Privacy Policy
Privacy Policy
Updated 4th October 2021
This Privacy Policy sets out how we, Automatic Drive process your information when you interact with us through our website or telephone, engage with our products and services, or where we otherwise obtain or collect information about you.
This Privacy Policy was last updated on 10 October 2021.
Summary
- Data controller: Automatic Drive.
- How we collect information:
- when you provide it to us by contacting us, placing an order, completing registration forms, or signing up for content such as newsletters.
- from your use of our website, using cookies and
- from third parties such as business information databases.
- What information we collect: name, contact details, IP address, cookies, device and browser, information about how you use our website, company or business name, VAT number, your job, company type, transaction history.
- How we use your information: to contact you and process orders you place, to improve our business, to fulfil our contractual obligations, to market our services and to meet other legal rights and obligations.
- Who we share your information with: information is shared with service providers only to the extent necessary to run our business, to fulfil any contracts we enter with you and where required by law or to enforce our legal rights. We do not sell your information to any third parties.
- How long we retain your information: for only as long as necessary to meet the purpose we collected it for, including legal obligations, tax compliance, or any other legal basis we have for using your information including consent, performance of a contract with you or our legitimate interests.
- How we secure your information: using appropriate technical and organisational measures such as storing your information on secure servers, encrypting transfers of data to or from our servers using SSL, use of secure third party payment providers, and only granting access to your information where necessary.
- How we use cookies: we use cookies and similar information-gathering technologies such as marketing automation tracking on our website including essential, functional, analytical, and targeting cookies. For more information, please visit our cookie policy here: https://www.automaticdrive.co.uk/cookie-policy
- How we use profiling: we use web and marketing analytics to improve our services and to deliver tailored online user experiences.
- Your information rights:
- to access your information
- to receive information about its use
- to have your information corrected or deleted
- to restrict the use of your information
- to receive your information in a portable format
- to object to the use of your information
- to withdraw your consent to the use of your information
- to complain to a supervisory authority
- Sensitive personal information: we do not knowingly collect sensitive personal information. Please do not submit sensitive personal information to us.
- Change of purpose: in the event we wish or need to use your information for a purpose that is different from the purposes for which we originally collected it, we will obtain your prior consent
Contact details
If you have questions about this Privacy Policy, please contact the data controller by writing to our Data Protection Officer, 37 Riplingham, Arlington Avenue, Leamington Spa, Warwickshire. CV32 5UQ or by email at info@automaticdrive.co.uk
You have the right to make a complaint at any time to the Information Commissioner’s Office. We would appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance and we will do our best to resolve any concerns.
If equipment needs service or repair, we will ask for contact details for our engineers to use when they report to site.
How we use the information
We may use your information to:
• Carry out our obligations arising from any contract between you and us
• To keep you informed about transactional information such as deliveries, collections, and engineer visits
• To keep you informed about changes to our services
If you do not provide the necessary data
If you do not provide the data required for us to supply equipment to your business safely and effectively, then we may not be able to supply hire services to your business.
Legal basis for processing: our legitimate interests under Article 6(1)(f) of the General Data Protection Regulations, in responding to enquiries and messages we receive and keeping records of correspondence.
Legal basis for processing: necessary to perform a contract or to take steps to enter a contract under Article 6(1)(b) of the General Data Protection Regulations.
Driving Lessons
We collect personal information during enquiries, bookings, driving lesson delivery and other activities relating to our training.
How we collect information
We obtain information about you when you enquire about, book or attend our driving lessons. This may be through our website, by email or phone.
The information that we collect
When booking training services or enquiring about driving lesson, we ask for your name, postal address, phone number, email address. This helps us to process your booking, to contact you if we have any problems with your request or to send you an electronic confirmation of any quotes obtained, or bookings made.
How we use the information
We may use your information to:
• Carry out our obligations arising from any contract between you and us
• To provide training though formal accreditation
• To keep you informed about changes to our services
Legal basis for processing: our legitimate interests under Article 6(1)(f) of the General Data Protection Regulations, in responding to enquiries and messages we receive and keeping records of correspondence.
Legal basis for processing: necessary to perform a contract or to take steps to enter a contract under Article 6(1)(b) of the General Data Protection Regulations.
Website visitors
We collect and use personal information from visitors to our websites.
Our web servers log your IP address as well as information about your visit such as the pages accessed, information requested, the date and time of the request, the referring source, your browser, and operating system. Our web servers are in the United Kingdom. We collect and store server logs to ensure network and IT security. This includes analysis to prevent and detect unauthorised access, malware and viruses, denial of service attacks and other cyber-attacks.
Unless you register or login to our services or in the unlikely event that we were investigating suspicious or potential criminal activity, we do not attempt to identify you from the information collected via server logs.
Our websites include links to third party websites including social media and web services whose privacy policies may differ from ours. If you submit personal information to third party websites, your information is governed by their privacy policies.
