BMW’s compact, family Sports Hatchback is available with either three or five doors and comes equipped with rear-wheel drive, a choice of exceptionally fast and efficient engines and technology integrations that ensure complete driving pleasure.
BMW On Lease is a trading name of ACL Automotive Ltd.
By choosing BMW On Lease we understand that you have placed a great deal of trust in ACL Automotive Ltd. We also know that you will want all personal information that you submit to us to be kept as private and as secure as possible. For your peace of mind, here’s how we will and will not use the personal information you give us.
Who We are
BMW On Lease is a trading style of ACL Automotive Limited who are authorised and regulated by the Financial Conduct Authority, registration number 723172.
ACL Automotive Ltd t/a BMW On Lease are a credit broker not a lender.
By entering your personal information in the BMW On Lease web site, you accept that we may retain your information and it may be held by ACL Automotive Ltd or by any third party company which processes it on our behalf.
The Data Controller
If you have any questions about this privacy notice or how we use your personal data, you can contact us in writing to:
Data Protection Officer
ACL Automotive Ltd t/a BMW On Lease
2a Gaunts Business Centre
Or by emailing: email@example.com
What we collect and why
The information we gather from customers helps us to continually improve the service we offer to our customers.
When you use the BMW On Lease service, there are different ways we gather information about you:
- When you register with us, we ask for information such as your name, e-mail address, contact numbers and – if you submit a lease application – your address, employment and bank details. We keep a record of this information. All this is necessary for us to recognise you as a registered customer and to fulfil the orders you place with us.
- We keep a record of the cars you lease through our service, which means we can deal a lot quicker with any problems you may experience with your contract(s) and/or vehicle(s).
- We may keep a record of e-mail correspondence you send us. This helps us keep track of your likes and dislikes and any problems or concerns you’ve had with our products or services.
- Telephone calls made to our Customer Service Helpline may be recorded for monitoring and quality control purposes.
How We Use Your Personal Information
All the information we collect via our website or through correspondence with you is used to operate and improve the service we offer you. We are committed to using your personal information only for:
- Dealing with orders and accounts for the supply of our services and related products.
- Monitoring and improving the BMW On Lease website and our services.
- Planning and managing BMW On Lease business activities, including analysing customers’ shopping habits and preferences.
- Enabling third parties to carry out technical, logistical or other functions on our behalf.
- Conducting market research including statistical analysis of customer behaviour which we may disclosed to third parties in depersonalised, aggregated form.
- Providing you with information about the products and services we offer.
- Providing you with periodic communications (this may be by post, telephone, SMS, email or as part of your BMW On Lease vehicle delivery) about features, products, services, events, promotions and special offers. Such communications from BMW On Lease might include advertising for or offers from third parties. If you wish to withdraw your consent from receiving these communications, you can do so by informing us in writing to firstname.lastname@example.org .
- Enabling our debt collection agency to collect payment from you should that be necessary.
- Preventing and detecting fraud or abuses of our website.
- Allowing us to comply with any requirements imposed on ACL Automotive Ltd by law or court order.
When we share your personal information
Information about our customers is an important part of our business and we do not sell or rent your information to anyone else to enable them to send you direct marketing. However, there are circumstances where it is necessary for us to share personal information in order for us to provide our customers with the BMW On Lease service. At all times where we use or disclose your information it will remain secure.
The circumstances where we may share some of your information with others are described below:
Third Party Service Providers
We use several other companies and individuals to perform functions on our behalf. For example, we engage companies to analyse customer information, provide marketing assistance, process credit card payments. We also engage agents including credit reference agencies, fraud prevention and detection agencies and debt collection agencies that we use to process the orders you place with us or who assist us in the service we provide to you. In these instances, we provide them with only the information they need to perform their function.
Sometimes we send offers to selected groups of BMW On Lease customers. All such promotional offers will come via ACL Automotive Ltd. If you wish to withdraw your consent from receiving these communications, you can do so by informing us in writing.
Protection of ACL Automotive Ltd and others
We release account and other personal information when we believe release is appropriate to comply with the law, to enforce our Terms and Conditions and other agreements or protect the rights, property or safety of ACL Automotive Ltd, our trading brands, our customers or others.
Cookies and Online Marketing Management Tools
A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.
Cookies may be either “persistent” cookies or “session” cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.
How are Cookies used?
