Data Protection Policy

1. Data We Collect

• Identity & Verification: Full name, phone number, email address, physical address, driver’s license details (number, expiry date, photo ID scan).
• Test Drive & Booking Details: Preferred dealership location, date/time, vehicle model requested, current vehicle details (if trade-in option selected).
• In-Vehicle & Telematics Data (During Drive): Real-time GPS location, driving metrics (speed, braking, acceleration), cabin audio/video (if dashcams or cabin cameras are active for security), and battery energy consumption logs.
• Website & Technical Data: IP address, device type, browser metadata, and cookie tracking data.

2. Legal Basis & How We Use Your Data

• Identity & Eligibility Verification: Validating driver’s license and insurance eligibility prior to key handover.
• Service Fulfillment: Booking, managing, and confirming your test drive appointment.
• Vehicle Safety & Fleet Management: Monitoring vehicle status, preventing theft, tracking vehicle location during the drive, and assessing accident liability.
• Sales & Marketing: Contacting you post-drive for feedback, sales follow-ups, financing offers, or trade-in evaluations (requires explicit marketing opt-in).

3. Data Sharing & Third-Party Transfers

• Authorized Dealerships & Retail Partners: Sharing contact details and appointment schedules with local dealerships executing the test drive.
• Service Providers: Cloud hosters, CRM systems (e.g., Salesforce/HubSpot), SMS/email confirmation services, and driver verification vendors.
• Insurers & Law Enforcement: Disclosing telematics or identity data in the event of an accident, vehicle damage, traffic violation, or law enforcement request.

4. Data Retention & Security

• Driver’s license scans are retained only until identity verification is complete or as required by insurance policies (e.g., 30–90 days).
• In-vehicle telematics/location data is anonymized or purged within a set window post-drive unless associated with an incident.
• Web lead data is retained per standard sales retention schedules unless deletion is requested.

5. Your Data Protection Rights

• Access & Rectification: Request copies of personal data collected or correct inaccurate information.
• Erasure ("Right to be Forgotten"): Request deletion of personal data when legal/contractual retention mandates expire.
• Marketing Opt-Out: Withdraw consent for promotional communications at any time.