Privacy Policy

At Shelly Motors, we are dedicated to safeguarding your personal data and ensuring compliance with applicable Data Protection Legislation. This Privacy Policy outlines how we collect, use, store, and share your information.

For any inquiries, you can contact our Data Controller at:
Shelly Motors Ltd
Longmead Industrial Estate, Felstead Road,
Epsom, London, KT19 9QG
 Email: [email protected]

1. How We Collect Personal Data

We collect personal data in the following ways:

• Directly from you: This includes information provided during phone calls, online forms, applications, or other written, verbal, or digital communications.

• From third parties: Information shared with us by manufacturers, finance companies, service providers, or public authorities.

• Through online technologies: Data collected via our website or social media platforms.

2. How We Use Your Personal Data

We use your personal information for the following purposes:

• To provide products and services to you.

• To manage any registered accounts, you hold with us.

• To tailor our website to your preferences.

• To verify your identity.

• To prevent, detect, and address fraud or crime.

• With your consent, to inform you about promotions or products of interest.

• To conduct market research and better understand your needs.

• To manage customer service interactions.

• To fulfil legal obligations, such as cooperation with public authorities or legal disputes.

3. How We Store and Protect Your Data

We take robust measures to protect your personal data:

• Employees are trained on data protection, with ongoing awareness through team meetings, GDPR workshops, and internal communications.

• Digital data is stored securely on password-protected servers with access restricted by job role.

• Paper records are minimised and stored in locked facilities when not in use.

• Firewalls and anti-virus systems are continually updated.

• Company devices require two-stage login access and can be remotely tracked.

4. Sharing Your Data

To provide our services, we may share your data with trusted service partners, including:

• Vehicle manufacturers.

• The DVLA.

• Warranty providers.

• Finance providers for funded transactions.

• Motability suppliers.

• Legal authorities or insurers, when required for compliance or legal reasons.

We do not sell or rent customer data to other organisations. Your data will only be shared with your explicit consent, except where legal obligations require otherwise.

5. Retention of Your Data

We only retain your data as long as necessary for the purposes outlined in this policy:

• Data related to legal or audit purposes may be kept for up to seven years.

• Enquiry data without follow-up will be deleted after 60 days.

• Employment applications are retained for 180 days.

6. Your Permissions

Your consent is crucial, and you may give or withdraw it at any time. While we may contact you under a legitimate interest for reasons such as vehicle recalls or service reminders, you can opt out of these communications at any time.

To update your preferences or withdraw consent, contact us at:
 Email: [email protected]
 Address: Data Controller, Shelly Motors Ltd, Longmead Industrial Estate, Felstead Road, Epsom, London, KT19 9QG

7. Marketing Database

We securely store marketing data and seek your explicit consent regarding:

• The type of marketing content you wish to receive (e.g., offers, newsletters).

• Your preferred communication method (e.g., email, phone, SMS).

You can update these preferences at any time by following the instructions in the "Permissions" section.

8. Your Legal Rights

Under data protection laws, you have the right to know what personal data we hold about you. To request this information, please contact our Data Controller at the address above. While we aim to respond within seven days, delays may occur due to technical issues.

9. Website Data Collection

Our website is managed by Automotive Transformation Group Limited (ATG), which adheres to strict data security standards, including ISO27001 certification. Data collected via our website includes:

• Standard log information: IP address, browser type, and device details.

• Visitor behaviour data: Navigation paths and engagement metrics, used to improve user experience.

We also utilise Google Analytics to analyse site traffic. This data is anonymised and stored indefinitely.

If you use our online forms, data is stored temporarily (31 days) for processing and is then archived securely for 14 days.

10. Vehicle Data Collection

When servicing your vehicle, we may collect diagnostic information and retain a record of the work performed. This data helps us improve our services and maintain a detailed service history.

11. Cookie Policy

For information on how cookies are used on our website, please refer to our Cookies Policy.

For further details about data protection rights or to file a complaint, visit the Information Commissioner’s Office.