OUR PRIVACY STATEMENT

This Privacy Statement summarises how Waylands collects, uses and protects personal data. More detailed information is set out in the Privacy Notice below.

We collect and use personal data where it is needed to provide vehicles, servicing, repairs, warranty support, finance-related services, customer support, legal compliance and communications.

We do not sell personal data. We only share it where there is a lawful reason to do so, for example with manufacturer partners, finance providers, regulators, technology providers or other organisations that help us provide our products and services.

You can opt out of marketing at any time or update your marketing preferences using the contact details below.

Post: Marketing Department, Waylands Automotive Ltd, Imperial Way, Reading, Berkshire RG2 0BF

Email: contactus@waylands.co.uk

The contents of this statement may change from time to time, so you may wish to check this page occasionally to ensure you are still happy to share your personal data with us. Where possible we will also contact you directly to notify you of any changes.

Below is our detailed Privacy Notice, updated for 2026 to reflect the UK General Data Protection Regulation, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 and relevant changes introduced by the Data (Use and Access) Act 2025.

PRIVACY NOTICE

Waylands Automotive Limited (“we”, “us” or “our”) is committed to protecting and respecting the personal data that current, former and potential customers share with us.

This statement describes what types of personal data we collect from you, or that you provide to us, how it is used and processed by us, how we share it with others, how you can manage the personal data we hold and how you can contact us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

When you visit our website, use our social media pages or contact us through live chat or other digital channels, this notice explains how we collect and use your personal data. Where consent is required, for example for certain cookies or direct marketing communications, we will ask for your consent separately.

It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data and what your rights are.

Waylands Automotive Limited is the data controller for the personal data described in this notice. Our company number is 10253292 and our registered office is Imperial Way, Reading, Berkshire RG2 0BF. This notice is intended to comply with applicable UK data protection law, including the UK General Data Protection Regulation, the Data Protection Act 2018 and the Data (Use and Access) Act 2025. If you have any questions, wish to exercise your rights or want to raise a data protection complaint, please contact us at contactus@waylands.co.uk

WHAT PERSONAL DATA DO WE COLLECT FROM YOU AND FROM WHERE?

We collect information about you and your vehicle when you use Waylands websites, complete forms on our social media pages, use live chat, visit our dealerships, contact our Customer Engagement Team, speak to us by phone or email, or otherwise interact with us. We may also receive personal data from third-party enquiry platforms, manufacturer partners, finance providers, insurers, warranty providers, lead-generation platforms and other organisations involved in providing our products and services. The personal data we collect may include:

• name, title and contact details, including address, telephone number and email address;
• date of birth, driving licence details and identity information where required;
• vehicle information, including registration number, VIN, mileage, service history, warranty repair information and product recall information;
• transaction, finance, payment, order, service, repair and aftersales information;
• website, device and technical information, including IP address, browser type, device type, cookies, online identifiers and the website from which you accessed our site;
• call recordings, live chat records and other correspondence with us;
• marketing preferences and records of your consent, objections, opt-outs and communication choices.

HOW DO WE USE THIS PERSONAL DATA?

We will only use personal data where we have a lawful basis to do so and for purposes that are fair, transparent and compatible with the reason it was collected.

The main legal bases we rely on are:

• Consent – where consent is required by law, including for certain types of electronic marketing and non-essential cookies or similar technologies, we will ask for your consent before processing your personal data for those purposes. You can withdraw your consent at any time by using the unsubscribe option in our communications, updating your marketing preferences, changing your cookie settings or contacting us.
• Contractual necessity – where processing is necessary to carry out our obligations under a contract with you, or to take steps at your request before entering into a contract, such as discussing payment plans, arranging a service plan, selling a vehicle or providing requested services.
• Legitimate interests – where processing is necessary for our legitimate business interests, provided your interests, rights and freedoms do not override those interests.
• Legal obligation – where processing is necessary for us to comply with our legal obligations, for example registering a vehicle with the DVLA or responding to lawful requests from regulators or authorities.
• Vital interests – where processing is necessary to protect your vital interests or those of another person, for example where we need to contact you about an urgent safety or product recall notice.

• Customer contact and enquiries – to respond to enquiries, arrange test drives, provide brochures or quotations, discuss vehicles, book services and provide customer support. The legal bases are usually contractual necessity, legitimate interests and, where required, consent.
• Vehicle sales, finance, servicing and aftersales – to sell or lease vehicles, arrange finance introductions, process payments, register vehicles, provide warranty support, manage servicing, repairs, MOTs, recalls and product safety communications. The legal bases are usually contractual necessity, legal obligation, legitimate interests and, where safety is concerned, vital interests.

