1. Introduction

This Privacy Policy explains how personal data is collected, used, stored and shared when you interact with www.junctionautopark.co.uk (the “Website”), contact us, or use our services.

This Website is shared by two separate legal entities operating under the Junction Autopark brand. Depending on the nature of your interaction, one or both entities may process your personal data as either a sole data controller or joint data controllers as described below.

This policy is intended to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable Financial Conduct Authority (FCA) requirements.

2. Data Controllers and Joint Controller Arrangements

The following entities act as data controllers:

1. Autopark Limited T/A Junction Autopark

Registered Office: Junction Autopark, Tremarl Industrial Estate, Llandudno Junction, LL31 9PL Company Registration Number: 09412798 FCA Firm Reference Number: 803893 Email: sales@junctionautopark.co.uk Telephone: 01492 585000

2. Ian Thomson T/A Junction Autopark

Registered Office: Junction Autopark, 38 Chester Road, Winsford, CW7 2NQ FCA Firm Reference Number: 726321 Email: sales@junctionautopark.co.uk Telephone: 01606 554101

The entities may act as joint data controllers where they jointly determine the purposes and means of processing, including:

Operation and management of this Website
Handling customer enquiries
Vehicle sales and marketing activities
Lead allocation and customer relationship management

Where processing relates to a specific transaction or regulated activity (such as vehicle finance), the relevant entity will act as the sole controller.

The fact that these legal entities may act as joint controllers does not change your statutory rights. Should you wish to make a request to use any of these rights, which are described below, or you wish to make a claim as you believe we have mis-used your personal data you can contact us by using the contact details above. For administrative convenience, Junction Autopark has appointed a primary contact for data protection matters: Scott Kingsley, sales@junctionautopark.co.uk.

For the purposes of this Privacy Policy, Junction Autopark refers to both legal entities; Autopark Limited and Ian Thomson.

3. The Personal Data We Collect

3.1 Name and Contact Details

Full name
Address
Email address
Telephone number

3.2 Vehicle and Transaction Data

Vehicle of interest, purchased vehicles and previous vehicles
Part-exchange vehicle details
Test drive information
Purchase and payment details
Finance Application status (excluding full credit reference data held by lenders)

3.3 Financial and Regulatory Data

Information required for finance or insurance introductions; including but not limited to, address history, employment history and bank details
Proof of identity and address documentation
Anti-fraud or compliance checks
FCA-related records

3.4 Technical and Usage Data

IP Address
Browser and device type
Website usage data
Cookie and tracking data

3.5 Marketing and Communication Data

Communication preferences
Records of consent
Interaction with marketing campaigns

4. How We Collect Your Personal Data

We collect personal data through:

Online enquiry forms
Finance application forms
Test drive bookings
Telephone calls, emails, SMS and in-person interactions
Cookies and similar technologies
Third-party vehicle advertising platforms where you have consented to be contacted

5. How We Use Your Personal Data and the Lawful Basis for that Processing

We use your personal data for various purposes throughout your purchase and afterward. A description of the lawful basis we process data under are:

Consent: The individual has given clear, unambiguous consent for processing for a specific purpose
Contract: Processing is necessary for a contract with the individual, or to take steps at their request before entering a contract
Legal Obligation: Processing is necessary to comply with a law, such as tax laws or safeguarding requirements.
Legitimate Interest: Processing is necessary for the controller's or a third party's legitimate interests, unless these interests are overridden by the individual's fundamental rights and freedoms

The specific uses are detailed below, with the legal basis for that specific processing type.

Respond to sales and general enquiries (Contract)
Arrange test drives and vehicle viewings (Contract)
Sell vehicles and manage transactions (Contract) Introduce customers to finance lenders/intermediaries and insurance providers/intermediaries (Contract)
Meet FCA, legal and regulatory obligations (Legal Obligations)
Manage customer relationships and aftersales support (Contract) • Improve our services and Website (Legitimate Interest) • Send marketing communications (where permitted) (Consent) • Fraud Prevention (Legitimate Interest)

7. Finance and Insurance Introductions

Where you apply for or enquire about vehicle finance or insurance providers: • Personal data will be shared with authorised finance and/or insurance providers • Credit reference agencies may be used by those providers • We do not control, or influence, the outcome of finance decisions In any case, Junction Autopark is a credit broker and not a lender and is only able to assist with the arranging of certain insurance products through select, pre-approved, insurance providers. You should read the individual providers Privacy Policy for full details on their processing.

8. Sharing Your Personal Data

Your personal data may be shared: • Between the two data-controlling entities operating this Website • With finance providers, lenders, and insurers • With regulators, including the FCA • With service providers acting as data processors

9. Third-Party Processors

We use carefully selected third-party processors to support our operations, including: • Deal Management System – Dragon 2000 • Finance Providers – Motion Finance 2017 Limited • Vehicle Advertising Platforms – AutoTrader All processors are required to process data in accordance with applicable data protection law. None of the data we store or process is transferred outside of the UK. To the best of our knowledge, none of the providers that we use transfer out of the UK.

10. Data Retention

Personal data is retained only for as long as necessary, sales and transaction data will be retained for 6 years. Marketing data is held until consent is removed or data becomes inactive.

11. Your Data Protection Rights

You have the right to: • Access your personal data • Rectify inaccurate data • Request erasure • Restrict or object to processing • Data portability • Withdraw consent Requests can be made using the contact details in section 2.

12. Complaints

You can make a complaint to us via the contact details in section 2. However, if you are dissatisfied with how your complaint is handled, you may complain to the Information Commissioner’s Office

Website: www.ico.org.uk

Telephone: 03031231113