Privacy Policy

Last updated: 28th June 2025

1. Purpose

  • The purpose of this policy is to outline how we use your data, how it’s protected, how long it’s stored for and more.
  • As a vehicle finance broker, the main purpose of us obtaining your information is to try to obtain you an acceptance with one of our lenders.
  • If at any time, you have any questions regarding how we use your information or this policy, please use the below details to contact us –
  • Please note that for the purpose of holding personal data, we are registered
    with the Information Commissioner’s Oce, registered number – Z1023210.

2. Why do we collect and use your personal data?

  • Capital Car Finance Limited are authorised and regulated by the Financial
    Conduct Authority (FCA Registration Number 685925) We are a credit
    broker and not a lender, which means we act independently as an
    intermediary for several dierent lenders to enable us to oer customers a
    competitive choice of vehicle finance products
  • We collect and use your personal information in order for us to provide you
    with vehicle finance via our application form and potential from third parties
    who you have applied to.
  • We act as a data controller.
  • The lawful basis of which we use your information is consent, we will not
    process your information without your explicit consent.
  • We gain this information by you agreeing to our initial disclosure and
    privacy policy when you make an application or when you provide it
    verbally over the phone.
  • We kindly ask that if you do not want us, or do not consent to us using your
    information, you do not submit an application to us.
  • You can exercise your right to withdraw your consent at any time using our
    contact details listed above.
  • We will not use your data for any other purposes without informing you and
    gaining your consent.
  • When you make an enquiry for our services, we will process your data
    based on legitimate interest
  • We also need to make you aware of the ‘Contract’ Lawful basis. Whilst you
    do not enter into any contracts with us, should you decide to proceed with a
    finance acceptance, you will form a contract with a lender.
  • By providing you with a quote, the lender can also process your data under
    this lawful basis.
  • The information we collect can be some or all of the following –
    • Name
    • Date of Birth
    • Residential Information
    • Employment and Income Information
    • Marital Status
    • Vehicle Information
    • Bank Details
    • Marketing Preferences (should you opt in, you will have the ability to
      opt out at anytime, you can also contact us on the above to do so)
    • IP and Cookie Information
  • We will never request sensitive information, or information that we do not
    require from yourself. However, if you provide us with data that is classed as
    a special category of data such as health information, criminal records of
    convictions and oences, or allegations of criminal oences, we will only
    process this with your permission (unless we feel the processing is
    necessary to protect your vital interests or if the law allows us to do so).
  • You have a right at any time to ask us to stop the processing of that specific
    data.
  • If you do not provide us with your data, we may not be able to provide you
    with our services.
  • Please note all communications with yourself will be recorded and/or saved
    for record.

3. What happens if I do not provide my personal information?

  • We need your personal information to process your request or finance
    application. If we do not collect your personal information, we will not be
    able to provide our services to you.
  • We will use your personal information to send you marketing
    communications by email about similar products and services that you may
    be interested in.
  • Please note that we will not send you marketing information with your
    consent
  • You have the right to object to receiving marketing communication and we
    will give you an easy way to unsubscribe from receiving any marketing
    communication from us.

4. Who will we share your personal information with?

    • We will share your information with the lenders with whom we work with in order
      to assist you gain an acceptance, these include the below –

    • Your information will be held on our CRM system, AutoConvert (Blue Owl
      Network Ltd). You can view their privacy policy here –
      https://www.autoconvert.co.uk/privacy-policy/
    • This organisation will check the following records about you and with their
      chosen Credit Reference Agencies (CRA), Equifax Ltd and Experian Ltd. We
      will make checks such as; assessing this application for credit and verifying
      identities to prevent and detect crime
    • When Equifax and/or Experian receives a search request from us via
      AutoConvert, they will place a soft quotation footprint that will be visible to
      you only, on your credit file; other parties including lenders will not see this.
      This quotation footprint will not be seen by other parties and it will not
      aect your credit score/rating or ability to apply for finance from other
      lenders (please note that when lenders conduct these searches with CRA’s, it may leave a footprint as it could be a hard search). AutoConvert will
      access from Equifax Ltd and/or Experian Ltd both public (including the
      electoral register) and shared credit and fraud prevention information. This
      information will be used to check your eligibility against a select group of
      lenders
    • AutoConvert will provide a list of lenders that you are likely to be accepted
      for given the information supplied using their brokering technology that
      understands most of the acceptance criteria of the lenders on their panel.
    • If you give us false or inaccurate information and we suspect or identify
      fraud we will record this and may also pass this information to FPAs and
      other organisations involved in crime and fraud prevention.
    • You can contact CRA’s on the below:
  • For further information on Credit Reference Agencies and how they will use
    your data, please refer to their Credit Information Notice: Credit Reference Agency Information Notice (CRAIN) | Experian
  • The personal information we have collected from you will be shared with
    fraud prevention agencies who will use it to prevent fraud and
    money-laundering and to verify your identity. If fraud is detected, you could
    be refused certain services, finance or employment. Further details of how
    your information will be used by our finance partners and these fraud
    prevention agencies, can be found in the above privacy links.
  • In order to provide or carry out our services, we may also share and
    process your data with the following –

