Last updated: 3 November 2026
This notice explains how RightDrive (UK) Limited ("RightDrive", "we", "us") uses your personal information. We are registered in England and Wales (company number 05815392), authorised and regulated by the Financial Conduct Authority as a credit broker (firm reference number 674512), and registered with the Information Commissioner's Office as a data controller (registration number ZA095404).
It applies when you visit www.rightdrivecarfinance.co.uk or our other websites, message us on WhatsApp, Facebook, Instagram or TikTok, chat with us on our website, phone us, visit our premises, buy a car from us, or apply for car finance through us.
Please read it so you know what we do with your information and what your rights are. You do not need to agree to it; it is here to tell you.
Identity and contact details: name, address history, phone number, email address, date of birth, and the same for any joint applicant.
Finance application details: employment and income, expenditure, dependants, residential status, bank details, driving licence details, and the car and finance you are looking for.
Documents you send us: for example your driving licence, passport, payslips, bank statements and proof of address, and documents you sign with us electronically.
Credit and fraud information: from credit reference and fraud prevention agencies (see section 6), and lenders' decisions on your application.
Your messages and calls: WhatsApp, text, email, website chat and social media messages with us, and records and recordings of calls (see section 10).
Your car and any part exchange: registration, vehicle details, finance settlement and condition.
Website and advert information: your IP address, device and browser, the pages you visit, and the advert or link that brought you to us.
CCTV: images of people and number plates on our premises.
Health or vulnerability information, only if you tell us about it (see section 4).
Payment details when you pay a deposit or other amount. Card details are handled by our payment provider and not stored by us.
If you do not give us the information marked as required on an application, we cannot process it. If you start an application but do not finish it, we may contact you to help you complete it.
From you, when you enquire, apply, message, call or visit us.
From credit reference agencies, fraud prevention agencies and lenders.
From finance platforms and introducers who pass your enquiry to us, and from advertising platforms when you fill in a form in one of our adverts on Facebook, Instagram, TikTok or Google.
From vehicle data providers when we check a car.
From our website and cameras, as described in section 10.
The law only lets us use your information where we have a lawful basis. These are ours:
| What we do | Lawful basis |
|---|---|
| Handle your enquiry and finance application, find a lender, arrange your agreement, sell you a car, take payments and deliver the car | Contract, and steps you ask us to take before a contract |
| Credit and identity checks, anti money laundering and fraud checks, keeping the records the FCA requires, handling complaints, and answering regulators, courts and the police | Legal obligation |
| Follow up an enquiry or application you started, keep our records accurate, train staff, improve our service, keep our systems and premises secure, and prevent fraud | Our legitimate interests in running and protecting our business, balanced against your rights |
| Use AI tools to help us reply to you and keep in touch about your application (section 5) | Contract, and our legitimate interests |
| Record calls and operate CCTV (section 10) | Our legitimate interests in evidencing what was agreed, training, and security |
| Send marketing about similar cars and finance to customers by email or text | Our legitimate interests, under the "soft opt in" in the electronic marketing rules. You can opt out at any time |
| Send marketing to people who are not customers, and marketing by WhatsApp | Your consent |
| Share a scrambled copy of your contact details with advertising platforms (section 10) | Your consent where we ask for it, otherwise our legitimate interests. You can object at any time |
| Non essential cookies and pixels on our website | Your consent, given through our cookie banner. Basic visitor statistics may be collected unless you opt out |
| Statistical analysis to improve our products, using anonymised or pseudonymised data where we can | Our legitimate interests |
Health and vulnerability information. If you tell us about a health condition, disability or circumstances that make you vulnerable, we will use it only to support you and make sure any finance is suitable for you. We will not share it with a lender without telling you first.
We will not use your information for a purpose unrelated to the ones above without telling you first.
AI assistant. We use an AI assistant, called Sari, to help us reply to enquiries and keep in touch about your application by WhatsApp, text and website chat. Sari reads the details of your enquiry or application and our past messages with you so that it can write a relevant reply. Our staff set what Sari may say and can see every message it sends. Sari does not decide whether you get finance. You can ask to speak to a person at any time, and you can reply STOP to stop messages.
Sari runs on an AI service provided by Anthropic. Anthropic processes your information only to provide that service to us and does not use it to train its models. We may also use AI tools to turn recorded calls into text and summarise them for our staff.
