Introduction
Lawton Brook Limited (“Lawton Brook”) takes your privacy very seriously and will only use your personal information in accordance with current data protection legislation and this notice.
This notice sets out how any personal data we collect from you, or that you provide to us, will be processed by us. If you do not agree with the use of your personal information as set out below, please refrain from accessing or using our services. By proceeding with our services, you are deemed to have accepted the terms of this notice.
This notice has been prepared in accordance with the General Data Protection Regulation (GDPR) and Data Protection Act 2018 (DPA).
We reserve the right to amend this notice from time to time by publishing any amendments on our website (www.lawtonbrook.co.uk). Please check this page from time to time to take note of any changes we make.
What we do
Lawton Brook are suppliers of luxury, 4×4 and high performance vehicles. We supply cars and can introduce our customers to finance through several lenders via our sister company, Oracle Asset Finance Limited (“Oracle Finance”).
We are a data controller entered in to Information Commissioner’s Office (ICO) Register of Data Controllers. We hold and process your information for the purposes of our business.
For details about how Oracle Finance or our lenders use your personal information, please refer to their Privacy Notices.
Information we collect from you
We have a responsibility to protect our customers’ privacy while helping to find a car and tailor an appropriate finance package to our customers’ individual needs.
We collect data about you in a number of ways:
- via any application you make through our website;
- when you speak to us face to face or via telephone; and
- when you write to us by email or letter.
We may ask you for basic personal data, such as:
- your name;
- date of birth;
- current and previous addresses;
- employment details;
- banking details; and/or
- details of any financial associates or partners and their personal data if you are making a joint application.
Any information we collect is used in the process of helping supply a car and/or part of your finance application. We will not collect any unnecessary data.
If your finance application is accepted, we may ask you to provide documents such as your driving licence, proof of address, bank statements or payslips. By providing us with these documents, you are helping us to protect you from fraud.
It is your responsibility to provide us with accurate data and contact us if anything changes. We may verify any data you provide to us with other organisations and therefore incorrect data could cause delays in supplying your car or completing your finance application.
Lawton Brook are committed to providing you with the best possible service, we therefore monitor and record telephone calls for quality and training purposes. Recordings may also be used to help us combat fraud and money laundering.
How we use your information
Your data will be used in helping supply a car, complete a finance application, or to protect you from fraud. This includes:
- verifying your identity;
- detecting and preventing money laundering, fraud, or other crimes;
- ensuring compliance with legislation and regulation;
- resolving queries and complaints; and/or
- generally managing your account.
Any of these processes may be automated.
Once we pass your finance application to Oracle Finance and a potential lender, they will also use the data for the above purposes.
If you have provided us with your phone number, email address, or postal address, we may occasionally contact you about new cars, special events, offers, and products that may be of interest to you. This may be done over the phone, using email, text message, or letter. We will never pass on your details to a third party without your consent.
Sharing your information
We will share your data with Oracle Finance in order to progress your finance application. Oracle Finance may then share your data with a potential lender.
We may disclose or share your data, in good faith, if we are under a duty to comply with any legal or regulatory obligation, or to protect the rights, property, or safety of Lawton Brook’s staff, customers or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
We will never sell your information to another organisation.
Storing your information
The length of time we retain your data for will depend on the sort of data you provide and if you decide to proceed with a finance application.
The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (EEA). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers.
Any organisation outside the EEA that processes your data on our behalf is expected to adhere to the EU-US Privacy Shield Framework. We conduct checks on any organisation outside the EEA to make sure they adhere to these standards.
All information you provide to us is stored on our secure servers.
We cannot guarantee the security of your data input on our website and any transmission is at your own risk. Once we have received your data, we will use strict procedures and security features to try to prevent unauthorised access.
Your Rights
Lawton Brook have a legal and regulatory requirement to retain some of the data we have on customers. If you proceed with a finance application, we will retain your data in accordance with The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017.
If you would like the data we hold on you deleted, changed or restricted, please write to us at sales@lawtonbrook.co.uk – or using the other details at the bottom of this notice, and we will investigate your request and confirm what we are able to remove.
You have the right to request access to a copy of the data we hold on you at any time. You can also request that data is provided in a portable format – subject to a number of qualifying conditions. You can find out more by writing to sales@lawtonbrook.co.uk – or using the other details at the bottom of this notice. Repeat requests for copies of your data may incur a fee.
You have the right to opt out of receiving direct marketing from us at any time. You can do this by clicking the link on the footer of all our marketing emails, using the number provided on the marketing text message, by speaking to one of our staff on 0800 612 2707, or by emailing sales@lawtonbrook.co.uk.
Questions or Comments
If you have any questions, comments, or complaints about your rights, please contact the Risk & Compliance Manager by writing to sales@lawtonbrook.co.uk or calling 0800 612 2707.
You can also write to the following address:
Risk & Compliance Manager
Lawton Brook
Whitfield Business Park
Knaresborough
HG5 8BS
You can contact our supervisory authority for compliance with GDPR and DPA – the ICO:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113 (local rate) or 01625 545 700 (national rate)
Website: https://ico.org.uk
