Stratton Motor Company (Norfolk) Limited
Data Privacy Notice (DPN)
In summary, We process personal information to enable us to repair and sell machinery; maintain our accounts and records; advertise our services; provide financial services leads for the consumer and to support and manage our employees. We process personal information using a CCTV system to monitor and collect visual images for the purpose of security and the prevention and detection of crime.
What information do we collect and when?
- All information you choose to submit to us by signing up to offers, news or a competition, by sending us emails or texts, by adding posts to any of our websites, by completing feedback surveys, by interacting with us on social media, by speaking to us, by booking services, MOTs or workshop work with us or by enquiring about selling or purchasing a vehicle with us. We retain your personal details and if applicable, your family details, your employments details and your lifestyle details.
- Full details of the purchases you make from our website, from any third party website that we advertise on, from our showroom or over the telephone. These include the date and location of purchase; the things you buy from us; any vouchers, discounts or other alternative means of payment you may use, as well as relevant payment cards such as a credit or debit card.
- Information on what you view, click on and access in and through our marketing emails and websites. We may collect the time and geographic location of your device when you do so. For websites, this information may also include where you came to our outlet from, and where you went when you left it. We also track how often you visit and use our websites.
- Technical information about the devices you use to access our websites. We collect each device’s unique identifying codes (e.g. its “MAC” address), relevant IP address, operating system and version, web browser and version, and geographic location.
- Your social media content where this is in the public domain. This information can include posts and comments, pictures and video footage.
- Information collected independently by online advertising networks (for example Google) through whom we on occasion place advertisements. The information we obtain varies from network to network. It often summarises the actions of lots of people, and so does not enable us to identify you individually. It relates to what you view, click on, and access through websites in their network, including the subject matter of the site you started at and where you subsequently go. It may also include their analysis of your behaviour across the wider internet and a profile of you.
- Profile information and insight from organisations that already hold information on you, such as credit reference agencies and ‘customer insight companies’. They give us their views on your household, your status, as well as your possible preferences and behaviours.
How do we use your information?
We use the information we collect for many different things:
- To contact you from time to time about things you have told us you want to hear about, for example our company news, offers, new competitions, invitations to various events or functions, current stocklists, finance examples and relevant products.
- To inform you about significant dates, for example when your MOT is due or a service on your car.
- To enable us to run competitions and offers for which you have signed up.
- To gather feedback from you about our brand, websites or other services and activities from time to time. We may invite you to provide this feedback on occasion, for example by emailing you. We may use independent research and feedback providers to do so on our behalf.
- To respond to any questions, suggestions, issues or complaints you have raised.
- To respond to any social media posts or other public comments you make about us, our brand, websites, services or other activities.
- To perform any contract we have with you including to collect any debts we may be owed.
- To gather statistics about how you and other people use our workshop, showroom and websites, WIFI networks and what you think of our adverts, offers, news, competitions, social media and other digital content. We then analyse these statistics to understand if these things appear interesting and meet most people’s needs, or if they should be improved, and if so, what design or other changes (e.g. around the nature and timing of communications) would be most beneficial both for our customers and for our business.
- To monitor use of our websites to see if they are being abused or threatened.
- To protect you and our business against other potential criminal behaviour, e.g. fraud or ID theft.
- To understand you better and, in particular, your habits, where you are from time to time, your personal circumstances and those of your family or household, and the things you may like, dislike and be interested in. If we hold accurate information about you, we are better placed to send you tailored offers, news and information that we think you may be interested in.
- To maintain administrative and statutory records about our business
- To enable us and our third party service providers to plan and manage our day-to-day business and related services as effectively as possible, for example in predicting likely sales volumes so we can meet demand.
- To enable us to understand what our customer and user base looks like across all our businesses. We do this by combining your information with information about our other customers and users of our websites and our WIFI networks, so we can spot trends and common factors amongst everyone.
- To enable us to conduct focussed market research based on those trends and factors, which we can then use to further improve our products and services for all of our customers.
- In the process of anonymising your information so that you are no longer identifiable to us.
- To test new systems and processes as we roll them out (but generally only in anonymous form).
- To analyse whether the money we spend on marketing advertising, in paper advertising, billboards, online and in search engines represents good value for us or not.
We do so in part by matching information common to the various different sources of information we have about you, to build a bigger, richer picture.
How do we share your information?
We cannot run our business or provide many of the services and benefits you expect to receive without involving other people and businesses. We only share your information in accordance with the Data Protection Act 1998 and the GDPN.
We share the information we collect with:
- All of our group companies, including new ones we might acquire in the future. Our group portfolio of brands can be found here: https://www.strattonmotorcompany.com/sister-companies/
- Other people and businesses who help us provide our websites and related services to you, for example, information technology companies who design and host our websites, payment services companies who enable you to use credit or payment cards with us, and data insight specialists.
- Any new business partners we may have over time, for example if we enter into a joint venture, reorganisation, business merger or sale of part of our business, the other party may receive some or all of your information.
- Our professional advisors for example our lawyers, insurers and insurance brokers when they need it to provide advice to us or help us obtain insurance.
- The Police, local authorities, Her Majesty’s Revenue and Customs (HMRC), the Courts and any other central or local government bodieswhere they request it and we may lawfully disclose it, for example for the prevention and detection of crime.
- Other people who make a subject access request to us, where we are allowed to do so by law.
We also may share the information we collect where we are legally obliged to do so, for example e.g. to comply with a court order.
Is your information secure?
We take the security of your information very seriously. We comply with the Data Protection Act 2018 which is the UK’s implementation of the General Data Protection Regulation (GDPR). This requires us to have in place appropriate security measures at all times, including where and how we share your information with our suppliers and partners.
Everyone responsible for using personal data at Stratton Motor Company has to follow strict rules called ‘data protection principles’. They must make sure your information is:
- used fairly, lawfully and transparently
- used for specified, explicit purposes
- used in a way that is adequate, relevant and limited to only what is necessary
- accurate and, where necessary, kept up to date
- kept for no longer than is necessary
- handled in a way that ensures appropriate security, including protection against unlawful or unauthorised processing, access, loss, destruction or damage
Please take care of your own information.
How long do we keep your information for?
We keep your information for as long as necessary for the purposes set out above. This restriction is set by the Data Protection Act 2018. The precise length of time we hold your information for varies depending on the individual circumstances.
If you want to understand your information rights in full, please check out the website for the Office of the Information Commissioner at https://ico.org.uk/ The Information Commissioner regulates most UK data and information laws, including the Data Protection Act 2018, and make a wealth of user-friendly information available on their website.
If you want to talk to us about your rights, please feel free to get in touch. See the “About us” section below for our contact details.
Updates to this policy
We will need to update this policy from time to time as our business changes. We will endeavour to tell you in advance by sending a service message to you if we hold your email address. Otherwise, our website will hold the most up to date version. If you continue to use our services after we have changed our policy, we will take it that you accept the changes.
Stratton Motor Company (Norfolk) Limited. Our registered company number is 1060893 and our registered address is Rotherwood, Ipswich Road, Long Stratton, Norfolk, NR15 2XJ. We are registered with the Office of the Information Commissioner in the UK. Registration number: ZA176486.