By choosing ACL Automotive Contracts Ltd we understand that you have placed a great deal of trust in us. We also know that you will want all personal information that you submit to us to be kept as private and as secure as possible. For your peace of mind, here’s how we will and will not use the personal information you give us.
This Privacy Policy was updated on 29thMay 2026.
Who We are
ACL Automotive Contracts Limited are authorised and regulated by the Financial Conduct Authority, registration number 730720.
ACL Automotive Contracts Ltd are an owner and broker of hire.
Information collection
When you use the ACL Automotive Contracts website, you will submit your personal information to ACL Automotive Contracts Ltd. We will treat all information submitted by you in accordance with the terms of this privacy policy (as updated and amended from time to time) and in strict compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By entering your personal information in the ACL Automotive Contracts web site, you accept that we may retain your information and it may be held by ACL Automotive Contracts Ltd or by any third party company which processes it on our behalf.
The Data Controller
If you have any questions about this privacy notice or how we use your personal data, you can contact us in writing to:
Data Protection Officer
ACL Automotive Contracts Ltd
Arena Business Centre
9 Nimrod Way
East Dorset Trade Park
Wimborne
Dorset
BH21 7UH
Or by emailing: privacy@aclautomotive.co.uk
Legal Basis for Processing Personal Data
ACL Automotive Contracts Ltd processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Depending on the purpose for which we use your personal information, we rely on one or more of the following lawful bases:
- Performance of a Contract – where processing is necessary to provide our services, fulfil contractual obligations, process applications, manage vehicle leasing agreements and administer customer accounts.
- Legal Obligation – where processing is necessary to comply with applicable laws, regulatory requirements, anti-money laundering obligations, taxation requirements, court orders or requests from regulatory authorities.
- Legitimate Interests – where processing is necessary for our legitimate business interests, including fraud prevention, risk management, system security, business administration, debt recovery, audit and compliance activities, and protecting the integrity of our services, provided those interests do not override your rights and freedoms.
- Consent – where required by law, including for certain marketing communications and the use of certain cookies. Where processing is based on consent, you may withdraw your consent at any time.
Where we rely on legitimate interests as our lawful basis for processing, we carry out appropriate assessments to ensure that your rights and freedoms are protected.
Legitimate Interests
Our legitimate interests include:
- Operating and managing our business effectively;
- Delivering products and services to our customers;
- Assessing applications and managing contractual relationships;
- Maintaining system and data security;
- Preventing fraud and financial crime;
- Conducting audit, regulatory and compliance activities;
- Recovering outstanding debts; and
- Improving our products, services and customer experience.
We carefully balance these interests against the rights and freedoms of individuals and implement appropriate safeguards to protect personal data.
Sources of Personal Data
We may collect personal data from a variety of sources including:
- Information provided directly by you;
- Credit reference agencies and fraud prevention agencies;
- Identity verification providers;
- Publicly available sources such as Companies House, electoral registers and other public records where permitted by law;
- Service providers who support the delivery of our services; and
- Third parties involved in the administration of vehicle leasing, finance or associated services.
What we collect and why
The information we gather from customers helps us to continually improve the service we offer to our customers.
When you use the ACL Automotive service, there are different ways we gather information about you:
- When you register with us, we ask for information such as your name, e-mail address, contact numbers and – if you submit a lease application – your address, employment and bank details. We keep a record of this information. All this is necessary for us to recognise you as a registered customer and to fulfil the orders you place with us.
- We keep a record of the cars you lease through our service, which means we can deal a lot quicker with any problems you may experience with your contract(s) and/or vehicle(s).
- We may keep a record of e-mail correspondence you send us. This helps us keep track of your likes and dislikes and any problems or concerns you’ve had with our products or services.
- Telephone calls made to our Customer Service Helpline may be recorded for monitoring and quality control purposes.
How We Use Your Personal Information
All the information we collect via our website or through correspondence with you is used to operate and improve the service we offer you. We are committed to using your personal information only for:
- Dealing with orders and accounts for the supply of our services and related products.
- Monitoring and improving the ACL Automotive website and our services.
- Planning and managing ACL Automotive business activities, including analysing customers’ shopping habits and preferences.
- Enabling third parties to carry out technical, logistical or other functions on our behalf.
- Conducting market research including statistical analysis of customer behaviour which we may disclosed to third parties in depersonalised, aggregated form.
- Providing you with information about the products and services we offer.
