This Privacy Notice provides you with information about how we will handle your personal information whenever we deal with you and including when you use the following websites and apps which we provide:
together, our "Websites",
together, our "Apps".
Autoglym is committed to protecting and respecting your privacy and complying with data protection laws. This Privacy Notice sets out the basis on which any personal information we collect from or about you, or that you provide to us, will be processed by us. Please read the following carefully to understand the personal information we hold about you, how we use your information and who we share it with. The data controller of the personal information referred to in this Privacy Notice is Altro Limited of Works Road, Letchworth Garden City, Hertfordshire SG6 1NW and with company number 00154159 and 'Autoglym' is an Altro brand.
We may update this Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material changes to our Privacy Notice if and where this is required by data protection laws. You can see when this Privacy Notice was last updated at the top of the page.
When you visit our Websites and use our Apps, we automatically collect certain information from your device using cookies and other online tracking technologies. For more information about the cookies and tracking technologies which we use on our Website and our App, why we use them and how you can manage them, please see our Cookies Statement at [LINK].
Where you are a consumer, we also use information provided by the Driver and Vehicle Licensing Agency (DVLA) to provide the "MY GARAGE" feature of the Autoglym App which provides reminders of your MOT and Tax renewal dates and also for our LifeShine portal to enable your dealer to automatically retrieve your car's make, model, colour and vehicle identification number when your car's licence plate number is inserted.
In using our Websites or our Apps, you may voluntarily provide us with personal information in the following ways:
Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.
We will normally collect personal information from you only where we need the personal information to perform a contract with you, where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms or where we have your consent to do so. In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person.
Where we collect and process your information for our legitimate interests, this will normally be to operate our Website and App and communicating with you as necessary to provide our products and services to you and for our legitimate commercial interest, for instance, when responding to your queries, improving our Website and App, undertaking marketing or for the purposes of detecting or preventing illegal activities. We may have other legitimate interests and we will make clear to you at the relevant time what those legitimate interests are.
Where you have provided us with your contact details, we will use these to send you marketing communications by phone and post and also by e-mail where you have provided your consent or where the law allows us to do so. You can opt-out of receiving marketing communications from us at any time by using the opt-out link at the bottom of every email or by contacting us using the contact details at section 10.
If we ask you to provide personal information to comply with a legal requirement or to perform a contact with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).
Similarly, if we collect and use your personal information in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.
As explained above, we may send you marketing communications or newsletters by email, either where you have actively consented to these, or where we are entitled to do so by law.
If at any stage you no longer wish to receive these types of email, please use the opt-out link at the bottom of every email or contact us using the contact details provided at section 10.
To opt-out of any other types of marketing (such as postal marketing or telemarking), then please contact us using the contact details provided at section 10.
Please note that even where you have opted-out of marketing communications, we may still need to send you service messages, for example, a confirmation email about a product you have ordered.
When you telephone us your call may be recorded for training and quality purposes. We will only do this in order to make sure that our teams are operating as well as they can, allowing us to provide you with our greatest level of customer service. This data is used only by us for improving the quality and performance of our product and service. We will also record the fact that we have spoken with you on our CRM so that we have a record of your call and can manage our relationship with you.
We do not sell or rent any of your personal information to any third party. However, your personal information may be shared with or disclosed to third parties from time to time, as described in this section.
We may disclose your personal information to the following categories of recipients:
We store and process your personal information within the European Economic Area ("EEA"). However, if at any time we need to make an ad-hoc or ongoing transfer of your personal information outside of the EEA, we will take steps to ensure that the information receives the same level of protection as if it remained within the EEA, including by entering into data transfer agreements, using the EU Commission approved Standard Contractual Clauses, or by relying on certification schemes such as the EU - US Privacy Shield. You may have a right to details of the mechanism under which your data is transferred outside of the EEA.
If you would like more details of the mechanism under which your data is transferred outside of the EEA, please contact us using the contact details in section 10.
When you allow cookies and tracking technologies to be used when visiting our Websites and our Apps, your information may be used by other companies such as Facebook and Google. You can find out more information about the other organisations which may have access to your personal information from your use of our Websites and our Apps in our [Cookie Statement] which also provides information on how you can manage and disable cookies and tracking technologies.
We employ appropriate technical and organisational security measures in an effort to protect your personal information from unauthorised access, improper use or disclosure, unauthorised modification or unlawful destruction or accidental loss. However, it is important to remember that no web based platform can be 100% secure and we cannot be held responsible for unauthorised or unintended access that is outside of our control.
If we become aware of any breach of your personal information, we will take steps to promptly assess and remediate the breach. Where appropriate, and in accordance with our legal obligations, we may also take steps to notify you about the breach, in particular where we believe that the breach has resulted in a high risk to your rights and freedoms.
We only keep personal information only for as long as required to fulfil the purposes for which it was collected. However, in some circumstances we may retain personal information for longer periods of time, for instance where we are required to do so in accordance with legal, tax and accounting requirements. For example, in order to provide our LifeShine guarantee, LifeShine guarantee registrations will be retained by us until we are informed that the ownership of the vehicle to which the guarantee relates has been transferred or the vehicle has been written off. We may also keep a copy after this period to manage any claim which you or we may have in respect of the LifeShine guarantee until the limitation period for any claim has expired.
In specific circumstances we may also retain your personal information for longer periods of time so that we have an accurate record of your dealings with us in the event of any complaints or challenges.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
You have the following rights in respect of your personal information:
We will respond to and manage any requests which you make in relation to the rights set out above in accordance with data protection laws. In addition to the above, you have the right to lodge a complaint with your local data protection authority or the Information Commissioner's Office which regulates our processing of your information in the United Kingdom - you can find contact details for data protection authorities in EU countries here. We are keen to address any issues with our use of your personal information or the exercising of your rights, and in the first instance we would ask that you attempt to resolve the problem with us directly.
In relation to all of these rights, please contact us using the details given below. Please note that we may request proof of identity, and we reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive.
If you have any questions about this Notice, or any queries or complaints about how your personal information is used, or if you wish to exercise any of your information rights, please contact us by email at firstname.lastname@example.org.