Privacy & Cookie Policy


A cookie is a piece of data stored on the user’s hard drive while they are visiting a particular website. It contains simple information about the user’s identity but no personal information. The benefit of using cookies is that it allows us to monitor website traffic and record user’s preferences. Lawton Brook acknowledges and complies with the recent changes to the rules and regulations in regards to using cookies and similar technologies for storing information. Lawton Brook will ensure that the use of cookies is managed in accordance with national and legal guidelines, such as those that require the consent of website visitors for their use.

The cookies used on the Lawton Brook website include:

_utma – Used by Google Analytics to identify unique visitors v returning visitors
_utmb – Used by Google Analytics for generally visitor tracking. This cookie takes a timestamp of the exact moment in time when a visitor enters a site
_utmc – Used by Google Analytics for generally visitor tracking. This cookie takes a timestamp of the exact moment in time when a visitor leaves a site
_utmz – Used by Google Analytics for tracking source visits (i.e. where the user came from)

Google Analytics

We use Google Analytics (which uses cookies), the world’s most widely used website analytics service, to analyse the way people use our website, and help us improve user experience.

For more information see Google’s privacy policy, details of Google Analytics, and how to opt out of being tracked by Google Analytics.

Privacy Notice


Lawton Brook Limited (“Lawton Brook”) takes your privacy very seriously and will only use your personal information in accordance with current data protection legislation and this notice.

This notice sets out how any personal data we collect from you, or that you provide to us, will be processed by us. If you do not agree with the use of your personal information as set out below, please refrain from accessing or using our services. By proceeding with our services, you are deemed to have accepted the terms of this notice.

This notice has been prepared in accordance with the General Data Protection Regulation (GDPR) and Data Protection Act 2018 (DPA).

We reserve the right to amend this notice from time to time by publishing any amendments on our website ( Please check this page from time to time to take note of any changes we make.

What we do

Lawton Brook are suppliers of luxury, 4×4 and high performance vehicles. We supply cars and can introduce our customers to finance through several lenders via our sister company, Oracle Asset Finance Limited (“Oracle Finance”).

We are a data controller entered in to Information Commissioner’s Office (ICO) Register of Data Controllers. We hold and process your information for the purposes of our business.

For details about how Oracle Finance or our lenders use your personal information, please refer to their Privacy Notices.

Information we collect from you

We have a responsibility to protect our customers’ privacy while helping to find a car and tailor an appropriate finance package to our customers’ individual needs.

We collect data about you in a number of ways:

  • via any application you make through our website;
  • when you speak to us face to face or via telephone; and
  • when you write to us by email or letter.

We may ask you for basic personal data, such as:

  • your name;
  • date of birth;
  • current and previous addresses;
  • employment details;
  • banking details; and/or
  • details of any financial associates or partners and their personal data if you are making a joint application.

Any information we collect is used in the process of helping supply a car and/or part of your finance application. We will not collect any unnecessary data.

If your finance application is accepted, we may ask you to provide documents such as your driving licence, proof of address, bank statements or payslips. By providing us with these documents, you are helping us to protect you from fraud.

It is your responsibility to provide us with accurate data and contact us if anything changes. We may verify any data you provide to us with other organisations and therefore incorrect data could cause delays in supplying your car or completing your finance application.

Lawton Brook are committed to providing you with the best possible service, we therefore monitor and record telephone calls for quality and training purposes. Recordings may also be used to help us combat fraud and money laundering.

How we use your information

Your data will be used in helping supply a car, complete a finance application, or to protect you from fraud. This includes:

  • verifying your identity;
  • detecting and preventing money laundering, fraud, or other crimes;
  • ensuring compliance with legislation and regulation;
  • resolving queries and complaints; and/or
  • generally managing your account.

Any of these processes may be automated.

Once we pass your finance application to Oracle Finance and a potential lender, they will also use the data for the above purposes.

If you have provided us with your phone number, email address, or postal address, we may occasionally contact you about new cars, special events, offers, and products that may be of interest to you. This may be done over the phone, using email, text message, or letter. We will never pass on your details to a third party without your consent.

Sharing your information

We will share your data with Oracle Finance in order to progress your finance application. Oracle Finance may then share your data with a potential lender.

We may disclose or share your data, in good faith, if we are under a duty to comply with any legal or regulatory obligation, or to protect the rights, property, or safety of Lawton Brook’s staff, customers or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

We will never sell your information to another organisation.

Storing your information

The length of time we retain your data for will depend on the sort of data you provide and if you decide to proceed with a finance application.

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (EEA). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers.

Any organisation outside the EEA that processes your data on our behalf is expected to adhere to the EU-US Privacy Shield Framework. We conduct checks on any organisation outside the EEA to make sure they adhere to these standards.

All information you provide to us is stored on our secure servers.

We cannot guarantee the security of your data input on our website and any transmission is at your own risk. Once we have received your data, we will use strict procedures and security features to try to prevent unauthorised access.

Your Rights

Lawton Brook have a legal and regulatory requirement to retain some of the data we have on customers. If you proceed with a finance application, we will retain your data in accordance with The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017.

If you would like the data we hold on you deleted, changed or restricted, please write to us at – or using the other details at the bottom of this notice, and we will investigate your request and confirm what we are able to remove.

You have the right to request access to a copy of the data we hold on you at any time. You can also request that data is provided in a portable format – subject to a number of qualifying conditions. You can find out more by writing to – or using the other details at the bottom of this notice. Repeat requests for copies of your data may incur a fee.

You have the right to opt out of receiving direct marketing from us at any time. You can do this by clicking the link on the footer of all our marketing emails, using the number provided on the marketing text message, by speaking to one of our staff on 0800 612 2707, or by emailing

Questions or Comments

If you have any questions, comments, or complaints about your rights, please contact the Risk & Compliance Manager by writing to or calling 0800 612 2707.

You can also write to the following address:

Risk & Compliance Manager
Lawton Brook
Whitfield Business Park

You can contact our supervisory authority for compliance with GDPR and DPA – the ICO:

Information Commissioner’s Office

Wycliffe House
Water Lane

Telephone: 0303 123 1113 (local rate) or 01625 545 700 (national rate)