Privacy & Cookie Notice

How we handle your personal data under the UK GDPR and Data Protection Act 2018.

1. Who we are

Hertz Car Sales UK ("we", "us") is the data controller for personal data collected through this website. This is a demonstration site; in production the controller details, company registration number and Data Protection Officer contact would appear here, together with the ICO registration reference.

2. What data we collect

  • Contact details you submit in enquiry, Rent2Buy and test-drive forms (name, email, phone).
  • Vehicle preferences, trade-in details (registration, mileage, condition) and finance inputs.
  • Reservation and optional account/identity verification information.
  • Technical data such as device type and pages viewed, only where you consent to analytics.

3. Why we use it and our lawful basis

  • Contract (Art. 6(1)(b)) — handling reservations, test drives, warranty and part-exchange requests you ask for.
  • Legitimate interests (Art. 6(1)(f)) — responding to enquiries, preventing fraud and improving our stock listings.
  • Consent (Art. 6(1)(a)) — analytics and marketing cookies, and optional marketing emails. You can withdraw consent at any time.
  • Legal obligation (Art. 6(1)(c)) — consumer credit, anti-money-laundering and vehicle sale record-keeping.

4. Who we share data with

Finance applications are shared with our panel of lenders (we act as a credit broker, not a lender). We also use service providers for hosting, email delivery and identity checks, all bound by written data-processing terms. We never sell your personal data.

5. International transfers

Where a provider processes data outside the UK/EEA, we rely on UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

6. How long we keep it

  • Unconverted enquiries and valuations: 12 months.
  • Completed vehicle sales and finance records: 6 years (legal and tax requirements).
  • Cookie consent record: 12 months, then we ask again.

7. Your rights

Under UK GDPR you have the right to:

  • access a copy of your data;
  • have inaccurate data corrected;
  • request erasure ("right to be forgotten");
  • restrict or object to processing, including direct marketing;
  • data portability;
  • withdraw consent at any time;
  • complain to the Information Commissioner's Office (ico.org.uk).

To exercise any right, contact us through the enquiry form. We respond within one month.

8. Cookies

We set strictly necessary (functional) cookies by default — these keep your warranty, finance and reservation selections working during a visit and cannot be switched off. Analytics and marketing cookies are off unless you opt in.

CategoryPurposeDefault
Strictly necessarySession state, security, consent recordAlways on
AnalyticsAnonymous usage statisticsOff
MarketingAdvertising measurementOff

9. Security

Data is transmitted over HTTPS and access is limited to staff who need it. This demonstration site stores your selections in your own browser session only.

10. Changes to this notice

Last updated 22/08/2026. We will post any changes on this page.