Privacy Policy

SECTION 1: GENERAL INFORMATION APPLICABLE TO ALL INDIVIDUALS

What Is Personal Information?
Personal information (or personal data) means any information about an identifiable living individual. This includes, for example, your name, contact details, mobile number, vehicle registration number, or financial information.

Legal Bases for Processing
We only process personal information where a lawful basis applies under Article 6 UK GDPR:

• Contract: Processing is necessary to perform or enter into a contract with you.
• Legal obligation: We must comply with a legal or regulatory duty (e.g., HMRC).
• Legitimate interests: Processing is necessary for our legitimate business purposes,
  provided these are not overridden by your rights and interests.
• Consent: You have given us clear consent (for example, to receive marketing emails or
  SMS messages). Where we rely on your consent, you may withdraw it at any time by
  contacting us as outlined above.

How We Collect Your Information
We collect personal information directly from you when you contact us, complete a booking form, visit our website, subscribe to marketing messages, or interact with us by phone, email, SMS, or in person.
We may also obtain data from publicly available sources or trusted third parties (e.g., finance companies, warranty providers, or marketing platforms such as Mailchimp).

How We Share Your Information
We keep your information confidential. It may be shared only:

• With employees and contractors who need it to perform their duties.
• With trusted third-party service providers who process data on our behalf, such as IT
  hosting, payment processors, logistics, payroll, marketing platforms (including
  Mailchimp), legal and accounting services.
• With regulators, law-enforcement authorities, courts, or tribunals when legally required.
• In the event of a merger, sale, or reorganisation of our business.
• All third parties are required to process data only under our instructions and to
  implement appropriate data protection safeguards.
  International Data Transfers

Some of our service providers, including Mailchimp, may process personal data outside the United Kingdom (for example, in the United States).
When this occurs, we ensure that appropriate safeguards are in place, such as UK International Data Transfer Agreements (IDTAs) or standard contractual clauses approved by the ICO, to ensure your data receives equivalent protection.

Data Retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with legal and regulatory obligations.

Customer and transaction data is typically retained for seven years to satisfy HMRC and accounting requirements. CCTV data is retained for one month, unless required for investigation or legal proceedings.

Marketing consent records are retained for the duration of your consent and up to two years after withdrawal, for audit purposes.

Security

We have implemented technical and organisational measures to protect your data against accidental loss, unauthorised access, alteration, or disclosure.

Access is restricted to authorised staff, and all personnel are bound by confidentiality obligations. We have procedures to deal with any suspected data breach and will notify you and the ICO where legally required.

Telephone Call Recording

Calls may be recorded for training, quality assurance, or dispute-resolution purposes and retained for seven years in line with our retention policy.

Your Rights Under the UK GDPR

You have the following rights regarding your personal data:

1. Right to be informed – about how your data is used.
2. Right of access – to obtain a copy of your personal data.
3. Right to rectification – to correct inaccuracies.
4. Right to erasure – to request deletion of your data where legally permissible.

• If Tytherleigh Vehicle Electrics Limited is continuing to process personal information
  beyond the period when it is necessary to do so for the purpose for which it was
  originally collected;
• If Tytherleigh Vehicle Electrics Limited is relying on consent as the legal basis for
  processing the personal information and you withdraw consent;
• If Tytherleigh Vehicle Electrics Limited is relying on legitimate interests as the legal
  basis for processing the personal information and you object to this processing and
  there is no overriding compelling ground which enables us continue with the
  processing;
• If the personal information has been processed unlawfully (i.e. in breach of the
  requirements of the data protection legislation) or if it is necessary to delete the
  personal information to comply with a legal obligation
• Ask us to restrict our data processing activities where you consider that:
  • Personal information is inaccurate;
  • Our processing of your personal information is unlawful;
  • Where we no longer need the personal information but you require us to keep it to enable you to establish, exercise or defend a legal claim; or
  • Where you have raised an objection to our use of your personal information;
• Request a copy of certain personal information that you have provided to us in a commonly used electronic format. This right relates to personal information that you have provided to us that we need in order to perform our agreement with you and personal information where we are relying on consent to process your personal information;
• Object to our processing of your personal information where we are relying on
  legitimate interests or exercise of a public interest task to make the processing lawful.
  If you raise an objection we will carry out an assessment to determine whether we
  have an overriding legitimate ground which entitles us to continue to process your
  personal information; and
• Not be subject to wholly automated decisions which produce legal effects or which
  could have a similarly significant effect on you.

5. Right to restrict processing – to limit how we use your data.
6. Right to data portability – to receive data in a portable format
7. Right to object – to processing based on legitimate interests or direct marketing.
8. Rights in relation to automated decision-making and profiling – we do not use your data or automated decisions with legal or significant effects.

To exercise your rights, contact us at service@tveuk.com