NextGear Capital UK Ltd Privacy Policy
About us
NextGear Capital UK Limited (company number 08696123) (“NextGear Capital”) is the data controller in respect of any personal information to which this privacy policy applies. Data Protection Registration Number is ZA038231 and you can contact NextGear Capital at:
NextGear Capital UK Ltd
NextGear House
Kingsfield Court
Chester Business Park
Chester
CH4 9RE
We are also registered as a branch in Ireland (registered number 908144) with its address at
25/28 North Wall Quay
Dublin 1
NextGear Capital is part of the Cox Automotive UK group of companies (“We”, “Us”, and “Our”). The Cox Automotive UK Group consists of the companies listed below. References in this privacy policy to the ‘Cox Automotive Group’ should be taken to include all of these companies:
- Cox Automotive UK Ltd
- Cox Automotive Retail Solutions Ltd
- Manheim UK Ltd
- Nextgear Capital UK Ltd
- Motors.co.uk Ltd
- Dealer Auction Ltd
- Money4yourmotors.com Ltd
- Movex Logistics Ltd
- Kingfisher Systems Ltd
- RMS Automotive
- Modix UK Ltd
If you wish to contact Our Head of Privacy & Data Protection, you can email dataprotection@manheim.co.uk.
How will we use your information?
NextGear Capital collects and uses personal data relating to you for the following purposes:
1. To enable Us to fulfil contracts entered into between you and NextGear Capital, including the provision of any services that form part of those contracts.
2. To carry out credit checks and to monitor for, detect and prevent fraud.
3. To administer your account, including keeping you informed of changes to Our products and services and responding to your queries, complaints and other correspondence.
4. To carry out research and statistical analysis for the purposes of improving and enhancing Our services.
5. To monitor use of Our website and to collate, analyse and report on aggregate, anonymised data derived from personal data of those who use Our site.
6. To provide you with offers about Our products and services that you request from Us or which We feel may be of interest to you, unless you have told Us not to contact you about these offers.
7. We process personal data relating to how you manage your account and your account activity for the purposes of assessing the level of business risk. This includes sharing it with other companies in the Cox Automotive UK Group.
8. We may monitor and record calls, emails and SMS messages between you and Us for quality control, for training purposes, to improve Our services and to keep a record of what was agreed.
Grounds on which We process your personal data
NextGear Capital processes your personal data on the following grounds:
- Where processing falls within paragraph 1) above, this personal data is processed because the processing is necessary for the performance of a contract that you have entered into with NextGear Capital.
- Where processing falls within paragraph 2) above and relates to the performance of credit checks, this processing is undertaken on the grounds of legitimate business interests pursued by NextGear Capital. It is within the legitimate interests of NextGear Capital to conduct such checks so that We can make informed decisions and reduce business risk.
- Where processing falls within paragraph 2) above and relates to monitoring, detecting and preventing fraud this will be undertaken because it is necessary for compliance with legal obligations imposed on NextGear Capital by anti-money laundering regulations. To the extent that processing of this nature is not necessary for compliance with such legal obligations, it is undertaken on the grounds of legitimate interests pursued by NextGear Capital. It is within Our legitimate interests to protect ourselves, clients and other members of the Cox Automotive UK Group from risk and loss which may be incurred as a result of fraud and money laundering.
- Where processing falls within paragraph 3) this will be undertaken on the grounds that it is necessary for the performance of the contract that you have entered into with NextGear Capital. Where this is not the case, it will be undertaken on the grounds that it is within the legitimate interests of NextGear Capital to ensure proper, efficient and correct oversight of your account with Us.
- To the extent that processing under points 4) and 5) above involve processing personal data, this is undertaken on the basis of legitimate interests. It is in NextGear Capital’s legitimate interests to be able to undertake research into the operation and use of Our website and to enable Us to improve Our services.
- Personal data processed under point 6) above is processed on the grounds of you having provided your consent for Us to send you those communications.
- Personal data processed under point 7) above is processed on the grounds of legitimate interests. It is within the legitimate interests of NextGear Capital and the other companies in the Cox Automotive UK Group to ensure they are aware of the risks posed to it by going into business with certain clients or customers or to share information relating to account activity which may give rise to such concerns.
How do we protect your information?
The security of personal data is important to Us. We maintain appropriate administrative, technical and physical safeguards to protect personal data against accidental or unlawful destruction, accidental loss, alteration, unauthorised disclosure or access, use and all other unlawful forms of processing of the personal data in our possession.
