Privacy Policy

1Who we are

Vehicle Consulting East Anglia is a trading name of C&N Consulting Services Ltd, an independent vehicle leasing broker. We are an FCA-authorised and regulated credit broker (Firm Reference Number: 1029606) and a member of the British Vehicle Rental and Leasing Association (BVRLA).

For the purposes of data protection law, C&N Consulting Services Ltd is the "data controller" of the personal information you provide to us or that we collect about you.

2Information we collect

We collect personal data in a number of ways, depending on how you interact with us:

Information you give us directly

• Contact details, such as your name, business name, job title, email address, telephone number and postal address
• Enquiry and quote details, including vehicle preferences, budget, mileage requirements and business information
• Financial and credit information needed to arrange vehicle finance, where relevant
• Correspondence you send us, including emails, call recordings and messages via our website forms

Information we collect automatically

• Technical data such as IP address, browser type, device information and general location
• Usage data, including pages visited, time spent on our site and referring website
• Cookie data, as explained in the Cookies section below

Information from third parties

• Credit reference agencies, where required to assess a finance application
• Vehicle manufacturers, funders and leasing companies involved in fulfilling your order
• Publicly available business information, such as Companies House records

3How we use your information

We use your personal data to:

1. Respond to enquiries and provide vehicle leasing quotations
2. Arrange and manage business contract hire, van leasing, salary sacrifice and fleet management services
3. Carry out credit and affordability checks where required for a finance application
4. Communicate with you about your order, contract or account, including delivery and renewal updates
5. Comply with our legal, regulatory and FCA obligations, including record-keeping requirements
6. Improve our website, services and customer experience
7. Send you marketing communications where you have consented to receive them, or where permitted by law
8. Prevent fraud and protect the security of our systems and customers

4Our legal basis for processing

Under UK GDPR, we rely on the following legal bases to process your personal data:

5Sharing your information

We do not sell your personal data. We may share it with:

• Vehicle funders, leasing companies and manufacturers, in order to arrange and deliver your vehicle
• Credit reference and fraud prevention agencies, where a finance application is involved
• Our regulators, including the Financial Conduct Authority, where required by law
• IT, hosting and communication service providers who support our day-to-day operations, under appropriate confidentiality and data processing agreements
• Professional advisers such as accountants, auditors and solicitors, where necessary
• Law enforcement or other authorities where we are legally required to do so

Any third party we share data with is required to keep it secure and to use it only for the purposes we specify.

6Cookies & tracking

Our website uses cookies and similar technologies to make the site work properly, understand how visitors use it, and, where you consent, to show relevant content. This includes essential cookies required for core functionality, analytics cookies that help us understand site performance, and third-party embeds such as our Google Reviews widget.

You can control or disable cookies through your browser settings at any time. Disabling certain cookies may affect how parts of our website function.

7How long we keep data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. As an FCA-authorised credit broker, we are typically required to retain records relating to finance applications and regulated activities for a minimum period set by our regulator, generally several years after a contract ends. Enquiry data that does not proceed to a customer relationship is retained for a limited period before being securely deleted.

8Your rights

Under UK data protection law, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data, in certain circumstances
• Request that we restrict or stop processing your data, in certain circumstances
• Request a portable copy of data you have provided to us
• Object to processing based on legitimate interests or for direct marketing
• Withdraw consent at any time, where processing is based on consent

9Keeping your data secure

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. This includes secure storage systems, access controls, and staff training on data protection. While we take security seriously, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10International transfers

Your personal data is generally processed and stored within the UK. Where a service provider we use is based outside the UK, we ensure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement or an adequacy decision, to ensure your data continues to receive an equivalent level of protection.

11Marketing communications

We will only send you marketing communications where you have given consent, or where you are an existing customer and we are marketing similar products or services, in line with applicable law. You can opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us directly. Opting out of marketing will not affect service communications relating to an active enquiry or contract.

12Children's privacy

Our services are intended for businesses and individuals over the age of 18. We do not knowingly collect personal data from children, and our website is not directed at children.

13Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal or regulatory reasons. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14Contact us & complaints

If you have any questions about this privacy policy, or wish to exercise any of your data protection rights, please get in touch. If you are unhappy with how we have handled your personal data, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent regulator for data protection, at ico.org.uk.