Privacy policy

Vroom Classics LTD 

Privacy Policy

Effective Date: 10 March 2025


We take your data and its protection seriously. This Privacy Policy describes how Vroom Classics LTD (“we”, “us” or “our”) collect, use, store, and protect personal data which may be obtained via our website or collected through other means such as an online form, email or telephone communication. 

In this Privacy Policy, “you” refers to any individual whose personal data we hold or process. 

This Privacy Policy is governed by the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018. 

 

1. Information That We Collect

We collect the following types of personal data:

  • Contact information for our users, customers (both potential and actual) and suppliers such as names,  email addresses, phone numbers, addresses etc. 

  • Financial information such as bank account and payment card details. 

  • Communication information which means any correspondence or communication between you and us.

  • Marketing information we may hold about you in order to provide information about our services, which may include names, email addresses, phone numbers, addresses and other relevant information. 

  • Usage Data: IP address, browser type, device type, pages visited, time spent on the site, etc.

  • Cookies and Tracking Technologies: We use cookies and similar technologies to collect data about your interaction with our site. We process this information on that basis of our legitimate interests in monitoring the pages you visit and time you spend on our website. For more information, see our [Cookie Policy].


2. How We Use Your Data

We use your personal data for the following purposes:

  • To provide and improve our website and services to you

  • To perform our obligations under a contract we have with you

  • To communicate with you, respond to your inquiries, or to provide customer support

  • To send you marketing communications (if you have opted-in)

  • To comply with legal obligations

  • To ensure the security and integrity of our website


3. Legal Basis for Processing

Under the UK GDPR, we rely on the following legal bases to process your personal data:

  • Consent: Where you have given us explicit consent to process your personal data (e.g., by providing us with your email address to subscribe to our newsletter). We rely on this legal basis for processing certain Marketing Information and Communication Information. 

  • Contractual necessity: To fulfil a contract with you (e.g., processing orders or providing services). We rely on this legal basis when we process Contact Information, Communication Information and Financial Information in relation to orders or transactions with us or in which we are providing services.

  • Legitimate interests: For business purposes, such as improving our services or preventing fraud, unless your interests or rights override our legitimate interests. We rely on this legal basis when we processed Usage Data, and when we process Contact Information, Communication Information and some Marketing Information outside of orders or transactions with us or in which we are providing services.

  • Legal obligation: Where we are required to process your personal data to comply with the law. We will rely on this legal basis where necessary to process Communication Information, Contact Information, Financial Information and Usage Data.

4. Sharing Your Data

We may share your personal data with the following third parties:

  • Vendors on our marketplace platform (the “Marketplace”): who supply the goods and services your order via the Marketplace. 

  • Service Providers: Third-party providers who help us deliver our services, such as payment processors, email marketing tools, and hosting services.

  • Legal Requirements: If required by law or to protect our legal rights, we may disclose your personal data to authorities or third parties.

We ensure that any third parties who process your personal data on our behalf comply with relevant data protection laws.

5. International Data Transfers

We will not transfer your personal data in a systematic way outside of the UK or European Economic Area (“EEA”) but there may be circumstances in which certain personal information is transferred outside of the UK or EEA, in particular: 

  • If you use our services while you are outside of the UK or EEA, your information may be transferred outside the EEA in order to provide you with our services; 

  • We may communicate with individuals or organisations outside of the services in providing our services, those communications may include personal information (such as contact information) for example you may be outside of the UK or EEA when we communicate with you; 

  • From time to time your information may be stored in devices which are used by our staff outside of the UK or the EEA. 

If we transfer your personal data outside the UK or EEA, and the third country or international organisation in questions has not been deemed by the UK government or EU Commission to have adequate data protection laws, we will provide appropriate safeguards and we will be responsible for ensuring your privacy rights continue to be protected as outlined in this Privacy Policy. 


6. Your Data Protection Rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right to Access: You can request a copy of the personal data we hold about you.

  • Right to Rectification: You can request corrections to any inaccurate or incomplete data.

  • Right to Erasure: You can request the deletion of your personal data, subject to certain exceptions.

  • Right to Restrict Processing: You can request a limitation on how we use your personal data.

  • Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format.

  • Right to Object: You can object to the processing of your personal data, particularly for direct marketing purposes.

  • Right to Withdraw Consent: Where we rely on your consent, you have the right to withdraw that consent at any time.

To exercise your rights, please contact us at dataprotection@vroomclassics.com. We will respond to your request within one month, though this may be extended in certain circumstances.


7. Data Retention

We will retain your personal data only for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, or as required by law. 

Our current data retention policy is to securely delete or destroy (to the extent we are able to) or anonymise personal data after the following periods: 

  • Records relating to a contract with us – 7 years from either the end of the contract or the date you last used our services or placed an order via the Marketplace (which is the length of time following a breach of contract in which a contracting party is entitled to make a legal claim). 

  • Marketing records – 3 years from the last date on which you have interacted with us. 

For any category of personal data not specifically defined in this Privacy Policy, and unless otherwise specified by applicable law, the required retention period for any personal data will be deemed to be 7 years from the date of receipt by us of that data. The retention periods stated in this Privacy Policy can be prolonged or shortened as may be required (for example, in the event that legal proceedings apply to the data or if there is an on-going investigation into the data). 


8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. However, no method of data transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.


9. Cookies

For information about the cookies we use and how to manage your cookie preferences, please refer to our [Cookie Policy].


10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, with the "Effective Date" at the top updated accordingly. Please review this Privacy Policy periodically to stay informed about how we protect your personal data.


11. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at:

Vroom Classics LTD

Profile West

950 Great West Road

Brentford

TW8 9ES

United Kingdom

Email: dataprotection@vroomclassics.com


If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk/.