Privacy Policy
Tracks is committed to safeguarding your privacy and ensuring the protection of your personal data. This privacy notice explains how we handle your personal data when you visit our website (no matter where you’re visiting from) and outlines your privacy rights, as well as the legal protections in place for you.
Key Information & Purpose of This Privacy Notice
The purpose of this privacy notice is to give you a clear understanding of how Tracks collects, processes, and protects your personal data during your interactions with our website, such as when you submit an inquiry, engage with our Live Chat service, or purchase a product or service. This notice applies to all data collected through the website, but it does not override any additional privacy or processing notices we may provide on specific occasions. Our website is not intended for use by children, and we do not knowingly collect data related to minors.
Who Controls Your Data
Tracks of Exeter Ltd (trading as Tracks, Tracks Suzuki, and Tracks Suzuki Exeter) is the data controller responsible for your personal data. We have appointed a Data Protection Officer (DPO) to oversee questions related to this privacy notice. If you have any queries, you can contact Harry Ody our DPO at marketing@trackssuzuki.co.uk. While you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk), we would appreciate the opportunity to address your concerns first.
Third-Party Links
Our website may include links to third-party websites, plug-ins, and applications. By clicking on those links or enabling those connections, third parties may collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to review the privacy notice of any website you visit after leaving ours.
Data We Collect About You
When you visit our website, we gather standard internet log information, such as your IP address, browser type, and device details, as well as patterns of user behaviour, including the path you take through the site, entry and exit points, and general location. This data is stored under unique identifiers (e.g., strings of numbers) and used for legitimate business purposes like monitoring site traffic, visitor engagement, and improving our website’s performance and services. None of this data personally identifies you, and it is stored indefinitely for analytical purposes.
We also use Google Analytics to collect similar standard internet log data, which helps us monitor site traffic and engagement. Like the other information, this is stored using unique identifiers and processed in a way that doesn’t directly identify anyone.
Personal Data We Collect:
Depending on how you interact with our website, we may collect the following categories of personal data:
- Identity Data: First name, last name, username or similar identifier, marital status, title, date of birth, and gender.
- Contact Data: Billing address, delivery address, email address, and phone numbers.
- Financial Data: Bank account details and payment card information.
- Transaction Data: Details of payments made to and from you, and other information about products or services you’ve purchased from us.
- Technical Data: IP address, login details, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and details about the devices you use to access our website.
- Profile Data: Your username and password, purchase history, interests, preferences, feedback, and survey responses.
- Usage Data: Information on how you interact with our website, products, and services.
- Marketing and Communications Data: Your preferences regarding receiving marketing from us and third parties, and your communication preferences.
We also aggregate data, such as statistical or demographic data, which may be derived from your personal data but does not identify you directly. For example, we might aggregate usage data to calculate the percentage of users accessing a specific feature of our website. If aggregated data is combined with your personal data and could indirectly identify you, it will be treated as personal data under this privacy notice.
We do not collect any Special Categories of Personal Data, such as information about race, religion, sexual orientation, political opinions, or health data. Nor do we collect any information related to criminal convictions or offenses.
Failure to Provide Data
If we are required by law or contract to collect personal data from you, and you do not provide it when requested, we may not be able to perform the contract we have with you (for instance, to supply a product or service). Should this occur, we will notify you at the time.
How We Collect Your Data
We use a variety of methods to collect data from and about you, including:
- Direct Interactions: You may provide data by filling in forms, contacting us by phone, email, or post, or through the following actions:
- Submitting an inquiry or using our Live Chat service.
- Completing a finance check or application.
- Ordering products or services.
- Making payments or deposits online.
- Subscribing to newsletters or other communications.
- Entering competitions, promotions, or surveys.
- Providing feedback.
- Automated Technologies: As you browse our website, we may automatically collect Technical Data about your device, browsing actions, and usage patterns through cookies or other tracking technologies. For details, refer to our Cookie Policy.
- Third-Party Sources: We may receive Contact, Financial, and Transaction Data from third parties such as Codeweavers Limited and Stripe Payments Europe Ltd.
How We Use Your Personal Data
We will only use your personal data where it is legally permissible. Common situations include:
- Performance of a Contract: Where it is necessary for performing a contract with you.
- Compliance with Legal Obligations: To comply with legal and regulatory requirements.
- Legitimate Interests: Where necessary for our legitimate interests, or those of a third party, unless overridden by your rights and interests.
We generally do not rely on consent as the legal basis for processing your personal data, except in relation to third-party marketing communications sent via email or text. You have the right to withdraw consent at any time.
Marketing & Your Preferences
We strive to give you control over your personal data, particularly around marketing communications. Based on your Identity, Contact, Technical, Usage, and Profile Data, we may decide which products, services, or offers are relevant to you. You will only receive marketing communications from us if you have requested information or purchased services from us, and you have not opted out of such communications.
We will seek your consent before sharing your personal data with third-party companies for marketing purposes. If you wish to stop receiving marketing messages at any time, you can opt out via the links in those messages or by contacting us directly.
Cookies & Change of Purpose
You can set your browser to reject all or some browser cookies. For further details, please refer to our Cookie Policy.
We will only use your personal data for the purposes we collected it for, unless we reasonably consider that we need to use it for another compatible purpose. If we use it for an unrelated purpose, we will notify you and explain the legal basis.
Sharing Your Data with Third Parties
We may need to share your personal data with the following:
- Internal Third Parties: Other companies within the Tracks of Exeter Ltd group based in the UK.
- External Third Parties: Service providers based in the UK, such as IT services, professional advisors, and regulatory bodies, including HM Revenue & Customs and other authorities.
- Specific Third Parties: Like Codeweavers Limited and Stripe Payments Europe Ltd, for payment processing.
- Business Transactions: If we merge or sell part of our business, your data may be transferred to new owners.
We require all third parties to respect the security of your data and to treat it in accordance with the law. These parties may only process your data under our instructions.
Data Security & Retention
We have implemented robust security measures to protect your personal data from unauthorized access, alteration, or loss. Access to your data is restricted to employees, agents, contractors, and third parties who need it for business purposes. In case of any data breach, we will notify you and any applicable regulator where required by law.
We retain your data only for as long as necessary to fulfil the purposes for which it was collected. We consider the amount, nature, and sensitivity of the data when determining retention periods. In some cases, we may anonymize your data, meaning it can no longer be linked to you, in which case we may use it indefinitely without further notice.
Your Legal Rights
Under data protection laws, you have rights over your personal data. You can:
- Request access to your personal data.
- Request correction of any incomplete or inaccurate data.
- Request erasure of your data where there’s no good reason for us to keep it.
- Object to processing, particularly where you feel it impacts your fundamental rights and freedoms.
- Request restrictions on how your data is processed.
- Request the transfer of your data to another party.
- Withdraw consent at any time, where consent is the legal basis for processing.
If you wish to exercise any of these rights, please contact us at marketing@trackssuzuki.co.uk. There is typically no fee, but we may charge for unfounded, excessive, or repetitive requests. We may request further information to confirm your identity for security purposes.
We aim to respond to all legitimate requests within one month, but may extend this period if your request is complex or if you’ve made multiple requests.
For further details or concerns about how we handle your personal data, you can always contact us directly. We may update this Privacy Policy from time to time so please check our website for updates.