Privacy policy
This policy explains how Ask Auto Zone ("we", "us") collects, uses and protects your personal data under the UK GDPR and the Data Protection Act 2018.
1. Who we are
Ask Auto Zone is an independent used-car dealer based in Loughborough, UK. For any privacy question, contact us at info@askautozone.co.uk.
2. What we collect
- Contact enquiries: name, phone, email, the message you send, and — where relevant — the vehicle you enquired about.
- Part-exchange enquiries: vehicle registration, mileage, condition notes and your contact details.
- Website analytics: if you consent to analytics cookies, we collect anonymised traffic data via Google Analytics 4.
- Operational logs: standard server logs (IP, timestamp, URL) for security and abuse prevention. Retained for 30 days.
3. Why we use it
We process your data to respond to your enquiry, arrange test drives, quote for part-exchange, complete a sale, and — where necessary — operate and secure this website. Our lawful bases are: consent (for marketing and analytics), performance of a contract (for a sale) and legitimate interests (for responding to enquiries and securing the site).
4. Who we share it with
We share your data only with: (a) finance providers or insurers when you ask us to arrange a quote, (b) transport partners when you ask us to arrange delivery, and (c) professional advisers and regulators where required by law. We never sell your data.
5. How long we keep it
Enquiries are kept for 24 months so we can follow up on ongoing conversations. Sale records are kept for 6 years to comply with HMRC and Consumer Rights Act requirements.
6. Your rights
Under UK GDPR you have the right to access, correct, erase, restrict or object to the processing of your personal data, and the right to data portability. To exercise any of these, email info@askautozone.co.uk. You may also complain to the Information Commissioner's Office (ico.org.uk).
7. Cookies
We use cookies as set out in our cookie policy.
8. Security
All data is stored on UK-based hosting with TLS 1.2+ encryption in transit. Admin access is protected with rate-limited bcrypt-hashed passwords and CSRF tokens on every write action.
9. Changes
We review this policy at least yearly. Material changes will be announced at the top of this page.