Website Data Protection Policy for Auto Assist Group

Introduction

Auto Assist Group (hereinafter referred to as “the Company”) is committed to protecting the privacy and personal data of individuals in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018, and other applicable UK data protection laws. This Website Data Protection Policy outlines the measures implemented by the Company to ensure compliance with data protection laws and to safeguard the rights and freedoms of website visitors and users.

Data Collection and Processing

2.1 Personal Data

The Company collects and processes personal data through its website for specified and legitimate purposes. Personal data may include but is not limited to, names, contact details, and any other information voluntarily provided by website visitors and users.

2.2 Lawful Bases for Processing

The Company processes personal data on the following lawful bases:

2.2.1 Consent: 

The Company may process personal data based on the explicit consent provided by the website visitor or user.

2.2.2 Contractual Necessity: 

If the processing of personal data is necessary for the performance of a contract with the website visitor or user, the Company may process such data.

2.2.3 Legal Obligation:

The Company may process personal data to comply with legal obligations imposed on the Company.

2.2.4 Legitimate Interests: 

The Company may process personal data based on its legitimate interests, provided that such interests are not overridden by the rights and freedoms of the individuals.

Purpose and Use of Personal Data

• The personal data collected through the website is used for the following purposes:
• To provide information, products, or services requested by website visitors or users.
• To respond to inquiries or communications received through the website.
• To process and fulfill orders or transactions made through the website.
• To improve the website’s functionality, user experience, and content.
• To communicate with website visitors or users about updates, promotions, and relevant information related to the Company’s products or services.
• To comply with legal obligations or as otherwise required or permitted by applicable law.

Data Security

The Company implements appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of personal data during transmission, where appropriate.
• Implementation of access controls to restrict access to personal data to authorized individuals on a need-to-know basis.
• Regular review of user access rights and revocation when no longer necessary.
• Data minimization, ensuring that only necessary personal data is collected and retained.
• Implementation of procedures to detect, report, and investigate any personal data breaches. In the event of a breach, affected individuals will be notified without undue delay.

Data Transfers

If the Company transfers personal data to countries outside the European Economic Area (EEA), it will ensure that appropriate safeguards are in place to protect the data in accordance with UK data protection laws.

Cookies and Tracking Technologies

The Company’s website may use cookies and similar tracking technologies to enhance the user experience, analyze website usage, and provide personalized content. By using the website, website visitors and users consent to the use of cookies as described in the Company’s separate Cookies Policy.

Third-Party Websites and Services

The Company’s website may contain links to third-party websites or services that are not under the control of the Company. This Data Protection Policy does not apply to such third-party websites or services. The Company encourages website visitors and users to review the privacy policies of these third parties before providing any personal data.

Data Subject Rights

Website visitors and users have certain rights regarding their personal data under UK data protection laws. These rights include:

• The right to access personal data held by the Company.
• The right to request the correction of inaccurate or incomplete personal data.
• The right to request the erasure of personal data in certain circumstances.
• The right to restrict the processing of personal data under certain conditions.
• The right to object to the processing of personal data based on legitimate interests.
• The right to data portability, allowing individuals to receive their personal data in a commonly used and machine-readable format and to transmit it to another data controller.
• The right to withdraw consent at any time, where the processing is based on consent.
• To exercise these rights, individuals can contact the Company using the contact information provided in Section 11 of this policy.

Data Retention

The Company retains personal data collected through the website for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When personal data is no longer needed, it will be securely deleted or anonymized.

Children’s Privacy

The Company’s website is not intended for children under the age of 16. The Company does not knowingly collect personal data from individuals under the age of 16 without appropriate parental or guardian consent. If the Company becomes aware that the personal data of a child has been inadvertently collected, it will take steps to delete such data as soon as possible.

Contact Information

For any inquiries, requests, or concerns regarding the processing of personal data through the Auto Assist Group website, individuals can contact the Company using the following details:

Data Protection Officer

Auto Assist Group
Address: 111 New Union Street, Coventry, CV1 2NT
Email: info@autoassistgroup.com

Changes to the Data Protection Policy

The Company may update or modify this Data Protection Policy from time to time to reflect changes in legal or regulatory requirements, or to align with evolving best practices. Any updates or revisions will be posted on the Company’s website, and individuals are encouraged to review the policy periodically.

This policy was last reviewed and updated on 04.06.2023.

Complaints and Supervisory Authority

If individuals believe that the Company has violated their rights or failed to comply with applicable data protection laws, they have the right to lodge a complaint with the Information Commissioner’s Office (ICO), which is the UK’s supervisory authority for data protection issues. 

Individuals are encouraged to contact the Company first to attempt to resolve any concerns or complaints regarding the processing of their personal data.

Governing Law and Jurisdiction

This Data Protection Policy is governed by and construed in accordance with the laws of the United Kingdom. Any disputes arising out of or in connection with this policy shall be subject to the exclusive jurisdiction of the courts of the United Kingdom.

Review and Revision

This Data Protection Policy is subject to regular review and may be revised or updated as necessary to ensure compliance with applicable data protection laws and best practices. Any changes will be communicated through the Company’s website or other appropriate means.

Signed:
Auto Assist Group