• Service improvement and customer insight – to understand customer needs, improve our dealerships, website, customer engagement centre and bodyshop services, and tailor communications where appropriate. The legal bases are usually legitimate interests and, where required, consent.

• Marketing and advertising – to send marketing communications, manage preferences and opt-outs, run events and promotions, measure campaign effectiveness and deliver online advertising subject to your cookie and marketing choices. The legal bases are usually consent, legitimate interests and compliance with electronic marketing rules.

• Business administration, security and legal compliance – to keep records accurate, operate IT systems, protect networks and information, manage complaints, respond to rights requests, prevent fraud, comply with legal obligations and update our terms, policies and procedures. The legal bases are usually legal obligation, legitimate interests and contractual necessity.

HOW DO WE SHARE THIS INFORMATION?

We will not sell your information to third parties. However, we may from time to time disclose your information to the following categories of companies or organisations to which we pass the responsibility to handle services on our behalf:

• business partners, suppliers and sub-contractors who help us perform contracts with you, including car manufacturers, finance companies and Motability;
• agency partners who process personal data to deliver communications such as marketing and event emails;
• analytics and search engine providers that assist us in improving and optimising our website, such as Google Analytics;
• credit reference agencies, such as Experian, where this is necessary to assess creditworthiness or where it is a condition of entering into a contract with you;
• prospective sellers, buyers or advisers where we sell or buy any business or assets;
• regulators, authorities, law enforcement bodies or other third parties where disclosure is required or permitted by law, or where necessary to enforce our terms, protect rights, prevent fraud or reduce credit risk; and
• members of our group, including subsidiaries, our ultimate holding company and its subsidiaries as defined in section 1159 of the Companies Act 2006, where sharing is necessary and lawful.

We take steps to ensure that third parties who handle personal data for us comply with data protection law and apply appropriate security measures. We only share the personal data they need to provide the relevant service. Where possible, we use anonymised, aggregated or pseudonymised information.

If You Do Not Provide Personal Data

Where we need to collect personal data by law, or under a contract we have with you, and you do not provide that data when requested, we may not be able to comply with our legal obligations or perform the contract we have, or are trying to enter into, with you. For example, we may not be able to provide a vehicle, arrange finance, complete a service booking or register a vehicle. We will tell you if this applies at the relevant time.

Change of Purpose

We will only use your personal data for the purposes for which we collected it as explained above, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Where We Store Personal Data

We primarily hold your information in the UK and the European Economic Area. Some of our service providers, manufacturer partners or technology providers may process personal data outside the UK or EEA. Where this happens, we will ensure that appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, international data transfer agreements, transfer risk assessments or other lawful transfer mechanisms recognised under UK data protection law.

How We Keep Personal Data Secure

Once we have received your personal data, we will use strict procedures and security features to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Although we take appropriate steps to protect personal data, the transmission of information over the internet cannot be guaranteed to be completely secure. You should take care when sharing information online and keep your own devices, passwords and accounts secure.

How Long We Keep Personal Data

We will not hold your personal data in an identifiable format for any longer than is necessary. If you are a customer or otherwise have a relationship with us we will hold personal information about you for a longer period than if we have obtained your details in connection with a prospective relationship.

Where we have a relationship with you, for example because you are a customer, vehicle owner, registered driver, service customer or bodyshop customer, we will usually retain personal data as follows:

The only exception to the periods mentioned above are where:

• the law requires us to keep personal data for a longer period or delete it sooner;
• you have raised a complaint, concern or legal claim, in which case we may retain relevant information for up to 6 years from the date of the complaint, query or claim; or
• you exercise the right to erasure and we do not need to retain the information for a lawful reason.

Your Rights

You have rights under UK data protection law in relation to your personal data. In most cases, we will ask you for information to confirm your identity and, where applicable, to help us locate your personal data. We will respond to requests within the statutory timeframe. In certain circumstances, where we reasonably need further information from you in order to identify the personal data requested, the response period may pause until we receive that information.