Matching you to lenders. Our system automatically matches your application to lenders using each lender's criteria, for example where you live, your age, your employment and the car. This decides which lenders we send your application to and in what order. It does not decide whether a lender will lend to you; that is each lender's own decision, and the lender will tell you about any automated decision it makes.
If you think a lender should have been tried, or you want a member of staff to review how your application was handled, contact us and a person will look at it. You can also tell us your point of view and challenge the outcome.
When you apply for finance through us, we and the lenders we send your application to will carry out credit and identity checks with one or more credit reference agencies (CRAs), such as Equifax, Experian and TransUnion. We will tell you before we do, and whether the search will leave a footprint other lenders can see.
We give the CRAs your details and they give us information about you, including public information such as the electoral register, and shared credit, financial and fraud prevention information. We use it to check your identity, assess whether finance is likely to be suitable and affordable, check the information you gave us, and prevent fraud and money laundering.
If you make a joint application, or tell us about a spouse or financial associate, your records will be linked at the CRAs. Please tell the other person before you apply. The link stays until one of you asks the CRAs to remove it. Each CRA explains how it uses information in its Credit Reference Agency Information Notice (CRAIN), available on its website.
We and fraud prevention agencies use your information to prevent fraud and money laundering and to verify your identity. If we or a fraud prevention agency decide you pose a fraud or money laundering risk, we may refuse the service you asked for. Fraud prevention agencies may keep a record of that risk for up to six years, and other organisations may refuse you services as a result. Law enforcement agencies may access this information to prevent and detect crime.
We do not sell your personal information. We share it only with:
Lenders. We send your application to lenders on our panel who may be able to help, depending on your circumstances and their criteria. Each lender uses your information under its own privacy notice. Our current panel is listed below.
Finance platforms and intermediaries we use to reach lenders, such as AutoConvert and Car Finance Genie, who pass your application to the lenders they work with.
Credit reference and fraud prevention agencies (section 6).
Our service providers, who handle information only on our instructions and under contract: our business software, Dealer OS, and the hosting it runs on (Supabase and Vercel, with your information held in London); messaging and phone providers Meta (WhatsApp), Twilio (texts and calls), RingCentral (our phone system) and Resend (email); AI provider Anthropic (section 5); payment providers Stripe and GoCardless; accounting and records providers Zoho and Xero; and website chat provider Zoho SalesIQ.
Advertising platforms: Meta (Facebook and Instagram), Google, TikTok, Microsoft and OpenAI (ChatGPT ads), as described in section 10.
Insurers, warranty providers and vehicle data providers, where you take a product from them or we need to check a car.
Regulators, the police, courts and our professional advisers, where the law requires it or to defend a claim.
A buyer of our business, if RightDrive or part of it is sold, under the same protections.
Our current lender panel:
| Lender | Privacy notice |
|---|---|
| Oodle Car Finance | https://oodlecarfinance.com/privacy-policy/ |
| Blue Motor Finance | https://bluemotorfinance.co.uk/ |
| Car Finance Genie | https://carfinancegenie.co.uk/privacy-policy/ |
| Finclusion | https://www.finclusion.co.uk/privacy-notice |
| Advantage Finance | https://www.advantage-finance.co.uk/home/privacy.asp |
| Go Car Credit | https://gocarcredit.co.uk/privacy-notice/ |
| First Response Finance | https://www.firstresponsefinance.co.uk/about/privacy-policy/ |
| Dominion Finance | https://dominionfinance.co.uk/privacy-notice/ |
| Tandem Car Finance | https://www.tandem.co.uk/privacy-policy |
| Lendable (Autolend) | https://www.lendable.co.uk/privacy-policy |
| Moneybarn | https://www.moneybarn.com/privacy-policy |
| Zopa Car Finance | https://www.zopa.com/privacy-notice |
| Startline Motor Finance | https://www.startlinemotorfinance.com/privacy-policy |
Some of our service providers are based outside the UK, mainly in the United States, or may access information from there. Where that happens we make sure your information is protected as UK law requires, by relying on UK adequacy regulations (including the UK Extension to the EU US Data Privacy Framework for providers certified to it), or on the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses approved by the Information Commissioner. You can ask us for details of the safeguards for any transfer.
