Privacy Policy

Introduction

J & A Rigbye & Sons Ltd ("we", "us" or "our") is committed to protecting your privacy and handling your personal information fairly, lawfully and transparently.

This Privacy Notice explains what personal information we collect, how we use it, why we use it, who we may share it with, how long we keep it and the rights you have in relation to your information.

It applies when you visit our website, contact us, enquire about or purchase a vehicle, arrange a test drive, use our servicing or repair facilities, enquire about finance, make a warranty claim, contact us with a complaint or otherwise interact with J & A Rigbye & Sons.

J & A Rigbye & Sons is an authorised Citroën retailer and repairer and operates within the Stellantis network. In providing our services, we may work with Citroën, Stellantis group companies, finance providers, warranty providers and other organisations that support the products and services we provide.

Who We Are

J & A Rigbye & Sons Ltd is the data controller responsible for your personal information for the purposes described in this Privacy Notice.

Our registered address is:

J & A Rigbye & Sons Ltd

98 Towngate

Eccleston

Chorley

Lancashire

PR7 5QS

Email: privacy@rigbyes.co.uk

If you have any questions about this Privacy Notice or how we use your personal information, please contact us using the details above.

The Information We Collect

The information we collect depends on how you interact with us.

When you enquire about a vehicle, request a test drive, contact us or use our website, we may also collect information relating to your vehicle, including registration details, vehicle identification details, service and repair history, warranty information and information relating to recalls or safety campaigns.

If you ask us to arrange finance, we may collect and pass information to the relevant finance provider to enable them to assess and process your application. This may include employment, financial and identification information. Finance providers will provide their own privacy information explaining how they process your information, including any credit, affordability or other checks they carry out.

We may also collect information relating to communications with you, including records of enquiries, appointments, complaints and correspondence.

When you visit our premises, CCTV may collect images of you for security, crime prevention and the protection of our customers, employees and property.

When you use our website, certain technical information may be collected automatically. This can include your IP address, browser type, device information, pages visited and cookie preferences. Further information is provided in our Cookies section below.

Where We Obtain Your Information

We will normally collect personal information directly from you. However, we may also receive information from other organisations where this is necessary to provide our services or operate our business.

Depending on how you interact with us, this may include information received from:

Citroën and other relevant Stellantis companies;
finance providers;
warranty and roadside assistance providers;
Motability or other organisations where applicable;
insurers;
vehicle manufacturers and suppliers;
website and lead-generation platforms;
service providers acting on our behalf; and
other organisations where you have authorised the sharing of your information or where we have a lawful reason to receive it.

Where we receive personal information from another organisation, we will handle it in accordance with applicable data protection legislation and this Privacy Notice where appropriate.

How We Use Your Information

We use your personal information where it is necessary to provide the products and services you have requested and to operate our dealership.

This may include:

responding to vehicle and service enquiries;
arranging test drives and appointments;
processing vehicle purchases and sales;
arranging vehicle servicing, repairs and MOT-related services;
maintaining vehicle and service records;
administering warranties and warranty claims;
dealing with vehicle recalls and safety campaigns;
arranging finance where requested;
communicating with you about your vehicle or an appointment;
dealing with complaints and customer enquiries;
providing customer support;
administering payments and maintaining financial and accounting records;
complying with legal and regulatory requirements;
preventing and detecting fraud and other unlawful activity;
protecting our premises, employees, customers and property;
carrying out customer satisfaction activities;
improving our products and services; and
sending marketing communications where permitted by law.

We may also use information in an aggregated or anonymised form for business analysis, reporting and service improvement. Information used in this way will not identify you personally.

Our Lawful Basis for Using Your Information

Data protection law requires us to have a lawful basis for processing personal information. The lawful basis we rely on will depend on the purpose for which the information is being used.

Contract

We may process your information where this is necessary to enter into or perform a contract with you.

For example, this may apply when you purchase a vehicle from us, arrange servicing or repairs, or use other services that we have agreed to provide.

It may also apply when we need to take steps at your request before entering into a contract.

Legal obligations

We may process your information where necessary to comply with a legal or regulatory obligation.

This may include requirements relating to accounting and taxation, consumer protection, vehicle safety, recalls, financial regulations and other legal or regulatory requirements applicable to our business.

Legitimate interests

We may process your information where this is necessary for our legitimate interests, provided that those interests are not overridden by your rights and interests.

Our legitimate interests may include:

managing and administering our dealership;
maintaining appropriate customer and vehicle records;
managing our relationship with customers;
dealing with complaints and enquiries;
preventing fraud and crime;
protecting our premises, employees, customers and property;
improving our products and services;
maintaining appropriate business records;
managing supplier and manufacturer relationships; and
conducting appropriate marketing where permitted by law.

Where we rely on legitimate interests, we consider the potential impact on your privacy and ensure that the processing is proportionate.

Consent In certain circumstances, we may rely on your consent to process your information.

Where we rely on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Finance Applications

If you ask us to arrange vehicle finance, we may collect information from you and pass it to the relevant finance provider so that they can assess and process your application.

The finance provider may carry out credit, affordability, identity or other checks as part of its assessment.

The finance provider will be responsible for explaining how it processes your information and may provide you with its own privacy notice.

We do not make the finance provider's lending decisions.

Sharing Your Information

We may share your personal information with organisations where this is necessary to provide our services, operate our business or comply with our legal obligations.

Depending on the circumstances, these organisations may include:

Citroën and relevant Stellantis group companies;
vehicle manufacturers;
finance providers;
warranty administrators and providers;
roadside assistance providers;
insurers;
Motability and other relevant organisations;
vehicle registration and related service providers;
IT and software providers;
website and hosting providers;
marketing and communication service providers;
professional advisers, including accountants, auditors and legal advisers; and
law enforcement agencies, regulators or other authorities where we are legally required or permitted to do so.