You have the right to:

• withdraw consent at any time where we rely on consent, without affecting the lawfulness of processing carried out before withdrawal;
• request access to personal data we hold about you;
• ask us to correct inaccurate personal data, restrict how we use your personal data, or object to processing in certain circumstances;
• ask us, in certain circumstances, to provide your personal data in a structured, commonly used and machine-readable format so it can be transferred to another organisation;
• ask us to erase personal data where the right applies. This is not an absolute right and we may retain personal data where we are required or permitted to do so by law, including for legal, regulatory, contractual, fraud prevention or claims management purposes; and
• raise a data protection complaint with us if you are dissatisfied with how we have handled your personal data or responded to a data protection request. If you remain dissatisfied after we have responded, you also have the right to complain to the Information Commissioner’s Office.

You can exercise the above rights and/or manage your information by contacting us as below:

Post: Marketing Department, Waylands Automotive Ltd, Imperial Way, Reading, RG2 0BF

Email: contactus@waylands.co.uk

If you have any specific data protection concerns or a complaint, you can address it to our Team at data@waylands.co.uk.

DATA PROTECTION COMPLAINTS

If you are dissatisfied with how we have handled your personal data, responded to a data protection request, or complied with our obligations under data protection law, we encourage you to contact us first so that we can investigate and try to resolve the matter. Complaints may be made by email, post or phone, and we will take reasonable steps to ensure the process is accessible.

We will acknowledge receipt of your complaint within 30 days of receiving it, in line with the data protection complaints requirements introduced by the Data (Use and Access) Act 2025. We may ask you for further information where this is necessary to confirm your identity, understand the complaint properly, or investigate the matter effectively.

We will take appropriate steps to investigate and respond to your complaint without undue delay. This may include reviewing relevant records, systems, correspondence, call recordings, staff actions and third-party processor activity where relevant. We will keep you informed of progress where the matter cannot be resolved promptly.

Once our review is complete, we will tell you the outcome of your complaint and, where appropriate, explain any steps we have taken or intend to take in response.

If you remain dissatisfied with our response, or if you believe we have not handled your complaint appropriately, you may complain to the Information Commissioner’s Office.

If you need information in an accessible format or require reasonable adjustments when making a request or complaint, please let us know and we will consider how best to support you.

WHAT WE MAY NEED FROM YOU

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

YOUR DUTY TO INFORM US OF CHANGES

It is important that the personal data we hold about you is accurate and current. Please help us by keeping us informed if your personal data changes during your relationship with us.

Cookie Policy

Cookies and similar technologies are small files or identifiers that are placed on, or accessed from, your device when you visit a website or use an online service. They help websites work, remember choices, understand how visitors use the site and, where permitted, support advertising and personalisation.

We use the following types of cookies and similar technologies:

• Strictly necessary cookies – needed for the website to work, keep it secure and provide core functions.
• Preference cookies – used to remember choices you make, such as settings or saved preferences.
• Analytics and performance cookies – used to understand how visitors use our website and improve its performance.
• Advertising and personalisation cookies – used, where you have agreed, to support advertising, personalisation and campaign measurement.

You can manage your cookie choices using the cookie controls available on our website or through your browser settings. If you disable certain cookies, some website features may not work as intended.

We may use cookies and similar technologies to:

• help us recognise you as a unique visitor when you return to our website and tailor content to match your preferred interests, including any favourite vehicles or vehicle comparisons you may save; and
• compile anonymous, aggregated statistics that allow us to understand how users use our website and help us improve its structure and performance.

Where information is collected for analytics or performance purposes, we aim to use aggregated or pseudonymised information where possible.

Cookies may be session cookies, which expire when you close your browser, or persistent cookies, which remain on your device for a set period unless deleted earlier.

Our website may be provided and supported by third-party web, hosting, analytics and technology service providers. These providers process personal data on our behalf only where necessary to operate, secure, maintain, analyse and improve our website and digital services. We require our providers to process personal data in accordance with applicable UK data protection law and to apply appropriate technical and organisational security measures.

Managing Cookies

You can accept, reject or manage non-essential cookies using the cookie controls available on our website, where provided. You can also manage cookies through your browser settings.

Browser settings may allow you to block or delete cookies. If you block all cookies, some parts of our website may not operate correctly.

Links to Other Websites

Our websites may contain links to websites operated by partners, manufacturers, advertisers, affiliates or other third parties. Those websites have their own privacy notices and cookie policies. We are not responsible for how those third parties process personal data, so you should review their privacy information before submitting personal data to them.

This version was last updated in June 2026 and historic versions can be obtained by contacting us.