- Providing you with periodic communications (this may be by post, telephone, SMS, email or as part of your vehicle delivery) about features, products, services, events, promotions and special offers. Such communications from ACL Automotive might include advertising for or offers from third parties. If you wish to withdraw your consent from receiving these communications, you can do so by informing us in writing to dp@aclautomotive.co.uk
- Enabling our debt collection agency to collect payment from you should that be necessary.
- Preventing and detecting fraud or abuses of our website.
- Allowing us to comply with any requirements imposed on ACL Automotive Contracts Ltd by law or court order.
When we share your personal information
Information about our customers is an important part of our business and we do not sell or rent your information to anyone else to enable them to send you direct marketing. However, there are circumstances where it is necessary for us to share personal information in order for us to provide our customers with the ACL Automotive service. At all times where we use or disclose your information it will remain secure.
The circumstances where we may share some of your information with others are described below:
Third Party Service Providers
We use several other companies and individuals to perform functions on our behalf. For example, we engage companies to analyse customer information, provide marketing assistance, process credit card payments, and support the administration of vehicle finance and leasing applications. We also engage agents including credit reference agencies, fraud prevention and detection agencies, identity verification providers and debt collection agencies that we use to process the orders you place with us or who assist us in the service we provide to you. In these instances, we provide them with only the information they need to perform their function.
Promotional Offers
Sometimes we send offers to selected groups of ACL Automotive Contracts customers. All such promotional offers will come via ACL Automotive Contracts Ltd. If you wish to withdraw your consent from receiving these communications, you can do so by informing us in writing.
Business Transfer
If our company is ever sold or its assets are purchased by another company it would typically be part of such a transaction for customer information to form part of the business assets being transferred but the information will remain subject to the obligations as outlined in this Privacy Policy.
Protection of ACL Automotive Contracts Ltd and others
We release account and other personal information when we believe release is appropriate to comply with the law, to enforce our Terms and Conditions and other agreements or protect the rights, property or safety of ACL Automotive Contracts Ltd, our trading brands, our customers or others.
Cookies and Online Marketing Management Tools
A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.
Cookies may be either “persistent” cookies or “session” cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.
How are Cookies used?
These pieces of information are used to improve services for you through, for example:
- Enabling a service to recognise your device so you don’t have to give the same information several times during one task
- Recognising that you may already have given a username and password so you don’t need to do it for every web page requested
- Measuring how many people are using services, so they can be made easier to use and there’s enough capacity to ensure they are fast
- Analysing anonymised data to help us understand how people interact with govt services so we can make them better
You can manage these small files and learn more about them here All About Cookies.org. There’s also further information on how to remove cookies at About Cookies: how to control cookies.
Our Cookies
We are the sole owner of the information collected on this site. We will not sell, share, or rent this information to others. When we provide services, we want to make them easy, useful and reliable. Where services are delivered on the internet, this sometimes involves placing small amounts of information on your device, for example, computer or mobile phone. These include small files known as cookies. They cannot be used to identify you personally. By using our website and agreeing to this policy, you consent to our use of cookies in accordance with the terms of this policy.
First Party Cookies
These are cookies set by our web domain known as ‘first-party’ cookies. Some are necessary to the functionality of the site, others provide information to us that we analyse to monitor and improve the site. These first-party cookies do not store or collect any personal information or anything that make you personally identifiable to us. Typically, the cookies generate a random, unique number to store information about a user.
Control & Delete Cookies
We will not use cookies to collect personally identifiable information about you. However, if you wish to restrict or block the cookies which are set by our websites, or indeed any other website, you can do this through your browser settings. The ‘Help’ function within your browser should tell you how.
Alternatively, you may wish to visit the About Cookies website, which contains comprehensive information on how to do this on a wide variety of browsers. You will also find details on how to delete cookies from your machine as well as more general information about cookies.
Please be aware that restricting cookies may have an impact upon the functionality of our website. If you wish to view your cookie code, just click on a cookie to open it. You’ll see a short string of text and numbers. The numbers are your identification card, which can only be seen by the server that gave you the cookie.
For information on how to do this on the browser of your mobile phone you will need to refer to your handset manual. To opt-out of third-parties collecting any data regarding your interaction on our website, please refer to their websites for further information
Analytic Cookies
We use Google Analytics to analyse the use of our website. Our analytics service provider generates statistical and other information about website use by means of cookies. The analytics cookies used by our website have the following names: [_utma, _utmb, _utmc and _utmz]. The information generated relating to our website is used to create reports about the use of our website. Our analytics service provider’s privacy policy is available at: [http://www.google.com/policies/privacy/].