Legal basis for processing: compliance with a legal obligation under Article 6(1)(c) of the General Data Protection Regulations. We have an obligation to implement technical and organisational measures to ensure a level of security appropriate to the risk of our processing of information about individuals.
Legal basis for processing: our legitimate interests under Article 6(1)(f) of the General Data Protection Regulations. We have a legitimate interest in using your information for the purposes of ensuring network and information security.
Website analytics
We use the information collected by our server logs to analyse how our website users interact with our website and its features. For example, we analyse the number of visits and unique visitors we receive, the time and date of the visit, the location of the visit and the operating system and browser use. We use the information gathered from the analysis of this information to improve our website.
Legal basis for processing: our legitimate interests under Article 6(1)(f) of the General Data Protection Regulations, in improving our website for our website users and getting to know our website user preferences so our website can better meet their needs and desires.
Web cookies
Cookies are data files which are sent from a website to a browser to record information about users for various purposes. We use cookies on our website, including essential, functional, analytical, and targeting cookies. For further information, please see our cookie policy which is available at https://automaticdrive.co.uk/cookie-policy
You can reject some or all of the cookies we use on our website by changing your browser settings or another cookie control tool. Doing so can impair your ability to use our website or some or all of its features.
When you send an email to an email address displayed on our website or to one of our generic or individual email accounts, we collect your email address and any other information you provide in that email. That may include your name, company, telephone number, address, and other information in your email signature.
Legal basis for processing: our legitimate interests under Article 6(1)(f) of the General Data Protection Regulations, in responding to enquiries and messages we receive and keeping records of correspondence.
Legal basis for processing: necessary to perform a contract or to take steps at your request to enter a contract under Article 6(1)(b) of the General Data Protection Regulations. Where your message relates to us providing you with goods or services, providing you with information about such goods and services, or taking steps prior to providing you with our goods and services, we will process your information to do so.
Enquiry forms
When you contact us via enquiry form, we collect your personal information and match this to any information we hold about you on record. Personal information may include your name, company, email address, and phone number. We may record the time and date of your contact. We may use this information for the purposes of any follow up sales and marketing communications that you request.
If you do not complete the mandatory fields on our contact form, you will not be able to submit the contact form and we will not receive your enquiry.
Legal basis for processing: our legitimate interests under Article 6(1)(f) of the General Data Protection Regulations, in responding to enquiries and messages we receive and keeping records of correspondence.
Phone
When you call us, we collect your phone number and any information provided to us during your conversation with us. We may record customer-facing phone calls for training and customer service purposes.
Legal basis for processing: our legitimate interests under Article 6(1)(f) of the General Data Protection Regulations, in responding to enquiries and messages we receive and keeping records of correspondence. It is necessary to perform a contract or to take steps to enter a contract under Article 6(1)(b) of the General Data Protection Regulations. Where your message relates to us providing you with goods or services or taking steps at your request prior to providing you with our goods and services, such as, information about our goods and services, we will process your information to do so.
Post
When you contact us by post, we may collect personal information that you provide to us in any documents you send by post.
Legal basis for processing: our legitimate interests under Article 6(1)(f) of the General Data Protection Regulations, in responding to enquiries and messages we receive and keeping records of correspondence.
Legal basis for processing: necessary to perform a contract or to take steps at your request to enter a contract under Article 6(1)(b) of the General Data Protection Regulations. Where your message relates to us providing you with goods or services or taking steps at your request prior to providing you with our goods and service, such as providing you with information about such goods and services, we will process your information to do so.
Registered website users
When you register and create an account on our websites, we collect the following information: your name, company name, email address, location, job function and company type. You may also be asked for optional information such as your phone number or social media details. We will also record the time and date of completion.
If you do not provide the mandatory information required by the registration form, you will not be able to register or create an account on our website.
Legal basis for processing: our legitimate interests under Article 6(1)(f) of the General Data Protection Regulations, in registering and administering accounts on our website to provide access to content, allows you to buy goods and services and facilitates the running and operation of our business.
We may use this information to tailor any follow up sales and marketing communications with you. Information you submit to us via the registration form on our website will be stored within the European Economic Area on our third-party hosting provider’s servers. Our third-party hosting provider is Hosting.co.uk.
Website orders
We collect and use information from individuals representing businesses, who place an order on our website.
Mandatory information
When you place an order for goods or services on our website, we collect your name, email address, invoice address
If you do not provide this information, you will not be able to purchase goods or services from us on our website or enter a contract with us.
Legal basis for processing: compliance with a legal obligation under Article 6(1)(c) of the General Data Protection Regulations. We have a legal obligation to issue you with an invoice for the goods and services you purchase from us where you are VAT registered and we require the mandatory information collected by our checkout form for this purpose. We have a legal obligation to keep accounting and taxation records.
Legal basis for processing: our legitimate interests under Article 6(1)(f) of the General Data Protection Regulations, in providing adequate customer service and management of your customer account.
