About this policy and our role
www.landrover.rockar.com and www.jaguar.rockar.com (the “Sites” and each a “Site”) are operated by Rockar 2 Limited (Registered No 10199857) (“Rockar”, “we” or “us”). Rockar is the data controller in respect of any personal data collected when you use the Site(s) and when you interact with us, whether online, in-store or by telephone. We operate through a number of companies within our group, which may process personal data on our behalf: Rockar 2016 Limited (Registered No 09969640) and Rockar Limited (Registered No 07890499). All our group companies are registered in England & Wales and their registered office is 1 Monckton Court, South Newbald Road, Newbald, East Yorkshire, YO43 4RW.
This policy sets out how we use and protect your personal information. We are committed to protecting your privacy and we only seek to obtain the bare minimum of information we need from you.
When and what personal information we collect and what we use it for?
Information we collect:
When you visit our Site(s), we will collect certain technical information about your visit, including your IP address, for administrative and statistical purposes and to help us improve our Site(s). You can find more information about the technical information we collect and how we do so in our Cookies Policy
We also collect demographic and profile data on our Site(s). This may be combined with other forms of information to permit us to bring together, in aggregate form, information about the people who use our Site(s). Such information will enable us to understand, in general terms, user preferences in relation to the content of the Site(s) and the effectiveness of the advertising.
Information you provide to us:
If you wish to save any details (e.g. your current car registration, the new car you’ve selected) you will need to create an account with us, but the only details we need are simply your name, email address, your login details and your marketing preferences.
You will appreciate that we need to gather more personal information from you when you wish to buy or test our products or services, or if you simply make an enquiry. The information we collect during our interactions with you for such purposes allows us to respond to your requests and provide our products and/or services to you. For example if you wish to book a test drive, in addition to your name and email address, we will ask you to provide your date of birth and the type of your driving licence. This additional information is necessary for us to establish your eligibility for a test drive. If you wish to purchase a car from us on finance, the amount of information we will need to collect will be significantly larger and will include information about your marital status, annual income, information about your credit cards, bank details etc., which will be necessary to arrange the financing of your purchase. In order to fulfil your order, we will also need to ask you to provide us a copy of your driving licence and potentially a proof of your address, which will allow us to verify your identity. In particular, if you choose to use one of the Rockar Car Happy Payment plans, your information will be passed to and used by finance companies for credit referencing purposes which will include a Credit Search.
Information we obtain indirectly:
Your personal information may be shared with us by third parties. For instance we may receive it from the car manufacturer, if you enquired directly with the manufacturer about the purchase of a car in the UK, or from our partners, for example if you request a call back or a test drive from us via such third party. We will use such information to respond to your request. We may also receive personal information about you from credit reference agencies if you purchase a car on finance from us.
In addition to the purposes mentioned above, we may also process your personal information to manage our business, including for accounting and auditing purposes, to conduct our regular reporting activities on the performance of our companies, including in the context of a business reorganisation or group restructure, to maintain our IT systems and manage hosting of our data, to deal with legal disputes involving you, the manufacturer and/or our suppliers, and to comply with our legal obligations
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
We are required to rely on one or more lawful grounds to collect and use the personal information that we have outlined above. The following are applicable, depending on the context
Where you have provided your consent for our use of your personal information in a certain way, for example where we ask for your consent to send you our newsletter.
Where the processing of your personal information is necessary for us to comply with a legal obligation to which we are subject.
Where it is necessary for us to process your personal information in order to perform a contract to which you are a party (or to take steps at your request prior to entering a contract), for example to provide our examination services to you.
We rely on this basis where applicable law allows us to collect and use personal information for our legitimate interests and the use of your personal information is fair, balanced, and does not unduly impact your rights. For instance, it is in our legitimate interest to process personal data of any person who contacts us with an enquiry, in order to respond to such enquiry.
Communications and marketing
We may, on occasion, collect additional personal information from surveys and contests, which you will be under no obligation fill in or return to us. The details you provide will enable us to provide information about our company to you and to contact you by email or text. We will only provide this when you indicate that you wish to receive further information from us on a regular basis.
We like to hear your views to help us improve our service. From time to time we may contact you by email to ask your opinions. If you do not want to be contacted for this purpose, please let us know using our contact details below.
Sharing your personal data
We will never pass your personal data to anyone else, except for any successors in title to our business and associated group companies or to suppliers that may process data on our behalf as part of providing a service to you – e.g. applying for finance and carry out credit checks, performing warranty and service work, insuring you to drive one of our cars. We may also need to share your personal information for auditing purposes, if we are under any legal obligations or in connection with any legal proceedings, in order to establish, exercise or defend our legal rights.
We will not sell your name, address, email address or other personal information about you or your car, but we cannot be held responsible for the actions of any third party sites from which you may have linked or been directed to the Rockar Site(s).
We are aware that certain countries outside the UK or European Economic Area (EEA) have a lower standard of protection for personal information, including security protections. As a result, we do not currently transfer and store any personal data outside the EEA. If in the future we decide to use suppliers based outside the EEA or who would require transfer of personal data outside the EEA, we will do so only if we can be satisfied that the recipient implements appropriate safeguards (as required by UK data protection laws) designed to protect your personal information.
Keeping your data secure
We take the security of your personal data seriously. We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.
When we transfer personal information to you, we will use password encryption techniques to ensure that information we email to you is secure
Any payment transaction will be encrypted.
While we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason, we cannot guarantee the security or integrity of any personal data that are transferred via the internet. If you have any particular concerns about your information, please contact us (see our contact details below).
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
How long do we keep your personal information?
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances, we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you. Once you are no longer our customer, we will retain and securely destroy your personal information in accordance with applicable laws and regulations.
If you have an account with us, it is important that the personal information we hold about you is accurate and current. Please let us know if your personal information changes during your relationship with us.
Under certain circumstances, by law, you have the right to:
- Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a confirmation from us as to whether we process any of your personal information or not, and if this is the case, to receive a copy of such personal information and to check that we are lawfully processing it.
- Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
- Request erasure of your personal information (often referred to as “the right to be forgotten”). This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
- Object to the processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object if we are processing your personal information for direct marketing purposes.
- Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example, if you want us to establish its accuracy or the reason for processing it, or if we no longer need your data for our legitimate interests but we need to hold some of it for the purpose of legal proceedings.
- Request the transfer of your personal information to another party.
If you would like to exercise any of the above rights, please:
- email, call or write to us (see our contact details below);
- let us have proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill). This is to allow us to verify your identity and prevent disclosure to unauthorised third parties; and
- let us know the details of your request, for example by specifying the personal data you want to access, the information that is incorrect and the information with which it should be replaced.
Contacting us or the ICO
You can email us: firstname.lastname@example.org
You can write to us at our registered office:- 1 Monckton Court, North Newbald, YO43 4RW
You can also contact the Information Commissioner’s Office on 0303 123 1113.