Unipart is committed to protecting your personal data and to respecting your privacy. This Privacy Notice explains the reasons for the processing of your personal data, the way we collect, handle and process such data and what your rights in relation to your personal data, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018) and other applicable data protection legislation.
This Privacy Notice was last updated in September 2024 and will be reviewed annually.
This Privacy Notice is provided in a layered format so that you can click through to the specific areas set out below.
- Who are we?
- What personal information do we collect?
- How is your personal data collected?
- Why and how do we process your personal data?
- How long do we keep your personal data?
- What are your rights and how can you exercise them?
- Marketing
- Data security and protecting your information
- Disclosures of your personal data
- International transfers
- Changes to this Privacy Notice
- Contact us
Please note that this Privacy Notice applies to the use of this website only. For any other data processing, Unipart is committed to providing specific Privacy Notices where relevant and/or needed.
- Who are we?
Unipart Group Limited (“We”,”Us”,”The Company”) is a company incorporated in England and Wales, registered at Companies House (00576777), whose registered address is at Unipart House, Garsington Rd, Cowley, Oxford OX4 2PG.
For the purpose of this Privacy Notice, Unipart Group Limited is acting in its capacity as a Data Controller within the meaning of the DPA 2018 and UK GDPR.
Further information regarding the legal entities that form part of ‘Unipart Group Limited’ can be found at Unipart’s Terms & Conditions/Legal Notice.
2. What personal data do we collect?
Personal data means data which relates to a living individual and which identifies that individual, either directly or indirectly, such as your name or your contact information, or information which when combined with other information can identify you.
We may collect, use, store and transfer different kinds of personal data about you including, but not limited to: which we have grouped together as follows:
- Identity Data – e.g. first name, maiden name, last name, title.
- Contact Data – e.g. email address and telephone numbers, company name (where you use the ‘contact us’ link on our website).
- Technical Data – e.g. internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
- Profile Data e.g. your interests, preferences, feedback and survey responses.
- Usage Data – e.g. information about how you use our website, products and services.
- Marketing and Communications Data e.g. your preferences in receiving marketing from us and our third parties and your communication preferences including email and telephone.
We do not purposely collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data), nor do we purposely collect any information about criminal convictions and offences. In very limited circumstances, we may process Special Categories of Personal Data. For instance if you have entered into a specific type of contract with us or where you have provided this data with your consent.
- How is your personal data collected?
We use different methods to collect data from and about you, including:
- Direct interactions. You may give us your Identity and Contact details when completing forms on our website or when corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
- Ask for information about our goods and services
- contact us directly via the Unipart General Enquiry/Find Us form
- subscribe to our services or publications;
- request marketing to be sent to you or downloaded;
- complete a survey;
- Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our separate Cookie Policy for further details.
This website and our services are not designed for, or intentionally targeted at, children aged 13 years and below. In the event that any personal data pertaining to children aged 13 years and below is processed, it will be treated with the same regard as other personal data.
- Why and how do we process your personal data?
Unipart takes your data protection seriously and will only use your personal data where we have a lawful basis to do so, for instance:
- Where you have given us consent to use your personal information.
- Where we need to perform the contract we are about to enter into or have entered into with you.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal or regulatory obligation
Consent
Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to marketing communications (please see the Marketing Section below for further information) For instances where Consent is the most appropriate lawful basis, you will be provided with a separate consent form and Privacy Notice for that processing, including information relating to your right to withdraw Consent.
See the table below to find out more about the types of lawful basis that we will rely on to process your personal data. Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data.
- How long do we keep your personal data?
We will only retain your Personal Data for as long as it is necessary to fulfil the purposes outlined in this Privacy Notice or the purposes of which you have otherwise been informed, including for the purposes of satisfying any legal or reporting requirements.
To determine the appropriate retention period for personal data, we take the following into consideration: the amount, nature, and sensitivity of the personal data; the potential risk of harm from unauthorised use or disclosure of your personal data; the purposes for which we process your personal data; whether we can achieve those purposes through other means, and the applicable legal requirements.
- What are your rights and how can you exercise them?
In certain circumstances, you have the following rights under data protection legislation to your personal information:
- to know what information we hold about you (‘right to be informed‘)
- to request access to or a copy of the information we hold about you (‘right of access‘)
- to have your data corrected if it is inaccurate (‘right to rectification‘)
- to have your data erased where we do not have an overriding legal obligation or reason to retain it (‘right to erasure‘)
- to prevent your data being used (‘right to restriction of processing’)
- to object to its use, including opting out of receiving marketing such as our newsletter (‘right to object’)
- to request that we pass data about yourself that you provided us to another organisation on your behalf (‘right to data portability’)
The right to be informed
Unipart is committed to ensuring that you are always aware of what we are doing with your information and are aware of any changes to the processing of your information. We do so through this Privacy Notice, which is reviewed and updated as and when required.
The right of access
The right of access is commonly known as a “Data Subject Access Request”. This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
When requesting your personal information we may need to ask you to provide additional information so that we can verify your identity before we can respond to your request. This additional information may include the following; your full name, address and contact telephone number, any information used by us to identify you, and we may ask for details of the specific information you require and any relevant dates.
The right to rectification
We endeavour to ensure that the information we hold about you is always correct, however, there may be instances where the information we hold is incomplete or inaccurate. You can ask that we rectify any information about you that is incorrect, although we may need to verify the accuracy of the new information you provide to us first.
