We care about your privacy.

Let's talk about privacy and how your data is used.

Privacy Policy.

1. Fords of Winsford Group of Companies?

The Fords of Winsford Group of Companies (which we’ll refer to as ‘The Group’ in this document) is made up of three related businesses: Fords of Winsford Limited, Fords Cheshire Limited and Graham Bell Limited. For simplicity throughout this notice, ‘we’ and ‘us’ mean the group.

2. About this privacy notice

The Data Privacy Notice contains key information and is a summarised version of our full Data Privacy Policy which is available upon request.

3. Consent

When collecting your personal data, we’ll always make it clear to you which data is necessary in connection with your particular enquiry. You may withdraw your consent at any time by following the contact instructions at the bottom of this Privacy Policy.

4. How we use your personal data

We use your data to process any requests or orders you may place in our showrooms. If we don’t collect your personal data during interactions with you, we won’t be able to process your requests for keys to our vehicles and/or we won’t be able to comply with our legal obligations should you place an order.

undefined

4. How we use your personal data (continued)

We also use your data to respond to your queries or complaints, we communicate this with you throughout. We do this on the basis of our contractual obligations to you, our legal obligations and our legitimate interests in providing you with the best service and understanding how we can improve our service based on your experience.

5. Direct marketing

We will only engage with you via direct marketing channels with your express content to do so. You have the right to stop us using your personal data for direct marketing activity through all channels, or selected channels. We will always comply with your request.

6. Sharing personal data

We may share your data with other companies in our group.

Nexus Point has been appointed as a data sub-processor to process personal data on behalf of us. We will take all reasonable steps to ensure your data is handled safely, securely and in accordance with your rights, our obligations and the obligations of Nexus Point Limited under the law.

We may sometimes have contracts with third parties to supply products and services to you on our behalf. These may include payment processing, delivery of goods, search engine facilities, advertising and marketing.

undefined

Sharing personal data (continued)

In some cases, third parties may require access to some or all of your data.

Where any of your data is required for such a purpose we will take all reasonable steps to ensure your data is handled safely, securely, and in accordance with your rights, our obligations, and the obligations of the third party under the law.

We may compile statistics about the use of our site including data on traffic, usage patterns, user numbers, sales and other information.

All such data will be anonymised and will not include any personally identifying data, or any anonymised data that can be combined with other data and used to identify you.

We may from time to time share such data with third parties, such as prospective investors, affiliates, partners and advertisers. Data will only be shared and used within the bounds of the law.

In certain circumstances, we may be legally required to share certain data held by us which may include your personal data.

For example, where are involved in legal proceedings, where we are complying with legal requirements, under the issue of a court order or at the request of a governmental authority.

undefined

6.1. Third parties

Google Analytics

We use Google Analytics owned by Google to collect, monitor and analyse traffic to our website.

Google collects data about the device you are using, device type, browser information and device screen size.

Google also collects your IP address which is used to approximate your location. Google does not share your IP address with us, which in turn does not allow us to identify you as an individual.

For further details on how Google Analytics uses and protects your data, please see Google’s privacy policy.

You may also opt out of Google Analytics tracking by installing this browser plugin provided by Google.

Leadoo

We use Leadoo’s tracking service to follow what users are doing on the site and combine this behavioural data with other data we can gather from e.g. chat interactions. Leadoo uses etag tracking in order to hook together the same users behaviour over several sessions - in practice this works similarly to cookie based tracking. Please check out Leadoo Marketing Technologies Ltd’s Privacy Policy (https://leadoo.com/privacy-policy) for more information on what is tracked and what your rights are. Leadoo works as the Processor and we work as the Controller for the data in terms of GDPR. You can stop the tracking by emptying your browser’s cache after the visit. For more on how Leadoo works as a GDPR compliant processor, see https://leadoo.com/privacy-policy-processor.

undefined

6.1 Third Parties (continued)

Cloudflare

We use Cloudflare to protect the identity of our servers for security reasons. Cloudflare also provides several services such as DDos (Distributed Denial of Service) attacks protections, SSL/TLS (end to end encryption) and caching of web assets.

Due to the nature of Cloudflare, any data you submit to our servers will also pass through Cloudflare, albeit in a converted format using end to end encryption technologies.

Cloudflare complies with the GDPR and other legal frameworks. Further information can be found here.

Mandrill

We use Mandrill to handle outgoing and incoming emails between us and the data subject. Mandrill keeps a log of all this data including any personal or sensitive data that you may include in your email to us, along with your name and email address. These logs are kept for a maximum of 30 calendar days, at which point they are permanently removed.

We do not use Mandrill for marketing purposes unless you give us consent to do so.

undefined

7. What data do we collect?

We will only collect the minimal amount of data to fulfil your request, or our legal obligations and our legitimate interests. They include the following.

Data

Name, address, phone number, date of birth, email address and vehicle information.

Reason?

This is required to respond to your queries submitted via our website.

How long do we keep the data?

Data is held for 60 calendar days after the query has been resolved.

8. Your rights

You have the ultimate right to.

Information - To be informed about the processing being carried out by us.

Access - Subject to certain exemptions, to obtain a copy of the personal data being processed.

Rectification - To have inaccurate data rectified.

Erasure - To have personal data erased upon request, subject to certain exemptions.

undefined

8. Your rights (continued)

Data Portability - In certain circumstances have automated data returned to you, or sent directly to another controller in a structured, commonly used and machine-readable format.

Objection - The absolute right to object to direct marketing and a qualified right to object to processing based on the controller’s legitimate interests, including profiling.

Automated decision making - Not to be subject to decisions based solely on automated processing.

9. Contact

Data Protection Officer.

We have a ‘Data Protection Officer’ who is responsible for matters relating to privacy and data protection. The Data Protection Officer can be reached at the following address.

Steve Chappell, Group Compliance Manager, Fords of Winsford - 01606 861 234 - [email protected]

10. Changes to the privacy notice

It might be necessary to update this Privacy Notice from time to time. You’re welcome to come back and check whenever you wish.

The Privacy Policy was last updated on 03-10-2023

undefined