Disclosures and Transfers
NextGear Capital may disclose your personal information on to third parties for the following purposes:
- Selected approved sources i.e. vehicle auctions, online vehicle sellers, vehicles wholesalers, or dealers, to enable you to use your NextGear Capital stocking limit.
- Google – as set out in Our Cookie Policy.
- Where material is uploaded or posted by you on Our website violates the rights of a third party.
- Where it is necessary to do so to provide the products and services chosen by you.
- Where We have your consent to do so.
- Service Providers: NextGear Capital contracts with service providers (which may include Our affiliates) to perform certain functions carried out on Our behalf as Our agent, and only for the purpose of performing those functions. They are prohibited from using or disclosing your personal information for other purposes.
- Credit Reference Agencies: We use credit reference agencies (“CRAs”) to assess your application and verify your identity to prevent crime and money laundering. We may also make periodic searches at CRAs in order to refresh Our records and manage your Stocking Plan with Us. Information provided on applications will be sent to CRAs and will be recorded by them. When CRAs received a search request from Us they will place a search footprint on your credit file that may be seen by other lends. They supply to Us both public (including the electoral register) and shared credit and fraud prevention information. Where you have a Stocking Plan with Us, We will give details of the Stocking Plan(s) and how you manage it/them to CRAs. If you do not repay your Stocking Plan in full and on time, CRAs will record the outstanding debt. This information may be supplied to other organisations by CRAs to perform similar checks and to trace your whereabouts and recover debts that you owe. Records remain on the file for 7 years after they are closed, whether settled by your or defaulted. You can contact the CRAs currently operating in the UK; the information they hold may not be the same so it is worth contacting them all. They will charge you a small fee to provide the information. The CRA We use in Ireland is:
- Experian Ireland Limited, Newenham House, Northern Cross, Malahide Road, Dublin 17 or log on to www.experian.ie.
- Experian Ireland Limited, Newenham House, Northern Cross, Malahide Road, Dublin 17 or log on to www.experian.ie.
- Fraud Prevention: If false or inaccurate information is provided, including in relation to a person’s identity and fraud is suspected or identified, details about this information including your personal information, will be passed to fraud prevention agencies. Law enforcement agencies may access and use this information. We and other organisations may also access and use this information to prevent and detect crime, fraud, and money laundering, for example when: checking details on applications for credit and credit related and other facilities; managing Stocking Plans or other facilities; recovering debt; checking details on proposals and claims for all types of insurance. We and other organisations may access and use from other countries the information recorded by fraud prevention agencies. For further details of the relevant fraud prevention agencies please contact Us as described at the end of this privacy policy.
- If We sell or buy any business or assets. In which case, We may disclose your personal information to the prospective seller or buyer of such business or assets;
- If We are under a duty to disclose or share your personal information in order to comply with any legal obligation, or in order to comply with Our Terms of Use and other agreements We have with you; or to protect the rights, property, or safety of NextGear Capital, Our customers or others;
- To vehicle auctions, online vehicles sellers, vehicle wholesalers, car finance providers, or dealers, for the purposes of cross matching data;
- To vehicle auctions, online vehicles sellers, vehicle wholesalers, car finance providers, or dealers, for marketing purposes, but only where you have told Us you are happy for Us to do so.
The information that We collect from you may be transferred to a destination outside the European Economic Area (“EEA”) to a country with laws which does not the same level of data protection as you enjoy under the UK’s Data Protection Act 1998. Your personal information may also be processed by staff operating outside the EEA who work for Us or for one of Our group companies or suppliers. Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details (where provided by You) and the provision of support services. We will take all reasonable steps to ensure that your data is related securely and in accordance with this privacy policy.
Your rights in relation to your personal information
You have the following rights in relation to the personal information NextGear Capital processes relating to you. Where you exercise these rights, NextGear Capital will provide information to you as to what action has been taken, if any, within 30 calendar days of receipt of your request. Where no action has been taken, NextGear Capital will explain Our reasons why.
Considering the complexity and number of requests, it may take NextGear Capital up to 90 calendar days to respond to your request. Where NextGear Capital intend to extend the deadline for responding, you will be informed within 30 calendar days of receipt of your request.
Right of Access
You have the right to request access to the personal information that NextGear Capital hold about you. If you would like a copy of some or all of the personal data We hold about you, please contact Us at the address above or marketing@nextgearcapitalc.co.uk. In order to process your request, We may make a charge of €10 to cover any administrative costs. We may also ask for proof of your ID.
Rights in relation to inaccurate personal information
Where personal information that NextGear Capital holds about you is inaccurate, you have the right to request that those inaccuracies are rectified. Taking into account the purposes for which the personal information is processed, you also have the right to have incomplete personal information about you completed.
