Privacy Policy

Holden Group Privacy Policy – 2025

At Holden Group, we are committed to protecting and respecting your privacy. This privacy policy explains when and why we collect personal information about individuals who seek our services or visit our website, how we use it, the conditions under which we may disclose it to others, and how we keep it secure.

We may update this policy periodically, so please check our website for the latest version. By using our website, you agree to be bound by this policy.

If you have any questions regarding our privacy policy or the information we hold about you, please contact us:

Telephone: 01603 664411
Website: holdengroup.co.uk/data-contact
Address:
GDPR Data Controller
Holden Group
22 Heigham Street
Norwich

NR2 4TF

What Do We Mean by Your ‘Personal Data’?

Personal data refers to any information that identifies you directly or indirectly. This includes, but is not limited to:

• Name, title, date of birth, gender, nationality, marital status, contact details, and addresses.
• Vehicle registration number, dates and types of ownership, renewal dates, and MOT dates.
• Employment information, including salary, bonus schemes, and other benefits.
• Bank account details, tax information, credit history, and financial commitments.

We may collect, store, and use this data as part of our legitimate business operations, in compliance with UK GDPR and the Data Protection Act 2018.

Special Category Personal Data

Holden Group does not typically collect sensitive personal data. However, if required (e.g., to verify eligibility for zero-rated VAT due to disability), we will request explicit consent before processing this data.

How Do We Collect Your Personal Data?

We collect your data in various ways, including:

• When you visit our website, use live chat, or submit an enquiry form.
• Through direct communication via phone, email, or in person.
• From third-party service providers advertising our products or services.
• Via cookies and other tracking technologies that monitor website usage.
• Through electronic ID verification checks (no consent required for identity verification under legal obligations).

Why Do We Collect and Use Your Personal Data?

We collect personal data to:

• Fulfil contractual obligations and provide services you request.
• Meet legal and regulatory obligations.
• Improve user experience on our website.
• Conduct marketing activities, subject to your consent.

If we process Special Category Data, we will obtain explicit consent before proceeding.

How Will We Use Your Personal Data?

We process your data to:

• Provide requested services (e.g., vehicle sales, aftersales, and customer support).
• Respond to enquiries and process transactions.
• Send you relevant marketing communications, if opted in.
• Improve our products, services, and customer experience.
• Ensure compliance with financial and legal requirements.

We do not sell or share your data with third parties for marketing purposes without your consent.

Who Do We Share Your Information With?

We may share your personal data with:

• Financial institutions for payment processing.
• Regulatory authorities where required by law.
• IT service providers who support our business operations.
• Manufacturer partners (e.g., Renault UK, Dacia UK) where necessary for vehicle-related services.

All third parties are bound by contractual obligations to ensure the security of your data.

Security Precautions

We have implemented technical and organisational measures to protect your data from loss, misuse, and unauthorised access. This includes:

• Secure servers and encryption technologies.
• Access controls and authentication protocols.
• Regular security audits and staff training.

Data Transfers Outside the UK & EU

In cases where data is transferred outside the UK or EU, we ensure adequate safeguards are in place to comply with UK GDPR. This may include Standard Contractual Clauses or other approved mechanisms.

Data Retention Policy

We will retain your personal data only for as long as necessary for the purposes outlined in this policy, in compliance with UK GDPR. Retention periods are determined based on legal obligations and business needs.

Your Rights Under UK GDPR

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete information.
• Request erasure (‘right to be forgotten’), subject to legal constraints.
• Restrict processing under certain conditions.
• Object to processing for direct marketing purposes.
• Data portability, where applicable.
• Withdraw consent where processing is based on consent.

To exercise your rights, please contact us at holdengroup.co.uk/data-contact.

Marketing Preferences

We will only send you marketing communications if you have opted in. You can withdraw consent at any time by:

• Clicking the ‘unsubscribe’ link in our emails.
• Updating your preferences via our website.
• Contacting us directly.

Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. Please review their privacy policies separately.

Complaints & Contact Information

If you are unhappy with how we process your personal data, you have the right to lodge a complaint with the UK’s Information Commissioner’s Office (ICO):

Website: www.ico.org.uk
Helpline: 0303 123 1113

Alternatively, contact us directly to resolve any concerns.

Changes to This Privacy Policy

We may update this policy periodically. The latest version will always be available on our website. If significant changes are made, we will notify you through appropriate channels.

Last updated: March 2025

Data Request Form