1. Who is the controller of your data
iRevolution Extra Limited (company number 12107897, FCA reference 912687) is the data controller in respect of personal data collected through the Car Finance UK website. We are registered with the Information Commissioner's Office under registration number [ICO registration number].
2. What personal data we collect
We collect: your name, contact details, date of birth, address history, employment status, income details, existing financial commitments, driving licence details, information about the car you are looking to finance, and technical data such as your IP address, browser type and pages visited.
3. Why we collect it
We use your personal data to: match you with lenders and intermediaries likely to accept you, submit finance quotations on your behalf where you have asked us to, communicate with you about your enquiry, comply with our legal and regulatory obligations, and improve our website and service.
4. Lawful bases
We process your personal data on one or more of the following lawful bases: your consent (which you may withdraw at any time); the performance of a contract or steps taken at your request prior to entering into a contract; our legitimate interests in operating and improving our credit-broking service; and to meet legal or regulatory obligations.
5. Who we share your data with
We may share your personal data with: lenders and intermediaries on our panel; [named third-party partners]; credit reference agencies (which perform the soft and full credit searches described in our Terms); fraud prevention agencies; our IT and hosting service providers acting as data processors on our behalf; and any regulator or court where we are legally required to do so.
6. Sending data outside the UK
Where any transfer of personal data outside the UK is necessary, we ensure appropriate safeguards are in place — for example the UK International Data Transfer Agreement or adequacy regulations.
7. How long we keep it
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, regulatory, tax or accounting requirements. In most cases this means we hold enquiry data for up to six years from the date of your last interaction with us.
8. Your rights
Under UK data protection law you have the right to access the personal data we hold about you, ask us to correct or delete it, object to or restrict our processing of it, and request the portability of it. You also have the right to withdraw consent where consent is the lawful basis for our processing, and to lodge a complaint with the Information Commissioner's Office (ico.org.uk).
9. Cookies and analytics
Our website uses cookies to keep the site working, to remember your preferences, and to measure how the site is used so we can improve it. For details, please see our Cookies notice.
10. Contact us about your data
To exercise any of your rights or ask a question about how we handle your data, please contact our Data Protection Officer at [DPO email address], or write to our registered office at [registered office address].