Right to erasure
In certain limited circumstances, you have the right to request that NextGear Capital erase personal information relating to you that NextGear Capital hold. This right only applies if any one of the following circumstances applies:
- Where NextGear Capital no longer require the personal information for the purpose(s) for which it was obtained or otherwise used.
- Where the processing is based on your consent, that consent has been withdrawn and there is no other legal ground for processing.
- Where you have exercised your right to object to the processing and there are no overriding legitimate grounds for the processing.
- Where you have exercised your right to object to the use of your personal information for direct marketing purposes.
- Where the personal information has been unlawfully processed.
- Where NextGear Capital is required to erase the personal information in order to comply with a legal obligation.
The right does not apply where the processing of your personal information is necessary:
- For compliance with a legal obligation requiring NextGear Capital to process your personal information or where the processing is necessary for the performance of a task carried out in the public interest
- For the establishment, exercise or defence of legal claims.
Right to restriction of processing
You have the right to request that NextGear Capital restrict the processing of your personal information in the following circumstances:
- Where you have contested the accuracy of the personal information. In this case the processing of the personal information will be restricted for a period which enables NextGear Capital to verify the accuracy of the personal information in question.
- Where the processing of the personal information is unlawful and you have objected to the information being erased and have instead requested the restriction of its use.
- Where NextGear Capital no longer needs the personal information for the purposes set out in part 2 above but you require them for establishing, exercising or defending legal claims.
- Where you have objected to the processing of your personal information as set out in Right to object to processing In this case, processing of your personal information will be restricted pending verification of whether Our legitimate grounds for continuing to process your personal information override your grounds for objecting.
Where processing of your personal information is restricted for any of the reasons above NextGear Capital will not process it, with the exception of storage, unless:
- You have provided your consent,
- For the establishment, exercise or defence of legal claims,
- For the protection of the rights of another natural or legal person, or
- For reasons of important public interest.
Where NextGear Capital have agreed to restrict the processing of your personal information, We will write to you to inform you that We will be lifting that restriction prior to doing so.
Right to data portability
This right only applies in the following circumstances:
- Where the personal information in question consists of information you have provided to NextGear Capital,
- Where the grounds for processing the personal information stated in section 2 above are consent, explicit consent or for the performance of a contract or to take steps at your request prior to entering into a contract, and
- The processing of the personal information is carried via automated means.
Where this right applies, you have the right to receive your personal information in a structured, commonly used and machine-readable format. You also have the right to transmit that information to another data controller or, where possible, directly from NextGear Capital to another controller.
Right to object to processing
You have the following rights in relation to objecting to the processing of your personal information by NextGear Capital:
- You have the right to object at any time, on grounds relating to your particular situation, to the processing, and
- The right to object specifically to the processing of your personal information for direct marketing purposes.
Right to object to processing
You have the right to object to the processing of your personal information at any time, on grounds relating to your particular situation. This only applies where the grounds for processing are:
- The processing is necessary for the purposes of legitimate interests pursued by the data controller or by a third party, or
- Processing is necessary for the performance of a task carried out in the public interest
Right to object to processing for the purposes of direct marketing
You have the right to object specifically to the processing of your personal information for the purposes of direct marketing. If you object to the processing of your personal information in this way, then NextGear Capital will no longer process it for that purpose.
Rights in relation to automated decision making & profiling
You have the right not to be subjected to a decision based solely on automated processing, including profiling, which would legally affect you or significantly affect you. However, this right will not apply if the decision:
- Is necessary for the entering into, or performance of, a contract between you and NextGear Capital
- Is authorised by or under any law to which NextGear Capital is subject, or
- Is based on your explicit consent.
Right to complain to the Information Commissioner’s Office
Where you believe that NextGear Capital has failed to properly comply with its obligations in respect of your personal information, including your rights as set out sections: Your rights in relation to your personal information; Right of Access; Rights in relation to inaccurate personal information; Right to erasure; Right to restriction of processing; Right to data portability; Right to object to processing; right to object to processing for the purposes of director marketing; and Rights in relation to automated decision making & profiling above, you can complain to the Office of the Data Protection Commissioner. You can find more information about their role and how to submit a complaint on their website: www.dataprotection.ie.
Cookies and other tracking technologies
We use cookies and other tracking technologies on the Website. To find out more about the cookies and other tracking technologies We use and to manage your preferences, please see our Cookie Policy.
Changes to this privacy policy
NextGear Capital may amend this privacy policy from time. Future updates will be posted on Our website or sent to you via email. If you do not agree to any of the changes, please do not continue to use the website.
Last updated: 14th May 2018