If you are a customer, or you have applied or enquired about a car or finance, we may send you news and offers about similar cars and finance by email or text, unless you have told us not to. We will only send marketing by WhatsApp, or to people who are not customers, if you have agreed. We record your choices separately for email, text, WhatsApp, phone and post.
You can stop marketing at any time, free of charge: use the unsubscribe link in any email, reply STOP to a text or WhatsApp message, or contact us (section 17). We will still send you messages about an application or purchase you are in the middle of.
Our website. We count visits and see which pages are used, using our own cookie, so we can improve the site. You can opt out of this through our cookie settings. With your permission, we also use cookies and pixels from Meta, Google, TikTok and Microsoft to measure how well our adverts work, and we may record how a page is used (clicks, scrolling and pages viewed) to fix problems; anything you type is hidden. When you send us an enquiry, we link it to your visit so we know which advert or page brought you to us. You can change your choices at any time from the cookie link at the bottom of every page. Our Cookie Policy has the full list.
Advertising platforms. If you enquire after clicking one of our adverts, we tell that platform that the advert produced an enquiry and, later, whether it led to a finance approval or a sale, using the click reference and a scrambled (hashed) copy of your email address or phone number. We may also add a hashed copy of your contact details to our audience lists on Meta and Google, to show you relevant adverts, to stop showing adverts to people who have already bought, or to find people with similar interests. The platforms match the hashed details against their own users and do not receive your application details. You can tell us at any time to stop sharing your details with advertising platforms, and we will remove you from our audience lists.
Phone calls. Calls to and from us may be recorded. You will be told at the start of a recorded call. We use recordings to check what was agreed, train staff and handle complaints. Recordings may be turned into text and summarised by our AI tools.
CCTV. We use CCTV at our premises for security and to keep track of cars on site, including reading number plates. Signs show where cameras are in use.
We keep your information only as long as we need it, then delete it or make it anonymous.
| Information | How long we keep it |
|---|---|
| An enquiry that did not go further | 12 months from our last contact |
| A customer who did not buy | 24 months from our last contact |
| A finance application or agreement we arranged, and records of any commission we were paid | At least six years after the agreement ends, and longer where the FCA requires it |
| Sales and accounting records for a car you bought | Six years after the end of the financial year of the sale |
| Messages, notes and marketing records where no sale followed | 24 months |
| Call recordings | 3 months |
| Website statistics and IP addresses | 14 months |
| Website session recordings | 3 months |
| CCTV | 30 days, unless needed for an incident |
| Your marketing choices and opt outs | As long as we hold your details, so we keep respecting them |
We protect your information with technical and organisational measures, including encryption in transit, encryption of bank details and other sensitive details in our systems, secure staff sign in, access limited to staff who need it, and audit logs of changes to records. Our staff and service providers are bound by confidentiality. No method of sending information over the internet is completely secure, so please do not send bank details or documents by ordinary email; use the secure upload link we send you.
Our services are for adults. You must be 18 or over to apply for finance, and we do not knowingly collect information about anyone under 18.
You have the right to:
ask for a copy of the information we hold about you;
ask us to correct information that is wrong or incomplete;
ask us to delete your information;
ask us to restrict how we use it;
ask us to send information you gave us to you or another organisation in a machine readable format;
object to our use of your information where we rely on legitimate interests, and object at any time to direct marketing and to sharing with advertising platforms;
withdraw consent at any time, where we rely on it;
ask for a person to review an automated decision and to challenge it (section 5).
We will reply within one month. If your request is complex or you have made several, we may extend this by up to two further months and will tell you why within the first month. We may need to confirm your identity, and may ask you to clarify your request; the time limit pauses while we wait. Requests are normally free.
If you ask us to delete your information and we have arranged finance for you, we must keep the finance file for the period in section 11. We will tell you this, stop using it for anything else, and delete the rest.
If you are unhappy with how we have used your information, please tell us first at complaints@rightdrive.co.uk. We will acknowledge your complaint within 30 days and respond without undue delay.
You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113, or write to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
We will update this notice when the way we use information changes. The date at the top shows when it was last updated. If we make an important change, we will tell customers directly.
Data Protection Officer, RightDrive (UK) Limited, Unit C1, Cranleigh Road, Fareham PO16 9DR
Data protection requests and general queries: customer@rightdrive.co.uk
Complaints: complaints@rightdrive.co.uk
Telephone: 02392 378474