For example, information may be shared with Citroën or relevant Stellantis companies for purposes including vehicle administration, warranty, recalls, customer support, manufacturer programmes, customer satisfaction activities and service improvement.

Where another organisation processes information on our behalf, we take appropriate steps to ensure that your information is handled securely and in accordance with applicable data protection requirements.

We do not sell your personal information to third parties.

International Transfers

Some organisations that provide services to us or to the wider Stellantis network may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will ensure that appropriate safeguards are in place where required by UK data protection law.

These safeguards may include an adequacy decision or appropriate contractual or other safeguards recognised under applicable data protection legislation.

Marketing Communications

We may contact you about products, services, offers, promotions, vehicle information, servicing, service plans, dealership events and other information that may be relevant to you.

We will only send electronic direct marketing, such as marketing emails or text messages, where we have a lawful basis to do so and where any consent required under applicable electronic marketing rules has been obtained.

In certain circumstances, we may contact existing customers about similar products or services where this is permitted by law.

You can opt out of marketing communications at any time.

You can do this by using the unsubscribe or opt-out instructions included in our communications or by contacting us at:

privacy@rigbyes.co.uk

You have an absolute right to object to your personal information being used for direct marketing. If you object, we will stop using your information for direct marketing purposes.

Opting out of marketing will not affect communications that we need to send you for contractual, legal, safety, servicing, warranty or other legitimate purposes.

Customer Satisfaction and Surveys

We may contact you following a vehicle purchase, service, repair or other interaction with us to obtain feedback about the service we have provided.

This may be carried out by us, Citroën, Stellantis or an organisation acting on behalf of us or the manufacturer.

Where appropriate, information collected through customer satisfaction activities may be used to monitor and improve customer service.

Cookies and Website Analytics

Our website uses cookies and similar technologies.

Some cookies are essential for the website to operate and cannot be switched oƯ through our cookie settings.

Other cookies, including certain analytics and marketing cookies, may only be used where you have provided the required consent. Cookies may be used to understand how visitors use our website, remember preferences, improve functionality and, where permitted, support relevant advertising and marketing.

You can manage or change your cookie preferences through our website's cookie settings.

CCTV

We operate CCTV at our premises for purposes including:

preventing and detecting crime;
protecting our customers and employees;
protecting our vehicles, buildings and other property;
investigating incidents; and
assisting law enforcement or other relevant authorities where appropriate.
Access to CCTV footage is restricted to authorised individuals and it is only retained for as long as reasonably necessary, unless footage needs to be retained for an incident, investigation, insurance claim, legal matter or other legitimate purpose.

How Long We Keep Your Information

We retain personal information only for as long as necessary for the purposes for which it was collected and to meet our legal, regulatory, contractual and legitimate business requirements.

Different types of information may be retained for different periods.

For example, vehicle sales, servicing, warranty and accounting records may need to be retained for a number of years to meet legal, tax, manufacturer, warranty and business requirements.

Customer enquiry and marketing information will be reviewed periodically and retained only for as long as there is a legitimate reason or lawful basis to retain it.

CCTV footage will normally be retained for a limited period unless it is required for an incident, investigation, insurance claim or legal matter.

When personal information is no longer required, we will securely delete, anonymise or otherwise dispose of it in accordance with our procedures.

Keeping Your Information Secure

We take the security of your personal information seriously.

We have appropriate technical and organisational measures in place to protect personal information against unauthorised access, accidental loss, misuse, alteration or disclosure.

Access to personal information is restricted to people who need it for legitimate business purposes.

While no electronic system or method of transmitting information over the internet can be guaranteed to be completely secure, we regularly review our systems, procedures and security measures to maintain an appropriate level of protection.

Automated Decision-Making and Profiling

We do not generally make decisions about you based solely on automated processing that produce legal or similarly significant effects.

Where a third-party organisation, such as a finance provider, uses automated decision-making, credit scoring or profiling as part of its services, that organisation will provide its own information about how the process works and your rights in relation to it.

Your Rights Under

UK data protection legislation, you have a number of rights in relation to your personal information.

Depending on the circumstances, these include the right to:

ask for a copy of the personal information we hold about you;
ask us to correct inaccurate or incomplete information;
ask us to delete your personal information in certain circumstances;
ask us to restrict how we use your information in certain circumstances;
object to certain types of processing, including direct marketing;
request the transfer of certain information to you or another organisation where the right to data portability applies; and
withdraw consent where we are relying on your consent to process your information.

These rights are subject to certain conditions and exemptions under data protection legislation.

If you wish to exercise one of your rights, please contact us using the details below. We may need to verify your identity before dealing with your request.

Subject Access Requests

You have the right to request a copy of the personal information we hold about you. This is known as a Subject Access Request or "SAR".

You can make a request by contacting:

privacy@rigbyes.co.uk

There is normally no charge for making a request, although data protection law allows us to charge a reasonable fee or refuse a request in certain circumstances, for example where a request is manifestly unfounded or excessive.

Complaints

If you have any concerns about how we have handled your personal information, we would encourage you to contact us first so that we can investigate and try to resolve the matter.

You also have the right to complain to the Information Commissioner's Office (ICO), which is the UK's independent regulator for data protection.

The ICO's website is:

Information Commissioner's Office (ICO)

The ICO's postal address is:

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Contact Us

If you have any questions about this Privacy Notice, wish to exercise one of your data protection rights, make a Subject Access Request, update your information or raise a privacy-related concern, please contact: