Privacy Policy – Individual Specialist Cars Limited
This Privacy Policy explains how Individual Specialist Cars Ltd (“we”, “our”, “us”) collects, uses, stores and protects personal information relating to customers, employees, job applicants, suppliers, contractors and visitors. We comply with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (“PECR”). By engaging with us, using our website or visiting our premises, you acknowledge this notice.
1. Who We Are
Individual Specialist Cars Ltd is the Data Controller for your personal information.
Registered Office Address: 43–59 Western Road, Birmingham, B18 7QD
Email:
info@individualgroup.co.uk
We may update this Privacy Policy periodically. The latest version will always be published on our website.
2. Information We Collect and How We Use It
We collect personal information when you contact us, make an enquiry, request a service, book a repair, apply for employment, communicate with us, visit our website or attend our premises. This may include identity and contact details, vehicle information, diagnostic data, payment and insurance information, CCTV footage, call recordings, device and website usage data, and employment‑related information.
We process this information to provide our services, manage bookings and repairs, liaise with insurers and manufacturers, fulfil legal obligations, operate our business, enhance security, support employee administration, and maintain accurate records. We process personal data lawfully, fairly and transparently in accordance with UK GDPR.
3. Summary of Data Processing Activities
| Category of Personal Date | Purpose of Processing | Lawful Basis (GDPR) | Retention Period |
|---|---|---|---|
| Identity & Contact Details | Managing enquiries, communications, bookings, updates and records | Contract: Legitimate Interests; legal Obligation | 7 years following vehicle repair date |
| Vehicle Information | Vehicle Repairs, diagnostics, warranty and recall information | Contract Legal obligation, Legitimate Interests. | 7 Years following vehicle repair date |
| Payment & Transaction Data | Processing payments, refunds and financial compliance | Contract: legal obligation | 7 years following vehicle repair date |
| Insurance & Accident Information | Insurer approved repairs, claims and invesitgations | Contract: legitimate Interst; Legal Obligation | 7 years following vehicle repair |
| Website & Technical Data | Website functionality, security and analytics | Consent (non-essential cookies); Legimate Interest | 12-24 Months |
| Marketing Preferences | Sending marketing communications | Consent | Until withdrawn |
| Call Recordings | Training, dispute resolution and fraud prevention | Legiotimate Interest | Up to 6 month |
| CCTV Footage | Security, safety, crime prevention and incident investigation | Legitimate Interests; Legal Obligation | 30 days |
| Employee & Applicant Data | Recruitment, HR administration, payroll, training and legal compliance | Contract; Legal Obligation; Legitimate Interests; Vital Interests | Payroll 7 years; HR files up to 6 years & applicant up to 3 months |
| Supplier & Contractor Data | Managing commercial relationships | Contract; Legitimate Interests | 7 years |
| Regulatory / Law Enforcement Data | Fulfilling legal duties and supporting investigations | Legal Obligation; Legitimate Interests | As legally required |
| Special Category Data | Safety, workplace adjustments and accident reporting | Explicit Consent; Legal Obligation; Vital Interests | As legally required |
4. CCTV Monitoring
CCTV operates across our premises for the safety and security of customers, visitors and staff. Recordings may be reviewed to investigate incidents or shared with insurers or law enforcement where legally required. Footage is usually retained for around 30 days unless longer retention is necessary for a specific incident. Notices are displayed where CCTV is in use.
5. Marketing Communications
We only send marketing emails, promotions or updates where you have opted in to receive them. You can withdraw consent at any time using the unsubscribe link or by contacting us at info@individualgroup.co.uk.
6. Sharing Your Information
We may share personal information with insurers, vehicle manufacturers, authorised dealers, diagnostic partners, recovery agents, IT providers, payment processors, HR and payroll services, auditors, professional advisers and regulatory authorities. All third parties handling information on our behalf must comply with UK GDPR and maintain appropriate security measures.
We may also share information where required by law, in connection with legal claims or investigations, or to protect the rights and safety of individuals.
7. International Transfers
If personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place, such as the UK Addendum to the EU Standard Contractual Clauses or other ICO‑approved mechanisms.
8. Security of Your Information
We implement technical and organisational measures to protect your personal information, including secure systems, encryption, restricted access, training and ongoing reviews. While we take appropriate precautions, no transmission of data over the internet can be guaranteed completely secure.
9. Your Rights
You have a number of rights under data protection legislation, and we are committed to supporting you in exercising them. If you wish to correct, update or make any changes to your personal information, you may contact us at any time at info@individualgroup.co.uk. When you do, please include your name, address and contact details so that we can verify your identity and ensure that updates are made securely and accurately.
You may also exercise your broader data protection rights, subject to certain legal exemptions. We will not charge a fee to handle your request unless it is manifestly unfounded or excessive. If a fee applies or if we are unable to act on your request, we will explain the reasons. Before we proceed, we may ask you for identification to confirm that we are responding to the correct individual. Once verified, we will respond without undue delay and within one month, unless an extension is lawfully permitted.
Your rights include the following:
- Right of Access (Subject Access Request)
You have the right to request a copy of the personal data we hold about you. - Right to Rectification
If any information we hold is inaccurate or incomplete, you have the right to request that it be corrected. - Right to Erasure (“Right to be Forgotten”)
You may request the deletion of your personal data where there is no lawful reason for us to continue processing it. Certain legal or operational requirements may prevent us from deleting data immediately, in which case we will inform you. - Right to Object
You may object to our processing of your personal data where we rely on legitimate interests as our lawful basis. In some circumstances, we may continue processing if we can demonstrate compelling legitimate grounds, or if the processing is required for legal claims. - Right to Restrict Processing
You may ask us to restrict the processing of your data in specific circumstances, such as while we verify accuracy or where processing is being contested. - Right to Data Portability
You may request that certain personal data you have provided to us be transferred to another organisation in a structured, commonly used and machine‑readable format, where the legal criteria are met. - Right to Withdraw Consent
Where we rely on consent (for example, for marketing communications or optional cookies), you may withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of any processing carried out before withdrawal. - Right to Complain
If you are dissatisfied with how we handle your personal data, you have the right to raise a complaint with the Information Commissioner’s Office (ICO). Further information is available atwww.ico.org.uk.
10. Cookies
Our website uses cookies and similar technologies to ensure it functions properly, improve security, enhance your browsing experience and help us understand site usage. Some cookies are essential, while others such as analytics or marketing cookies are optional and used only with your consent.
When you visit our website, you will be prompted to manage your cookie preferences through our cookie banner. You may also control or delete cookies through your browser settings.
For full details on the types of cookies we use, how they function and how you can manage or withdraw consent at any time, please refer to our separate Cookie Policy, available on request.
11. Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, regulation or our data handling practices. The latest version will always be available on our website.
