Privacy Policy

Carnet Dealership Website Privacy Notice (UK)

This Privacy Notice explains how we collect, use, store and share your personal data when you interact with our dealership website, contact us, or enquire about vehicles or services.

We are committed to protecting your personal information and complying with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

This dealership website is operated by:

Carnet
Unit 11, Boundary Avenue
Lufton Trading Estate, Lufton
Yeovil
Somerset
BA22 8UU
United Kingdom

Carnet is the data controller for the personal information collected through this website.

If you have any questions about this notice or wish to exercise your rights, you can contact us at:

Email: carnetuk@gmail.com

2. Personal Data We Collect

We may collect and use the following types of personal information:

Contact and Identity Information

• Name, title

• Email address, telephone number

• Postal address (if provided)

Vehicle and Enquiry Information

• Vehicle details you enquire about

• Part exchange details (if applicable)

• Preferences relating to vehicles or services

Finance and Insurance Related Information (where applicable)

• Information needed to support finance or insurance enquiries

• Basic affordability or eligibility information

Website and Technical Data

• IP address

• Browser type and device information

• Cookies and usage data (see Cookie Policy)

Communications

• Records of emails, calls, online forms or messages sent to us

We will make it clear where providing information is optional. Some information is necessary to respond to enquiries or provide services.

3. Where We Get Your Data From

We collect personal data from:

• You directly (forms, calls, emails, enquiries)

• Your use of our website

• Finance providers or brokers (if you apply for finance)

• Third-party service providers supporting our operations

4. How We Use Your Personal Data (Lawful Bases)

Under UK GDPR, we must have a lawful basis for processing your personal data.

A. To Provide Services and Respond to Enquiries (Contract / Steps Before Contract)

We process your data to:

• Respond to vehicle enquiries

• Arrange test drives or appointments

• Provide quotations

• Support finance or insurance requests

B. For Our Legitimate Interests

We may use your data to:

• Improve our services and website

• Maintain business records

• Prevent fraud and protect security

• Train staff and ensure quality service

• Understand customer preferences

C. To Comply With Legal Obligations

We may process your information to meet obligations under:

• Consumer law

• Financial regulations (where applicable)

• HMRC or other regulatory requirements

D. Marketing (Consent or Legitimate Interests)

We may contact you with relevant offers by email, SMS or phone where permitted by law.

You can opt out at any time.

5. Sharing Your Personal Data

We may share your personal data with trusted third parties where necessary, including:

• Finance companies and lenders (if you request finance)

• Insurance providers (if applicable)

• Vehicle valuation or part-exchange partners

• IT and website hosting providers

• Professional advisers (accountants, legal advisers)

• Regulators, law enforcement or government bodies where required

We do not sell your personal information.

6. International Transfers

Your personal data is normally processed in the UK.

If any service provider transfers data outside the UK, we ensure appropriate safeguards are in place, such as:

• UK International Data Transfer Agreements

• Adequacy regulations

7. Automated Decision-Making

We do not make decisions about you solely by automated means that produce legal or similarly significant effects.

(If finance providers do, they will provide their own notices.)

8. Monitoring Communications

We may monitor or record communications (calls, emails) for:

• Training and quality purposes

• Fraud prevention

• Regulatory compliance

9. Data Retention

We will keep your personal data only for as long as necessary, including:

• While dealing with your enquiry

• For legal or regulatory record keeping

• For the period during which claims could arise

Retention periods vary depending on the purpose.

10. Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access your personal data

• Correct inaccurate information

• Request deletion (in certain circumstances)

• Restrict processing

• Object to processing (especially marketing)

• Data portability

• Withdraw consent at any time

You may also complain to the Information Commissioner’s Office (ICO):

Website: https://www.ico.org.uk

11. Your Right to Object

You have the right to object to processing based on legitimate interests, and you can always object to direct marketing.

To do so, contact:

Email: carnetuk@gmail.com

12. Changes to This Privacy Notice

We may update this notice from time to time to reflect legal or operational changes. The latest version will always appear on this page.

13. Contact Us

If you have any questions or wish to exercise your rights, please contact:

Carnet
Unit 11, Boundary Avenue
Lufton Trading Estate, Lufton
Yeovil
Somerset
BA22 8UU
United Kingdom

Email: carnetuk@gmail.com