commissioner’s Office (ICO), further information can be found on the ICO’s website at www.ico.org.uk, via their helpline on 0303 123 1113.We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.