Cookie Name: _utma – Expires: 2 years from set/update
Cookie Name: _utmb – Expires: 30 mins from set/update
Cookie Name: _utmc – Expires: End of browser session
Cookie Name: _utmz – Expires: 6 months from set/update
For further details on the cookies set by Google Analytics, please refer to the Google Code website
Security and Data Retention
Security is very important to ACL Automotive Contracts Ltd and we use sophisticated technology to ensure that your information is protected at all times. Secure Socket Layer (SSL) encryption technology is used for protection of information in transit for any sensitive transactions such as bank details. Additional security procedures are in place to protect the confidentiality and integrity of your information.
We maintain physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personally identifiable customer information. Our security procedures mean that we may occasionally request proof of identity before we disclose personal information to you.
It is important for you to protect against unauthorised access to your password and to your computer. Be sure to sign off when using a shared computer.
Where possible, ACL Automotive will take steps to erase any personal data that is no longer required for the purposes for which it was collected or otherwise processed, or if you withdraw consent for its processing and retention.
If you enter into or took steps to enter into a contract with ACL Automotive, we will store the data for a period of six years for compliance with our general legal obligations and for the exercise or defence of any legal claims.
Under the GDPR, you have the right to ‘block’ or request the deletion or removal of personal data to prevent further processing. This right to erase is also known as ‘the right to be forgotten’. Specific circumstances in which you can request the deletion or removal of personal data includes:
- Where the personal data is no longer necessary for the purposes for which it is collected or otherwise processed
- Where you withdraw consent
- When you object to the processing and there is no overriding legitimate interest for continuing the processing
- Where the personal data was unlawfully processed (i.e. otherwise in breach of the GDPR)
- Where the personal data has to be erased in order to comply with a legal obligation
- In case a deletion is not possible due to legal, statutory or contractual retention periods, or if it requires disproportionate efforts or prejudices your legitimate interests, the data will be blocked instead of deleted.
Fraud Prevention
If you give us false or inaccurate information and fraud is identified, details will be passed to the fraud prevention agencies. We and other organisations may also share, access and use this information to prevent fraud and money laundering, for example when:
- Checking details on applications for credit and credit related or other facilities
- Managing credit and credit related accounts or facilities
- Recovering debt
- Checking details on proposals and claims for all types of insurance
- Checking details of job applicants and employees
In addition, law enforcement agencies may access and use this information.
Credit Reference and Affordability Checks
To help us assess applications, prevent fraud, and comply with our legal and regulatory obligations, we may obtain information about you from credit reference agencies (“CRAs”).
We obtain this information through Creditsafe Business Solutions Limited, which uses TransUnion International UK Limited as its data partner to provide consumer credit and identity information.
Creditsafe Business Solutions Limited is authorised and regulated by the Financial Conduct Authority (FCA Firm Reference Number: 742313).
TransUnion International UK Limited is authorised and regulated by the Financial Conduct Authority (FCA Firm Reference Number: 805757).
The information we receive may include details relating to your identity, credit commitments, payment history, financial standing, and information held on public records. We use this information only where necessary for legitimate business purposes, including:
- Assessing creditworthiness and affordability;
- Verifying identity;
- Preventing and detecting fraud;
- Managing risk; and
- Complying with applicable legal and regulatory requirements.
Any personal data obtained from credit reference agencies will be processed in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For more information about how Creditsafe and TransUnion collect, use and share personal data, please refer to their privacy notices:
Creditsafe Transparency Notice:
Transparency Notice | Customers & Suppliers
TransUnion Credit Reference Agency Information Notice (CRAIN):
https://www.transunion.co.uk/legal/privacy-centre/pc-credit-reference
TransUnion Bureau Privacy Notice:
https://www.transunion.co.uk/legal/privacy-centre/pc-bureau
Data over the Internet
The internet is a global network – therefore there are cases where your data travels internationally, which may include places outside the European Union. We want you to know that if you visit or order a car through the ACL Automotive service, you’re agreeing and authorising us to process data this way.
International Transfers
In some circumstances, personal data may be transferred to, stored or processed outside the United Kingdom and/or European Economic Area (EEA).
