Legal · Privacy Policy
Privacy Policy
How DriveSafe Warranty Ltd collects, uses, and protects your personal data in accordance with UK GDPR.
This Privacy Policy explains how Drive Safe Warranty Ltd collects, uses, shares and protects your personal data. It is issued under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
SECTION 01
Who we are (data controller)
Drive Safe Warranty Ltd is the data controller for the personal data described in this notice. Our ICO registration number is ZC103601.
Drive Safe Warranty Ltd · 135 Park Road, Peterborough PE1 2UD
Email for data protection enquiries: compliance@drivesafewarranty.co.uk
Phone: 01375 470 585
SECTION 02
What personal data we collect
Depending on how you use our service, we collect:
Identity data — name, date of birth, title.
Contact data — address, email, phone.
Vehicle data — registration, make, model, mileage, MOT and service records.
Transaction data — plan purchased, payment method (Stripe / Bumper / GoCardless), payment status.
Claim data — fault details, diagnostics, estimates and documents you upload to your Member’s Hub.
Technical data & usage data — IP address, browser and device type, pages visited, claims and support interactions.
Marketing preferences — your consent choices for marketing communications.
We do not collect any special-category data (e.g. health, religion) and we do not knowingly collect data from children under 18.
SECTION 03
Where your data comes from
We collect data directly from you (on our website, in your Member’s Hub, or by phone), from a supplying dealer where you bought your plan at the point of sale (the dealer shares your details to register your plan), and from the DVLA vehicle-lookup service at checkout.
SECTION 04
Lawful bases for processing
Performance of a contract — to set up and administer the plan you bought and to handle claims.
Legitimate interests — to operate, secure and improve our business, where not overridden by your rights.
Legal obligation —to meet UK statutory requirements (e.g. tax records, consumer law).
Consent — for optional marketing and non-essential cookies; you may withdraw consent at any time.
SECTION 05
Who we share your data with
We share personal data only with the parties below, each bound by a written dataprocessing agreement (or acting as an independent controller where stated):
Processor / Joint controller | Role | Region |
|---|---|---|
Innovative Network (Pvt.) Ltd | Website operations, infrastructure, technical support | International transfer under UK IDTA / Addendum to EU SCC; documented Transfer Risk Assessment on file. |
TNS365 | Breakdown & recovery provider (Gold, Platinum, EV & Hybrid and Commercial; optional add-on on Silver) | UK |
Moneypenny | Outsourced telephone answering for inbound calls | UK |
Stripe UK Ltd | Card payment processing | UK / EEA |
Bumper International Ltd | Monthly instalment finance (separate controller for credit decisions) | UK |
GoCardless Ltd | Direct Debit processing | UK / EEA |
Transactional email provider | Confirmations, authorisations and claim updates | UK / EEA |
Cloudflare | Website security and bot mitigation | Global (UK GDPR SCC in place) |
DVLA (lookup service) | Vehicle registration verification at checkout | UK (public-sector data) |
Supplying dealers | Where you bought at the point of sale, to register and service your plan | UK |
Claims & repairs: where you make a claim, we share the necessary details with the VATregistered garage carrying out the diagnosis or repair.
International transfers: Where personal data is transferred outside the UK to any of our processors, the transfer is made under the UK International Data Transfer Agreement (IDTA) or under the UK Addendum to the EU Standard Contractual Clauses, with a documented Transfer Risk Assessment on file.
SECTION 06
How long we keep your data
Plan & claims data — for the life of your plan plus 7 years, to handle claims, complaints and legal queries.
Transaction & accounting data — 6 years after the end of the relevant tax year (HMRC requirement).
Marketing data — until you withdraw consent, or 3 years after your last interaction.
Web analytics — up to 26 months.
SECTION 07
Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent. To exercise any right, email compliance@drivesafewarranty.co.uk or write to our registered office. We respond within one calendar month and do not charge a fee unless a request is manifestly unfounded or excessive.
You may also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
SECTION 08
Security
We use appropriate technical and organisational measures, including encryption in transit (TLS 1.2+), encryption at rest for sensitive fields, least-privilege access controls, regular vulnerability scanning and supplier due diligence.
SECTION 09
Changes to this notice
We may update this Privacy Policy from time to time. The current version is published here with a clear effective date.
