1. Introduction

Welcome to AutoSentia Ltd. We are committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard your personal data, and outlines your rights regarding your data.

2. Data Collection

We collect personal data that you provide to us directly, such as when you:

  • Register on our website
  • Subscribe to our newsletter
  • Fill out a contact form
  • Make a purchase

The types of data we collect include:

  • Name
  • Email address
  • Phone number
  • Payment information
  • Any other information you choose to provide

3. Use of Data and Legal Basis for Processing

We use your data to:

  • Communicate with you
  • Process your orders
  • Provide customer support
  • Improve our services
  • Comply with legal obligations

The legal bases for processing your data include:

  • Consent (e.g., for marketing communications)
  • Contract (e.g., to fulfill our obligations in a transaction)
  • Legitimate interests (e.g., to improve your services)
  • Legal obligation (e.g., to comply with regulatory requirements)

4. Data Retention

We retain your data for as long as necessary to fulfill the purposes outlined in this policy and to comply with regulatory requirements. Our standard data retention period is two years, after which your data will be securely deleted unless we are required to retain it for legal reasons. Specific retention periods for different types of data are as follows:

  • Customer account data: 2 years after last activity
  • Transaction data: 7 years (to comply with tax regulations)
  • Marketing preferences: Until you withdraw consent

5. Your Rights

You have the following rights regarding your personal data:

  • Right to Access: You can request a copy of the data we hold about you.
  • Right to Rectification: You can request that we correct any inaccurate or incomplete data.
  • Right to Erasure: You can request that we delete your data, subject to certain conditions.
  • Right to Restrict Processing: You can request that we limit the processing of your data.
  • Right to Data Portability: You can request that we transfer your data to another organization.
  • Right to Object: You can object to the processing of your data in certain circumstances.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section.

6. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. Your data is stored securely with trusted cloud service providers who comply with stringent security standards. We are committed to data minimization principles and only collect and retain the data necessary for our stated purposes.

7. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page, and where appropriate, notified to you by email. We will also update the "Last updated" date at the bottom of this policy.

8. Contact Us

If you have any questions about this policy or your data, please contact us at:

Email: info@autosentia.com

9. Data Protection Officer

Our Data Protection Officer can be contacted at dpo@autosentia.com.

10. Complaints

If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). You can contact the ICO at:

  • Website: https://ico.org.uk
  • Phone: 0303 123 1113
  • Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

11. ICO Registration

AutoSentia Ltd is registered with the Information Commissioner's Office (ICO), demonstrating our commitment to data protection and privacy. Our registration number is ZB774273.

12. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies help us understand how you use our site, personalize your experience, and improve our services. You can manage your cookie preferences through your browser settings. Please see our Cookie Policy for more details.

13. Third-Party Services

We may share your data with trusted third-party service providers who assist us in operating our website, conducting our business, or servicing you, as long as those parties agree to keep this information confidential. We do not sell, trade, or otherwise transfer your personal data to outside parties without your consent, except as required by law.

14. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and that your data remains protected. When transferring data outside the UK or EEA, we use Standard Contractual Clauses approved by the European Commission and the UK government, or rely on adequacy decisions where applicable.

15. Special Categories of Data

We do not generally collect or process special categories of personal data (sensitive data). If we need to process such data, we will only do so with your explicit consent or where required by law, and we will provide you with additional information about the processing at that time.

16. Automated Decision-Making

We do not currently use automated decision-making or profiling in our data processing activities. If we introduce such practices in the future, we will update this policy and provide you with information about the logic involved, as well as the significance and potential consequences of such processing.

17. Children's Data

Our services are not intended for children under the age of 13. We do not knowingly collect or process data from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete the information as soon as possible.

18. PECR Compliance

We comply with the Privacy and Electronic Communications Regulations (PECR) regarding electronic marketing communications. We will only send you marketing emails if you have given us your consent to do so. You can withdraw your consent at any time by clicking the "unsubscribe" link in any marketing email or by contacting us.

19. Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO without undue delay, and no later than 72 hours after becoming aware of the breach. We will provide you with information about the nature of the breach, its potential consequences, and the measures we are taking to address it.

Last updated: [Insert Date Here - e.g., 25th April 2025]