Privacy & Cookie Policy

What information do we collect about you?

When you supply any personal information to us we have legal obligations towards you in the way we use that data. We must collect information lawfully and fairly, that is, we must explain why we are collecting it, how we will use it; collect only the information needed and remove it in the event that the purpose has been met; and we will tell you if we want to pass the information on to anyone else.

We collect information about you when you register with us or place an order for products or services.  We also collect information when you voluntarily complete customer surveys, provide feedback and participate in competitions.  Website information is collected using cookies (please see our Cookies Policy. http://ogilvie.wpengine.com/cookie-policy/).

We may receive information about you from associate third parties, who you have given consent to, for example, Finance companies, Dealership groups, and your employer.

The information we collect may include names, addresses, telephone numbers, email addresses, financial details, employment details and educational details, family details, visual images and behaviour (e.g. how you use our websites).

We may also process your special categories of data and this includes:

• physical or mental health details
• racial or ethnic origin
• religious or other beliefs
• political opinions, sexual life
• trade union membership
• offences (including alleged offences)
• criminal and legal proceedings, outcomes and sentences
• Biometrics
• Genetic information

How will we use the information about you?

We collect information about you to respond to your enquiries, process your order(s), manager your account(s) and, if you agree, to contact you about other products or services we think may be of interest to you.

In general, any information you provide to us will only be used by us.  Your information will be disclosed where we are obliged by law.

Lawful bases for processing personal data

We process personal information to enable us to carry out our duties and specifically where:

• An individual has consented to the processing of their data for the specified purpose(s);
• Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party;
• Processing is necessary for compliance with a legal obligation to which the controller is subject;

How we share your personal information?

The Group may need to share your personal information with other organisations. Where such sharing is necessary, we will comply with the requirements of the GDPR on data sharing. The types of organisations / groups that we may share personal data with are set out below:

• associates and representatives of the person whose personal data we are processing
• employer of individual to enable completion of an order
• professional advisers and consultants
• services providers
• credit reference agencies
• debt collection and tracing agencies
• police forces
• private investigators
• current, past or prospective employers and examining bodies
• government departments
• suppliers
• financial organisations
• debt collection and tracing agencies
• persons making an enquiry or complaint
• organisation subject to a complaint or assessment,
• prosecuting authorities, courts
• other ombudsman and regulatory authorities

Your rights as a Data Subject

You have the following rights in relation to your personal information which you can exercise by sending an email or writing to the Data Protection Representative (details in Questions & Concerns section below):

• Right to request access to your personal information and information relating to our use and processing of your personal information;
• Right to request that we restrict our use of your personal information;
• Right to receive your personal information in a structured commonly-used and machine-readable format or transmit the data directly to another Data Controller;
• Right to object to the processing of your personal information for certain purposes such as direct marketing and profiling;
• Right to request your personal information to be erased where it is no longer necessary for the purpose for which it was collected
• Right to withdraw your consent to the use of your personal information where the processing of your data is based on consent.

We will not make any decision about you using automated means only, and will notify you in writing if this position changes.

How long we retain your personal information?

We will retain your personal information for no longer than necessary taking into account the following:

• The purpose(s) for which we are processing your personal information, such as whether it is necessary to continue to store that information in order to perform our obligation under a contract;
• Whether we have any legal obligation to continue to process your personal information such as any record keeping obligations imposed by an applicable law;
• Whether we have a business reason to continue to process your personal information;

For more information on how long personal data is retained, please contact the Group’s Data Protection Representative (details in Questions & Concerns section below).

How we secure your personal information?

We take appropriate technical and organisational measures to secure your personal information and protect it against unauthorised or unlawful processing as well as against its accidental loss or destruction or damage including:

• Using secure servers to store your personal information;
• Using Secure Sockets Layer (SSL) software or other similar encryption technologies to encrypt confidential data in transit and at rest;
• Verifying the identity of individuals that access your personal information;

Providing access to the minimum amount of personal data necessary, using appropriate restrictions and anonymisation/pseudonymisation whenever possible.

Transfer of your personal information to other countries

We may need to transfer your personal information to countries outside the European Economic Area (EEA) or to an international organisation from time to time. Where we transfer your personal information outside the EEA, we will ensure that the adequate safeguards are used to secure the data.

Our use of cookies and similar technologies

We use cookies and similar technologies on our website. For further information on how we use cookies and similar technologies, including the information we collect through our use of cookies please see our Cookies Policy. http://ogilvie.wpengine.com/cookie-policy/

Questions and Concerns

If you have any questions or concerns regarding how we collect, handle, store or secure your personal information, contact our Data Protection Representative using the details below:

Data Protection Representative
Ogilvie Group
Ogilvie House
200 Glasgow Road
Stirling
FK7 8ES

Email:    dataprotection@Ogilvie.co.uk

You also have the right to raise a complaint with the Information Commissioner’s Office (ICO). The ICO’s contact details are set out below:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113