Privacy Policy

We may collect, use, store, and transfer different kinds of personal data depending on how you interact with our services:

Under UK GDPR, we rely on the following lawful bases to process your personal data:

• Performance of a Contract: Processing necessary to execute vehicle sourcing briefs, submit auction bids on your instruction, arrange covered logistics, or deliver purchased vehicles.
• Legal Obligation: Processing required to comply with UK anti-money laundering regulations, tax laws, DVLA vehicle transfers, and accounting standards.
• Legitimate Interests: Processing necessary for operational management, fraud prevention, platform security, and improving our customer service experience.
• Consent: Where you explicitly subscribe to marketing communications or accept non-essential analytical cookies.

We use your personal data strictly for operational, contractual, and communication purposes:

• Representing your bidding instructions at UK and Japan wholesale auctions.
• Conducting 150-point PDI workshop checks and delivering digital inspection reports.
• Coordinating enclosed transporter logistics and confirming site delivery windows.
• Dispatching transactional emails, invoice receipts, and sourcing status updates.
• Responding to customer enquiries submitted through our website contact forms.

We do not sell, rent, or trade your personal information. We share relevant data only with trusted service providers who process data strictly under our instructions:

When sourcing vehicles from overseas markets (such as Japanese vehicle auctions), minimal required data (e.g. export documentation details and shipping consignee info) may be transferred to international shipping agents. All international transfers are safeguarded under UK GDPR Standard Contractual Clauses (SCCs) or adequacy decisions.

We employ robust technical and organizational security measures, including SSL/TLS HTTPS encryption, row-level security (RLS) on database tables, and restricted admin access.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting obligations (typically 6 years for financial transaction records under UK tax law).

As a data subject located in the UK or EEA, you possess the following statutory rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to Restrict Processing: Request suspension of data processing in specific scenarios.
• Right to Data Portability: Request transfer of your data to you or a third party in a structured, machine-readable format.
• Right to Object: Object to data processing based on legitimate interests or direct marketing.

You have the right to lodge a complaint at any time with the Information Commissioner's Office (ICO), the UK independent authority for data protection issues (website: ico.org.uk). We would, however, appreciate the chance to deal with your concerns directly before you approach the ICO.

To exercise any of your data protection rights, request information, or submit a data privacy enquiry, please contact our privacy compliance team: