Privacy Policy

1. Introduction

Welcome to iBuyAnyMotor.com ("we", "us", "our", or the "Company"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://ibuyanymotor.com and use our vehicle purchasing services.

By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

We collect various types of information in connection with the services we provide. This information enables us to deliver, improve, and personalize our services to you.

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Request a vehicle valuation - Registration number, vehicle make, model, year, mileage, condition details
• Contact us - Name, email address, phone number, message content
• Schedule an appointment - Preferred date, time, location (home or work address)
• Complete a vehicle sale - Full legal name, address, date of birth, bank account details, national insurance number (if applicable), photo identification (driving license, passport)
• Subscribe to communications - Email address, communication preferences

2.2 Vehicle Information

To provide our services, we collect comprehensive vehicle information including:

• Vehicle Registration Number (VRN)
• Make, model, and variant
• Year of manufacture
• Current mileage
• Service history and MOT status
• Condition details and any damage
• Number of previous owners
• Outstanding finance information
• V5C (logbook) details

2.3 Automatically Collected Information

When you access our Services, we automatically collect certain information, including:

• Device Information: IP address, browser type and version, operating system, device type
• Usage Data: Pages visited, time spent on pages, links clicked, referring website
• Location Data: General location information derived from IP address
• Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar technologies

2.4 Information from Third Parties

We may receive information about you and your vehicle from third-party sources, including:

• DVLA (Driver and Vehicle Licensing Agency) vehicle records
• HPI and other vehicle history check providers
• Credit reference agencies
• Finance companies (to verify outstanding finance)
• Marketing and analytics providers

Data Type	Purpose	Retention Period
Contact Details	Communication, service delivery	7 years from last contact
Vehicle Information	Valuation, purchase processing	7 years (legal requirement)
Financial Information	Payment processing, compliance	7 years (HMRC requirement)
Identification Documents	Identity verification, fraud prevention	7 years from transaction
Website Usage Data	Analytics, service improvement	2 years

3. How We Use Your Information

We use the information we collect for various legitimate business purposes, including:

3.1 Service Delivery

• Processing vehicle valuations and purchase requests
• Scheduling and managing collection appointments
• Conducting vehicle inspections and test drives
• Processing payments and completing transactions
• Transferring vehicle ownership and handling DVLA notifications

3.2 Communication

• Responding to your inquiries and providing customer support
• Sending service-related notifications and updates
• Providing information about your valuation and appointment
• Requesting feedback about our services

3.3 Marketing and Promotional Activities

• Sending promotional emails about our services (with your consent)
• Displaying targeted advertising on third-party websites
• Conducting market research and customer satisfaction surveys

3.4 Legal and Compliance

• Complying with legal obligations and regulatory requirements
• Preventing fraud, money laundering, and other criminal activities
• Verifying identity and conducting due diligence checks
• Maintaining records as required by HMRC and other authorities
• Protecting our legal rights and interests

3.5 Business Operations

• Analyzing website usage to improve user experience
• Developing and enhancing our services and features
• Managing our business operations and internal record-keeping
• Training staff and quality assurance purposes

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data under the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you when you request a valuation or sell your vehicle to us
• Legal Obligation: Processing is required to comply with legal requirements such as tax laws, anti-money laundering regulations, and vehicle transfer procedures
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, service improvement, and direct marketing (where not overridden by your rights)
• Consent: For marketing communications and certain optional services, we rely on your explicit consent which you may withdraw at any time

5. Information Sharing and Disclosure

We may share your personal information with third parties in the following circumstances:

5.1 Service Providers

We engage trusted third-party service providers to support our business operations:

• Payment Processors: To facilitate secure bank transfers
• Vehicle Data Providers: DVLA, HPI, and other vehicle history services
• IT Service Providers: Website hosting, cloud storage, email services
• Marketing Partners: Email marketing platforms, analytics providers
• Collection and Logistics: Vehicle transportation and recovery services

5.2 Legal and Regulatory Authorities

We may disclose your information to:

• DVLA for vehicle registration and transfer purposes
• HMRC for tax compliance and reporting
• Law enforcement agencies when required by law
• Regulatory bodies and financial authorities
• Courts and tribunals when legally obligated

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control.

5.4 Protection of Rights

We may disclose information when we believe it is necessary to:

• Protect our legal rights and property
• Prevent fraud or illegal activities
• Protect the safety of our employees, customers, or the public
• Enforce our terms and conditions

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

6.1 Technical Measures

• Encryption: SSL/TLS encryption for data transmission, encryption at rest for sensitive data
• Secure Storage: Data stored on secure servers with restricted access
• Firewalls and Intrusion Detection: Network security measures to prevent unauthorized access
• Regular Updates: Software and security patches applied regularly
• Backup Systems: Regular encrypted backups to prevent data loss

6.2 Organizational Measures

• Access Controls: Strict role-based access to personal data on a need-to-know basis
• Staff Training: Regular data protection and security awareness training
• Confidentiality Agreements: All employees and contractors sign confidentiality agreements
• Security Policies: Comprehensive information security and data protection policies
• Incident Response: Procedures in place to detect, report, and investigate security incidents

6.3 Third-Party Security

We carefully vet all third-party service providers and ensure they maintain appropriate security standards. We use contracts to ensure they protect your data and only use it as instructed.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

7.1 Retention Periods

• Transaction Records: 7 years from completion (HMRC requirement)
• Financial Records: 7 years (legal and tax compliance)
• Customer Communication: 7 years from last contact
• Marketing Data: Until consent is withdrawn or 3 years of inactivity
• Website Analytics: 2 years
• CCTV Footage (if applicable): 30 days unless required for investigation

7.2 Deletion and Anonymization

When personal data is no longer needed, we will either:

• Securely delete or destroy the data
• Anonymize the data so it can no longer identify you
• Archive the data securely if required by law

8. Your Privacy Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request access to your personal data. We will provide you with a copy of the information we hold about you.

8.2 Right to Rectification

You can request correction of any inaccurate or incomplete personal information we hold about you.

8.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent (where consent was the legal basis)
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Note: This right is not absolute and may be limited by legal obligations requiring us to retain certain information.

8.4 Right to Restriction of Processing

You can request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

8.6 Right to Object

You have the right to object to:

• Processing based on legitimate interests
• Direct marketing (including profiling)
• Processing for research or statistical purposes

8.7 Right to Withdraw Consent

Where we rely on consent, you have the right to withdraw it at any time. This will not affect the lawfulness of processing before consent was withdrawn.

8.8 Right to Lodge a Complaint

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority:

• ICO Website: https://ico.org.uk
• ICO Helpline: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

8.9 Exercising Your Rights

To exercise any of these rights, please contact us using the details in the Contact Information section below. We will respond to your request within one month, though this may be extended by two months for complex requests.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website performance.

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and provide analytics data.

9.2 Types of Cookies We Use

Essential Cookies (Required)

These cookies are necessary for the website to function and cannot be switched off. They enable core functionality such as security, network management, and accessibility.

Performance Cookies (Analytics)

These cookies collect information about how visitors use our website, such as which pages are visited most often. This helps us improve website performance.

Functionality Cookies

These cookies allow the website to remember choices you make and provide enhanced features such as remembering your valuation details.

Marketing Cookies

These cookies track your browsing habits to enable us to show advertising that is more relevehiclet to you and your interests. They may be set by our advertising partners.

9.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to:

• View and delete existing cookies
• Block cookies from being set
• Accept cookies only from specific websites

Please note that blocking certain cookies may impact website functionality and your user experience.

9.4 Third-Party Analytics

We use third-party analytics services such as Google Analytics to understand how users interact with our website. These services may use cookies and collect information about your use of our site. For more information on how Google uses data, visit: www.google.com/policies/privacy/partners/

10. Third-Party Services

Our website and services may contain links to third-party websites, social media platforms, and services that are not operated by us.

10.1 External Links

We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any external sites you visit.

10.2 Social Media

Our website may include social media features such as Facebook, Twitter, LinkedIn, and Instagram buttons. These features may collect your IP address and set cookies. Your interactions with these features are governed by the privacy policies of the respective social media companies.

10.3 Third-Party Service Providers

We work with reputable third-party service providers who assist us in operating our business. These providers have access to your personal information only to perform specific tasks on our behalf and are obligated to protect your information.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately. We will take steps to remove such information from our systems.

12. International Data Transfers

Your personal information is primarily processed and stored within the United Kingdom. However, in some circumstances, your data may be transferred to, stored, or processed in countries outside the UK and European Economic Area (EEA).

12.1 Transfer Safeguards

When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the UK Information Commissioner's Office
• Adequacy decisions confirming the country has adequate data protection laws
• Binding Corporate Rules for intra-group transfers
• Other legally approved transfer mechanisms

12.2 Data Security During Transfer

We use encryption and other security measures to protect your data during international transfers and ensure receiving parties maintain appropriate security standards.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons.

13.1 Notification of Changes

When we make changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this policy
• Post the updated policy on our website
• Notify you by email (if we have your email address) for material changes
• Obtain your consent if required by law

13.2 Your Continued Use

Your continued use of our services after changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

14. Contact Information

Document Information:
Privacy Policy Version: 2.0
Last Updated: January 25, 2026
Next Review Date: July 2026
This Privacy Policy is compliant with UK GDPR, Data Protection Act 2018, and PECR.