The right to erasure
You have the right to request that certain personal information be erased from our systems if you feel that there is an underlying legal issue to us processing your information, or, where you withdraw consent.
While you may request for your information to be erased, please note that this right is not absolute and will only apply in certain circumstances. As such, each request is considered on a case-by-case basis and when we do reject a request, a response will always be provided to the data subject within one month to explain why.
The right to restrict processing
In certain circumstances you have the right to request that we restrict the processing of your personal data. This means that you can ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
The right to object
You have the right to object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes.
The right to data portability
In certain circumstances, you have the right to request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. Please note that due to the type of services Unipart provides, there will be very few instances where this right may apply.
Rights related to Automated Decision Making and Profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. Please note however that Unipart does not use any form of automated decision making or the profiling of individuals personal data.
Right to withdraw consent
In the limited circumstances where your consent is relied upon for the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that processing at any time. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to. These will have been outlined in the consent form you were provided with at the time of collection. A copy will be available on request.
You may also contact the Data Protection Team via Contact Us to withdraw consent using the details below. (Section 13 of this Privacy Notice). We will ask you to confirm certain details relating to the consent.
Timescales for complying with your request
We aim to respond to all valid requests within one month. However, it may take us longer if the request is particularly complicated or you have made several requests. We will always notify you if we think a response will take longer than one month. This period begins at the point we have been able to verify your request, not necessarily at the point you make the original request.
- Marketing
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. Generally we do not rely on consent as a legal basis for processing your personal data, other than where it is in relation to sending/discussing third party direct marketing communications to you via email, telephone or post.
We may share both existing customer data and prospective customer data with HubSpot as part of their third-party client management, marketing and sales software service that they provide to us. This data may include personal data, navigation data, system usage data, email data and any other electronic data that is submitted, stored, sent or received by end users via the HubSpot service.
For further information about how HubSpot handles your personal data as a third-party, please refer to their privacy policy using the link below:
https://legal.hubspot.com/privacy-policy
You have the right to withdraw consent to marketing at any time by contacting us using the unsubscribe link within the email preferences section on this website, the unsubscribe button found in all email communications, by using the contact us form below or by telephone. You may also contact the Data Protection Team to withdraw consent using the details below. (Section 13 of this Privacy Notice).
Promotional Offers from us
We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services, and offers may be relevant for you (we call this marketing).
You will receive marketing communications from us if you have completed a survey or registered for a White Paper, questionnaire or checklist, or subscribed to our monthly newsletter and where you have opted in to receiving marketing relating to the original information request.
Third Party Marketing
Before sharing your personal data with any organisation outside of Unipart for marketing purposes, we will obtain your express opt in consent.
Opting out
You can ask us or third parties to stop sending you marketing messages at any time by visiting the email preferences page on the website and checking or unchecking relevant boxes to adjust your marketing preferences or by following the opt out links on any marketing message sent to you or by contacting us at any time.
Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a product/service purchase, warranty registration, product/service experience or other transactions.
- Data Security and protecting your information
Unipart is committed to protecting the confidentiality and security of your information. We have appropriate security measures in place to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have legitimate grounds to do so. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
- Disclosures of Your Personal Data
We may have to share your personal data with the parties set out below for the purposes set out in the table in section 4 (Why and how do we process your personal data?)
- Internal Third Parties
- Other companies in the Unipart Group of Companies acting as joint controllers or processors and which are based within Europe, Asia Pacific and/or North America.
- External Third Parties
- Service providers acting as processors based in Europe, Asia Pacific and North America who provide IT and system administration services.
- Professional advisers acting as processors or joint controllers including lawyers, bankers, auditors and insurers based in Europe, Asia Pacific and North America who provide consultancy, banking, legal, insurance and accounting services.
- Marketing platforms acting as processors such as BabelQuest and Hubspot based in Europe who provide Marketing, CRM and analytics support.
- Specific third parties such as Hubspot and Google Analytics.
- Third parties to whom we may choose to transfer or merge parts of our business or assets as part of acquisition of other businesses. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Privacy Notice.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes. They are only permitted to process your personal data for specified purposes and in accordance with our instructions.
- International Transfers
Your information may be processed in locations outside the UK/EU/European Economic Area (EEA), including countries that may not have the same level of protection for personal information. When we do this, we’ll ensure it has an appropriate level of protection and that at least one of the following safeguards is implemented:
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
- Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.
Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.
- Changes to this Privacy Notice
We reserve the right to update this Privacy Notice at any time. Any updates will be published on our website.
12. Contact Us
The Unipart Group Data Protection Officer carries out internal supervision of our responsibilities under this Privacy Notice.
If you would like to exercise your rights as a data subject, or if you have comments, questions or concerns, or if you would like to submit a complaint regarding the collection and use of your personal data, you may contact Unipart’s Data Protection Officer:
- by post: UNIPART GROUP LIMITED attention of Data Protection Officer, Unipart House, Garsington Road, Oxford OX4 2PG
- by email: to group.dataprotection@unipart.com
- By telephone: to 01865 778966
You also have the right to lodge a complaint with the supervising authority, the Information Commissioner’s Office (ICO) at any time. For further information, please refer to the ICO website, www.ico.org.uk