1. Who We Are
AutoGanticHub Ltd ("we", "our", or "us") is a UK-based company providing digital tools and services for independent automotive businesses. We operate the website autogantichub.com and provide e-commerce websites and booking SaaS solutions.
Registered Company: AutoGanticHub Ltd
Registered Address: 123 Digital Quarter, Birmingham, West Midlands, B1 1AA, United Kingdom
Company Registration Number: 14892641
VAT Registration Number: GB 123 4567 89
Email: enquiries@autogantichub.com
2. About This Policy
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us. It complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We are committed to protecting your personal data and ensuring transparency in how we handle it.
3. What Personal Data We Collect
We may collect and process the following categories of personal data:
3.1 Information You Provide Directly
- Contact information: Name, email address, phone number, business name, and postal address
- Communication data: Messages you send us via forms, email, or chat
- Booking information: For our booking SaaS, this includes customer names, contact details, vehicle registration numbers (VRNs), and service preferences
- Transaction data: For e-commerce builds, this includes order details, delivery addresses, and payment information (processed by third-party payment providers)
3.2 Vehicle Registration Numbers (VRNs)
When our booking SaaS or client websites use DVLA lookup services to auto-populate vehicle information, we process VRNs. This data is:
- Used solely for the purpose of identifying the customer's vehicle to provide accurate service and parts information
- Processed in accordance with DVLA guidelines and applicable data protection laws
- Not retained beyond what is necessary for the service being provided
- Never shared with third parties for marketing purposes
3.3 Technical Data
When you visit our website, we automatically collect limited technical information including:
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent
- Referring website addresses
3.4 Marketing Preferences
We record your marketing consent preferences, including when and how you gave consent for us to contact you via email, phone, or messaging services.
4. How We Use Your Data
We use your personal data for the following purposes:
- To provide services: Processing enquiries, delivering our SaaS products, and managing bookings or orders
- To communicate with you: Responding to your enquiries, providing support, and sending service-related notices
- To improve our services: Analysing usage patterns to enhance user experience
- Marketing: Sending relevant updates about our services (only with your explicit consent)
- Legal obligations: Complying with applicable laws and regulations
5. Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases for processing your personal data:
- Contractual necessity: Processing necessary to perform our contract with you (e.g., delivering the services you request)
- Legitimate interests: Where processing is necessary for our legitimate business interests, provided these are not overridden by your rights
- Consent: Where you have given clear consent for specific processing activities, such as marketing communications
- Legal obligation: Where processing is required to comply with applicable laws
6. How We Share Your Data
We do not sell your personal data. We may share your information with:
- Service providers: Trusted third parties who help us operate our business, including hosting providers, email delivery services, and payment processors
- DVLA: For vehicle registration lookup services (in accordance with DVLA data sharing guidelines)
- Legal authorities: Where required by law, court order, or regulatory obligation
- Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements.
Typical retention periods:
- Enquiry and communication data: 2 years after last contact
- Booking and transaction data: 7 years (for financial record-keeping compliance)
- Marketing consent records: Until consent is withdrawn
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate personal data
- Right to erasure: Request deletion of your personal data (subject to legal retention requirements)
- Right to restrict processing: Request limitation of processing in certain circumstances
- Right to data portability: Receive your data in a structured, commonly used format
- Right to object: Object to processing based on legitimate interests or for direct marketing
- Rights related to automated decision-making: Not be subject to decisions based solely on automated processing with significant effects
To exercise any of these rights, please contact us at enquiries@autogantichub.com.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:
- Encrypted data transmission (SSL/TLS)
- Secure data storage with access controls
- Regular security assessments and updates
- Staff training on data protection
10. Cookies and Tracking
We use cookies and similar tracking technologies. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.
11. International Data Transfers
As a UK-based company, we primarily process data within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO.
12. Children's Privacy
Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children.
13. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
15. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
Email: enquiries@autogantichub.com
Post: AutoGanticHub Ltd, 123 Digital Quarter, Birmingham, West Midlands, B1 1AA, United Kingdom
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data properly. Visit ico.org.uk for more information.