Where such transfers occur, ACL Automotive Contracts Ltd will ensure that appropriate safeguards are implemented to protect personal data in accordance with applicable data protection laws. Such safeguards may include:
- International Data Transfer Agreements (IDTAs);
- UK Addendums to Standard Contractual Clauses;
- Transfers to countries recognised by the UK Government as providing an adequate level of data protection; or
- Other legally approved transfer mechanisms.
Automated Decision-Making and Profiling
ACL Automotive Contracts Ltd may use automated tools and systems to assist with certain business processes, including affordability assessments, fraud prevention, identity verification, risk assessment and record management.
These systems may analyse personal information using predefined criteria and generate indicators, scores or recommendations to support decision-making processes.
However, ACL Automotive Contracts Ltd does not make decisions that have legal or similarly significant effects on individuals solely through automated processing. Any significant decision affecting an individual will be subject to meaningful human review before a final decision is made.
Where automated processing is used as part of an assessment process, it may affect the speed, prioritisation or level of review applied to an application, but individuals will not be subject to automatic rejection or adverse decisions without human involvement.
If this position changes in the future and solely automated decision-making is introduced, individuals will be informed of their rights, including the right to request human intervention, express their views and challenge any decision.
Breaches
If at any time we become aware that your data has been compromised, or that a breach of our systems and controls has occurred, which has an impact on the security of your data, we will notify the Information Commissioner’s Office, and you, without undue delay.
Your Data Protection Rights
Under data protection legislation, you have a number of rights regarding your personal data. These include:
- The right of access to personal information held about you;
- The right to request correction of inaccurate or incomplete personal information;
- The right to request erasure of personal information where there is no lawful basis for continued processing;
- The right to restrict processing in certain circumstances;
- The right to data portability;
- The right to object to processing based on legitimate interests or direct marketing; and
- The right to lodge a complaint with the Information Commissioner’s Office (ICO).
The following sections explain how you may exercise these rights.
Subject Access Requests
You have the right to request access to a copy of the personal information that we hold about you. This is also known as a ‘Subject Access Request’. This information is provided to you free of charge.
We will provide this information in a structured, commonly used and machine-readable form such as a CSV file. This allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to usability.
If you would like to submit a Subject Access Request, please contact our Data Protection Officer in writing to:
Data Protection Officer
ACL Automotive Contracts Ltd
Arena Business Centre
9 Nimrod Way
East Dorset Trade Park
Wimborne
Dorset
BH21 7UH
Email:datarequest@aclautomotive.co.uk
We will respond to your request without delay and at the latest, within one month of receipt of your request.
Rectifying or updating personal data
If you believe the personal data we hold about you is inaccurate or incomplete, you have the right to rectification. Where possible, we will also inform any third parties to whom we have disclosed the personal data in question to so they can rectify their records.
We will typically respond to your request within one month, although this can be extended by two months if your request for rectification is complex, such as a Transfer of Lease.
Provision of Personal Data
Certain personal information is required in order for ACL Automotive Contracts Ltd to provide services and fulfil contractual and legal obligations.
Personal data may be required in order to:
- Process applications and quotations;
- Enter into and perform contracts;
- Manage customer accounts;
- Verify identity;
- Conduct fraud prevention and affordability checks;
- Supply products and services; and
- Comply with legal and regulatory obligations.
- If you choose not to provide requested personal information, we may be unable to:
- Enter into a contract with you;
- Provide quotations, products or services;
- Carry out necessary verification or compliance checks; or
- Continue providing certain services.
- Where personal information is requested solely for marketing or other optional purposes, you are under no obligation to provide that information and may withdraw consent at any time.
Withdrawing Consent
You have the right to withdraw your consent for us to collect, process and store your data at any time. If you wish to withdraw your consent, please confirm this in writing to our Data Protection Officer:
Data Protection Officer
ACL Automotive Contracts Ltd
Arena Business Centre
9 Nimrod Way
East Dorset Trade Park
Wimborne
Dorset
BH21 7UH
By Email: privacy@aclautomotive.co.uk
Please note, by withdrawing consent, ACL Automotive may be unable to execute the contract that you have entered into with us and will result in termination of our services. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
If you have a complaint about data protection at ACL Automotive Contracts Ltd, please contact our privacy officer at dp@aclautomotive.co.uk.
Alternatively contact our supervisory authority for data protection compliance:
www.ico.org.uk:
Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113 (local rate) or 01625 545 745 (national rate)
Updates
We may change the terms of this Privacy Policy from time to time and you should check it regularly. Your use of the ACL Automotive website will at all times be subject to the Privacy Policy applicable at the time of each use.
