Privacy Policy

Nationwide Vehicle Contracts Limited is the data controller. We comply with UK data protection law and the UK General Data Protection Regulation (GDPR). 

If you have any questions about this notice or how we use your personal data, contact our Data Protection Officer: 

Data Protection Officer
Nationwide Vehicle Contracts Limited
Unit 9, Christie Way,
Christie Fields,
Manchester,
M21 7QY

By Phone: 0345 811 9595
By Email: [email protected]

When you engage our brokerage services, we collect personal data to administer your agreement and provide products and services.  

We collect personal data directly from you and, where necessary, from credit reference agencies, finance providers and other organisations involved in your agreement. 

This may include:

• Title
• First Name(s), Surname or Company Name, where applicable
• Address
• Email address
• Date of birth
• Telephone number
• Employment details
• Monthly income and expenditure
• Bank account details
• VAT number, where applicable

We also record telephone calls and retain email and electronic communications for training, service improvement, and to confirm instructions. 

We may transfer personal data outside the UK where necessary. Where we do so, we ensure appropriate safeguards are in place in accordance with UK data protection law. 

We process your data because:

• It is necessary to enter into and perform a contract with you, including providing the products and services you request
• We have your consent where required
• We have a legal obligation
• We have a legitimate interest in preventing fraud, improving our services and managing our business operations
• If you do not provide the personal data required to enter into or perform your agreement, we will be unable to provide our services and may have to terminate the contract.

We use AI technologies to improve our services. 

Predictive AI helps us analyse leasing behaviour, preferences and feedback to inform renewal recommendations. 

Generative AI helps us analyse anonymised service interactions to improve communication and support processes. 

We use anonymised data within our AI systems. This data does not identify you. 

You can opt out of AI processing at any time by contacting our Data Protection Officer. 

If you opt into marketing communications, we may send you information about our products and services. We may also send you information about products and services from selected partners that we believe may be relevant to you.  

We may track, where supported:

• Email opens
• Link clicks
• Interaction with email content

We use this information to improve the relevance and effectiveness of our communications. 

We may use Meta Custom Audiences to display personalised adverts on Meta platforms such as Facebook and Instagram. This involves securely uploading your email address and/or phone number to Meta so that Meta can determine whether you have a registered account and show you relevant adverts. Meta processes this data in accordance with its own privacy policy. 

You have an absolute right to object to the use of your personal data for direct marketing at any time. If you object, we will stop using your data for marketing purposes. 

You can opt out of our marketing communications and participation in Meta Custom Audiences at any time by clicking the unsubscribe link in our emails or by contacting us at [email protected]

We treat your information as confidential. We only share it when:

• You give consent
• It is necessary for the performance of an agreement 
• To obtain professional advice
• We or others need to investigate or prevent crime  
• The law permits or requires it
• A regulatory or governmental body requests or requires it
• There is a public duty to disclose 

To administer your agreement and provide the services you request, we may share your personal data with other data controllers. This sharing is necessary to deliver your contract. 

We may share data with: 

• Credit reference agencies, to assess your eligibility for vehicle finance 
• Finance providers, to arrange and generate your finance agreement 
• Supplying dealers or vehicle logistics partners to order and deliver your vehicle 
• Electricity or energy suppliers, where you request an EV charging unit 
• Vehicle hire providers, to supply a short-term hire vehicle, where applicable 
• Claims handling and fraud prevention agencies, to investigate or prevent crime 
• Vehicle management companies, to administer maintenance or service plans 
• Insurance providers, to arrange products such as GAP insurance or warranty 
• Platform providers, to manage surveys, complaints or service communications 
• Trusted AI service providers, using anonymised data to improve our services 

All third parties operate under strict data protection agreements. 

When assessing your application, we will search your record with credit reference agencies. They may: 

• Record details of our search 
• Use credit scoring to assess your application 
• Link your information to records of people with whom you have a financial association 
• Record details of any agreement, including repayment history and any defaults 
• Share data with other organisations for credit assessment, fraud prevention and debt recovery 
• Use the information for statistical analysis relating to credit

If you apply jointly, declare a financial association, or act as a director or partner of a business applying for credit, you confirm that you are authorised to disclose their information and for us to carry out relevant searches relating to them. 

If required, we may carry out additional credit searches, for example if your approval expires or you apply with a different finance provider. 

You have the right to request details of the credit reference and fraud prevention agencies we use by contacting our Data Protection Officer. 

If you provide false or inaccurate information, or if we detect fraud in any form, we will share the relevant details with fraud prevention agencies. 

This information may be used by us and other organisations to: 

• Check applications for credit and other financial services
• Manage credit and related accounts
• Prevent fraud and money laundering
• Recover debt
• Assess insurance proposals and claims

Law enforcement agencies may also access and use this information. 

If you apply for finance or enter into a contract with us, we will usually retain your personal data for up to six years after the agreement ends to meet our legal and regulatory obligations and to deal with any potential legal claims. 

We will erase data when it is no longer necessary unless we must retain it by law. 

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. 

Access to personal data is limited to authorised employees, contractors and service providers who are subject to confidentiality obligations. 

Our website and internal systems use industry-standard security controls, including SSL and TLS encryption, firewall and network protection measures. We monitor our systems to detect and prevent unauthorised access. 

If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner’s Office where required. If the breach is likely to result in a high risk to you, we will also inform you without undue delay. 

Under UK GDPR, you have the right to: 

• Access your personal data 
• Request correction of inaccurate or incomplete data 
• Request erasure in certain circumstances 
• Restrict processing in certain circumstances 
• Object to processing 
• Request data portability 
• Withdraw consent at any time  

Some rights apply only in specific situations and may be subject to legal exemptions. 

If we cannot delete your data because we must retain it for legal, regulatory or contractual reasons, we will restrict its use instead and retain it only for the required purpose. 

If you withdraw consent for processing that is necessary to provide certain services, we may be unable to continue providing those services. Withdrawal does not affect the lawfulness of processing carried out before it was withdrawn. 

If we correct inaccurate or incomplete data, we will, where possible, inform any third parties with whom we have shared it so they can update their records. 

To exercise your rights, contact our Data Protection Officer. We will respond without undue delay and within one month. This may be extended by up to two further months if your request is complex or if we receive multiple requests. We will inform you if an extension applies. 

You can request a copy of your personal data. We provide this free of charge unless the request is manifestly unfounded or excessive. 

We will provide the data in a structured, machine-readable format, such as a CSV file, or through secure access to your customer account, where available.

If you have concerns about how we handle your personal data, please contact our Data Protection Officer.  

If you remain dissatisfied, you can lodge a complaint with the Information Commissioner’s Office. You can contact the ICO at ico.org.uk or by calling 0303 123 1113. 

This privacy notice applies only to Nationwide Vehicle Contracts. Our website may contain links to third-party websites, including affiliate partners. If you follow a link to another website, that organisation will be responsible for how your personal data is processed under its own privacy policy. 

Where we include affiliate links, we may receive a commission if you purchase a product or service. This does not affect the price you pay. 

We recommend that you review the privacy policy of any website you visit. 

We review this privacy notice from time to time. Any updates will be published on this page. Where appropriate, we will notify you of significant changes.