Payment processing
After you place an order on our website, you will need to make payment for the goods or services.
Your payment will be processed by third party payment processors, Stripe. They process your information, including payment information, in accordance with their privacy policies. You can access Stripe’s privacy policy here: https://stripe.com/gb/privacy.
Legal basis for processing: necessary to perform a contract under Article 6(1)(b) of the General Data Protection Regulations, to fulfil your contractual obligation to pay for the goods or services you have ordered from us.
Marketing communications
When enquiring about or booking driving lessons, registering on our website, or signing up for content or an event, we may use the information you provide to contact you regarding our products and services. You may also have given consent to a third party provider to supply your personal information to us.
The information that we collect
When you are booking or enquiring about hire services, other products and services, we collect personal data including your name, job title, address, phone number, email address, delegate names and contact details. This helps us to process and respond your request, enquiry or booking. We may send you marketing communications in relation to similar goods and services if you have requested or opted in to receiving them.
You can opt-out from receiving marketing communications on the unsubscribe link on a marketing email sent to you or at any time by contacting info@automaticdrive.co.uk
If you opt-out of marketing communications, we will retain your personal data to the extent required to ensure that we comply with your opt-out by not contacting you again.
Legal basis for processing: your consent or our legitimate interests under Article 6(1)(f) of the General Data Protection Regulation. Our legitimate interests are sharing relevant, timely and industry-specific information on related business services, to assist your business to grow.
Disclosure of your information
We may disclose personal information about you to third parties in limited circumstances.
Disclosure to service providers
In common with most businesses, we use third party service providers to deliver services which are necessary to run our business. For example, IT service providers. Our third party service providers are located in the European Economic Area. Your information will be shared with these service providers where necessary to provide you with the products, services, or other activities that you have requested.
Legal basis for processing: legitimate interests under Article 6(1)(f) of the General Data Protection Regulations. Where we share your information with these third parties in a context other than where is necessary to perform a contract, we will share your information with such third parties to allow us to run and manage our business efficiently.
Legal basis for processing: necessary to perform a contract and/or to take steps at your request prior to entering a contract (Article 6(1)(b) of the General Data Protection Regulation).
Disclosure for legal reasons
For legal or regulatory compliance
We may use your personal information to comply with legal obligations or regulatory requirements.
Legal basis for processing: compliance with a legal obligation under Article 6(1)(c) of the General Data Protection Regulations.
Reporting criminal acts
If we suspect that a crime may have been committed, we may need to contact the police or another official body. In the unlikely event this was the case, we will only process your information if you were involved or affected by such an event.
Legal basis for processing: our legitimate interests under Article 6(1)(f) of the General Data Protection Regulations, in preventing crime or suspected criminal activity.
Enforcing our legal rights
We may use your personal information for the enforcement of our legal rights, for example, sharing information with debt collectors if you do not pay amounts owed to us when you are contractually obliged to do so.
Legal basis for processing: our legitimate interests under Article 6(1)(f) of the General Data Protection Regulations, in enforcing our legal rights and taking steps to enforce our legal rights.
During a legal dispute or litigation
We may use your personal information if we are involved in a dispute with you or a third party to resolve the dispute or as part of a mediation or similar process.
Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation), in resolving disputes and potential disputes.
Transmission of information by email
Transmission of information over the internet is not entirely secure, and if you submit any information to us over the internet, whether by email, our website, or other means, you do so at your own risk.
We do not take responsibility for any costs, expenses, loss of profits, harm to reputation, damages, liabilities or any other form of loss or damage suffered by you because of your decision to transmit information to us over the internet.
Your rights in relation to your information
You have the following rights in relation to your information. You can exercise these rights by writing to the data controller using the details provided at the top of this policy.
- to request access to your information and information related to our use and processing of your information
- to request the correction or deletion of your information
- to request that we restrict our use of your information
- to receive information which you have provided to us in a structured, commonly used, and machine-readable format (for example, a CSV file) and the right to have that information transferred to another data controller including a third party data controller
- to object to the processing of your information for certain purposes
- to withdraw your consent to our use of your information at any time where we rely on your consent to use or process that information. If you withdraw your consent, this will not affect the lawfulness of our use and processing of your information based on your consent before you withdraw your consent
- the right to lodge a complaint with a supervisory authority. In the UK, the supervisory authority is the Information Commissioner’s Office: https://ico.org.uk/global/contact-us/
- to object to us processing your information for our legitimate interests
- to object to us processing your information for direct marketing
The above list of rights is a summary. Some limitations apply to these rights. For further information, please visit https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
Verifying your identity if you request access to your information
If you request access to your information via a Data Subject Access Request, we are required by law to use all reasonable measures to verify your identity before doing so.
These measures are designed to protect your information and to reduce the risk of identity fraud, identity theft or general unauthorised access to your information.