  • Please also note that in order to complete your finance agreement, we will
    require some information from the supplying dealership.
  • In order for them to raise the necessary paperwork, we will need to send
    them your name, address and contact number. We may also liaise with
    them regarding any future aftersales issues where required.
  • If required, we will also share your information with 3rd parties for
    accounting, legal or regulatory purposes such as (but not limited too HMRC,
    FCA etc.)
  • Please note we as a company do not share your data outside of any EEA
    state. We ask you to ensure you are aware of how the above companies
    share and use your date, so you are fully aware.
  • We complete due diligence on any third party with whom we work with to
    ensure they comply with GDPR and are happy to provide further
    information or answer any questions you may have.

5. How long will we store your personal information?

We will store your personal information for up to six years on our CRM systems.
We are committed to ensuring your data is kept secure so review our security
systems on a regular basis.

  • a. This is to enable us to refer to our records should we be required to for the
    purpose of regulatory or lawful reasons
  • b. If you do not object to receiving marketing communications from us, we will
    store your personal information for marketing purposes until you
    unsubscribe from receiving marketing communications from us
  • c. Please note that some of your information may be included in information
    used for accounting purposes. Where this is the case this information is kept
    for 7 years as per our legal requirements.
  • d. Once this time period has ended, your information will be confidentially
    destroyed and removed from all systems and records

6. What are your rights to your personal information?

    • Under Data Protection Law, you have certain rights when it comes to your data
      that we need to make you aware of. We have detailed these rights below.

● Right to access

You have the right to request copies of the personal information we hold about
you at any time

● Right to rectification

You have the right to request that we correct any inaccurate personal information
we hold about you.

● Right to erasure

You have the right to request that we delete your personal information from our
records. Please note that we will not be able to delete your personal information
whilst we are still providing our services to you. We will be able to delete your
personal information once you cancel the service or once the service is
completed, if we are able to do so while still abiding by law.

● Right to restrict processing

You have the right to request that we restrict how we use your personal
information

● Right to object

You have the right to object to the collection and use of your personal information
at any time.

● Right to data portability

You have the right to obtain a copy of your personal information in a legible and
compatible format such as Excel or Word.

● Right to be informed

You have the right to be fully informed regarding your information throughout our
whole journey

● Rights in relation to automated decision making and profiling

If a decision has been made electronically, you have the right to contest this
decision.

7. How can I exercise my rights in relation to my personal information?

  • You can exercise all of your rights by contacting us on any of the above contact
    details.
  • Please note that as a regulated firm, in addition to GDPR and Data Protection
    Laws, we are also required to abide by other regulations and laws.
  • >Due to this, we may not be able to fully act on your requests; however where these
    exemptions apply, our team will fully explain why we are limited to act on your
    request, or how we have partially acted on your request.

8. How do I lodge a complaint about the use of my personal information?

  • How do I lodge a complaint about the use of my personal information?
  • You also have the right to lodge a complaint directly with the Information
    Commissioner’s Oce (ICO).
  • The ICO is the regulator who makes sure that we use your personal information in
    a lawful way.
  • You can lodge a complaint with the ICO by following this link
    https://ico.org.uk/concerns/ or calling the ICO on 0303 123 1113

9. Cookies

  • Our site may operate cookies and it’s important for us to make you aware how
    these are used so please do ensure you are aware of our Cookies Policy which can
    be found on our site
  • You will be asked if you agree to these cookies when using our site, you have the
    right to refuse these cookies.

10. Review

  • This policy will be reviewed on at least an annual basis and was last updated on
    11th March 2025.
  • Any updates will be reissued as soon as is physically possible with the approval of
    our Director and Senior Management team