Privacy Policy

1. Introduction

InvestGenie Limited ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website invest-genie.com and use our car selection services.

This policy applies to all users of our website and services. By using our website and services, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Complete contact forms on our website
• Request consultations or services
• Subscribe to our newsletter
• Contact us by phone, email, or other means
• Engage with our services

This personal information may include:

• Name and contact details (email address, phone number, postal address)
• Vehicle preferences and requirements
• Financial information relevant to vehicle purchasing
• Communication preferences
• Any other information you choose to provide

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and usage patterns, including:

• IP address and location data
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses
• Device identifiers

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. For detailed information about our cookie practices, please see our Cookie Policy.

3. How We Use Your Information

We may use the information we collect for various purposes, including:

3.1 Service Provision

• Providing car selection and consultation services
• Responding to your inquiries and requests
• Arranging vehicle inspections and viewings
• Facilitating vehicle purchases and financing
• Providing ongoing customer support

3.2 Communication

• Sending service-related communications
• Providing updates on your requests
• Sending marketing communications (with your consent)
• Responding to customer service inquiries

3.3 Business Operations

• Improving our website and services
• Conducting market research and analysis
• Protecting against fraud and security threats
• Complying with legal obligations
• Resolving disputes and enforcing agreements

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data on the following legal bases:

4.1 Consent

Where you have given clear consent for us to process your personal data for specific purposes (e.g., marketing communications).

4.2 Contract Performance

Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.

4.3 Legitimate Interests

Where processing is necessary for our legitimate interests (such as improving our services) and your interests and fundamental rights do not override those interests.

4.4 Legal Obligation

Where processing is necessary to comply with legal obligations to which we are subject.

5. Information Sharing and Disclosure

We may share your information in the following circumstances:

5.1 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our website and providing our services, including:

• Vehicle dealers and auction houses
• Financing partners and brokers
• Vehicle inspection services
• Insurance providers
• IT and data hosting providers
• Payment processors
• Professional advisors (legal, accounting, etc.)

5.2 Legal Requirements

We may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations or court orders
• Protect our rights, property, or safety
• Protect the rights, property, or safety of others
• Investigate fraud or security issues

5.3 Business Transfers

In the event of a merger, acquisition, or sale of business assets, your information may be transferred as part of that transaction.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Secure data transmission using SSL encryption
• Regular security assessments and updates
• Access controls and authentication procedures
• Staff training on data protection principles
• Secure data storage and backup procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including:

• Service provision: For the duration of our service relationship and up to 7 years thereafter for business records
• Marketing communications: Until you unsubscribe or withdraw consent
• Legal obligations: As required by applicable laws and regulations
• Website analytics: Typically 2-3 years for statistical purposes

When personal information is no longer needed, we will securely delete or anonymise it.

8. Your Rights Under UK GDPR

Under UK GDPR, you have the following rights regarding your personal data:

8.1 Right of Access

You have the right to request copies of your personal data that we hold.

8.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure

You have the right to request deletion of your personal data in certain circumstances.

8.4 Right to Restrict Processing

You have the right to request restriction of processing your personal data in certain circumstances.

8.5 Right to Data Portability

You have the right to request transfer of your personal data to another organisation in certain circumstances.

8.6 Right to Object

You have the right to object to processing of your personal data for direct marketing purposes or based on legitimate interests.

8.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details provided in Section 12.

9. International Data Transfers

Your personal information may be transferred to and processed in countries outside the UK. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the UK government
• Standard contractual clauses approved by UK authorities
• Other appropriate safeguards recognised under UK law

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last updated" date at the top of this policy
• Sending email notification for significant changes (where we have your email address)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Complaints

If you believe that your data protection rights have been breached, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues.