Privacy Policy

Drive Safe Warranty Ltd is the data controller for the personal data described in this notice. Our ICO registration number is ZC103601.

Drive Safe Warranty Ltd · 135 Park Road, Peterborough PE1 2UD

Email for data protection enquiries: privacy@drivesafewarranty.co.uk

Phone: 01375 470 585

Depending on how you use our service, we collect:

• Identity data — name, date of birth, title.
• Contact data — address, email, phone.
• Vehicle data — registration, make, model, mileage, MOT and service records.
• Transaction data — plan purchased, payment method (Stripe / Bumper / GoCardless), payment status.
• Technical data — IP address, browser type, device type, time-zone.
• Usage data — pages visited, claims submitted, support interactions.
• Marketing preferences — your consent choices for marketing communications.

We do not collect any special-category data (e.g. health, religion) and we do not knowingly collect data from children under 18.

We process your personal data only where one of the following lawful bases applies:

• Performance of a contract — to deliver the plan you purchased.
• Legitimate interests — to operate, secure, and improve our business, where this is not overridden by your rights.
• Legal obligation — to comply with UK statutory requirements (e.g. tax records, consumer law).
• Consent — for optional marketing communications and non-essential cookies. You may withdraw consent at any time.

We keep personal data only as long as needed for the purpose for which it was collected:

• Active plan data — for the duration of your plan plus 7 years (UK insurance industry standard for claims-related records, applied here by analogy).
• Transaction & accounting data — 6 years after the end of the tax year (HMRC requirement).
• Marketing data — until you withdraw consent or 3 years after last interaction.
• Web analytics — up to 26 months (cookie-dependent).

We share personal data only with the third parties listed below, each of whom is bound by a written Article 28 data processing agreement (DPA) with us:

International transfers: Where personal data is transferred outside the UK to any of our processors, the transfer is made under the UK International Data Transfer Agreement (IDTA) or under the UK Addendum to the EU Standard Contractual Clauses, with a documented Transfer Risk Assessment on file.

Under UK GDPR you have the right to:

• Access a copy of the personal data we hold about you (Subject Access Request).
• Rectification — correction of inaccurate data.
• Erasure — deletion of your data where one of the UK GDPR grounds applies.
• Restriction of processing in certain circumstances.
• Portability — receive your data in a machine-readable format.
• Object to processing based on legitimate interests.
• Withdraw consent at any time for processing based on consent.
• Complain to the Information Commissioner's Office (ico.org.uk; 0303 123 113).

To exercise any right, email privacy@drivesafewarranty.co.uk or write to us at our registered office. We will respond within one calendar month and we will not charge a fee unless your request is manifestly unfounded or excessive.

We take appropriate technical and organisational measures to protect your data, including encryption in transit (TLS 1.2+), encryption at rest for sensitive fields, access controls based on the principle of least privilege, regular vulnerability scanning, and supplier security due diligence.

We may update this Privacy Policy from time to time. The current version is published at drivesafewarranty.co.uk/privacy with a clear effective date.