These pieces of information are used to improve services for you through, for example:
- Enabling a service to recognise your device so you don’t have to give the same information several times during one task
- Recognising that you may already have given a username and password so you don’t need to do it for every web page requested
- Measuring how many people are using services, so they can be made easier to use and there’s enough capacity to ensure they are fast
- Analysing anonymised data to help us understand how people interact with govt services so we can make them better
You can manage these small files and learn more about them here All About Cookies.org. There’s also further information on how to remove cookies at About Cookies: how to control cookies.
First Party Cookies
These are cookies set by our web domain known as ‘first-party’ cookies. Some are necessary to the functionality of the site, others provide information to us that we analyse to monitor and improve the site. These first-party cookies do not store or collect any personal information or anything that make you personally identifiable to us. Typically, the cookies generate a random, unique number to store information about a user.
Control & Delete Cookies
Alternatively, you may wish to visit the About Cookies website, which contains comprehensive information on how to do this on a wide variety of browsers. You will also find details on how to delete cookies from your machine as well as more general information about cookies.
Please be aware that restricting cookies may have an impact upon the functionality of our website. If you wish to view your cookie code, just click on a cookie to open it. You’ll see a short string of text and numbers. The numbers are your identification card, which can only be seen by the server that gave you the cookie.
For information on how to do this on the browser of your mobile phone you will need to refer to your handset manual. To opt-out of third-parties collecting any data regarding your interaction on our website, please refer to their websites for further information
Cookie Name: _utma – Expires: 2 years from set/update
Cookie Name: _utmb – Expires: 30 mins from set/update
Cookie Name: _utmc – Expires: End of browser session
Cookie Name: _utmz – Expires: 6 months from set/update
For further details on the cookies set by Google Analytics, please refer to the Google Code website
Security and Data Retention
Security is very important to ACL Automotive Ltd and we use sophisticated technology to ensure that your information is protected at all times. Secure Socket Layer (SSL) encryption technology is used for protection of information in transit for any sensitive transactions such as bank details. Additional security procedures are in place to protect the confidentiality and integrity of your information.
We maintain physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personally identifiable customer information. Our security procedures mean that we may occasionally request proof of identity before we disclose personal information to you.
It is important for you to protect against unauthorised access to your password and to your computer. Be sure to sign off when using a shared computer.
Where possible, BMW On Lease will take steps to erase any personal data that is no longer required for the purposes for which it was collected or otherwise processed, or if you withdraw consent for its processing and retention.
If you enter into or took steps to enter into a contract with BMW On Lease, we will store the data for period of six years for compliance with our general legal obligations and for the exercise or defence of any legal claims.
Under the GDPR, you have the right to ‘block’ or request the deletion or removal of personal data to prevent further processing. This right to erase is also known as ‘the right to be forgotten’. Specific circumstances in which you can request the deletion or removal of personal data includes:
- Where the personal data is no longer necessary for the purposes for which it is collected or otherwise processed
- Where you withdraw consent
- When you object to the processing and there is no overriding legitimate interest for continuing the processing
- Where the personal data was unlawfully processed (i.e. otherwise in breach of the GDPR)
- Where the personal data has to be erased in order to comply with a legal obligation
- In case a deletion is not possible due to legal, statutory or contractual retention periods, or if it requires disproportionate efforts or prejudices your legitimate interests, the data will be blocked instead of deleted.
If you give us false or inaccurate information and fraud is identified, details will be passed to the fraud prevention agencies. We and other organisations may also share, access and use this information to prevent fraud and money laundering, for example when:
- Checking details on applications for credit and credit related or other facilities
- Managing credit and credit related accounts or facilities
- Recovering debt
- Checking details on proposals and claims for all types of insurance
- Checking details of job applicants and employees
In addition, law enforcement agencies may access and use this information.
Data over the Internet
The internet is a global network – therefore there are cases where your data travels internationally, which may include places outside the European Union. We want you to know that if you visit or order a car through the BMW On Lease service, you’re agreeing and authorising us to process data this way.
If at any time we become aware that your data has been compromised, or that a breach of our systems and controls has occurred, which has an impact on the security of your data, we will notify the Information Commissioner’s Office, and you, without undue delay.
Subject Access Requests
You have the right to request access to a copy of the personal information that we hold about you. This is also known as a ‘Subject Access Request’. This information is provided to you free of charge however, we can refuse to respond or charge a ‘reasonable fee’ of £10 Inc VAT when a request is manifestly unfounded, excessive or repetitive.
We will provide this information in a structured, commonly used and machine-readable form such as a CSV file. This allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to usability.
If you would like to submit a Subject Access Request, please contact our Data Protection Officer in writing to:
Data Protection Officer
ACL Automotive Ltd t/a BMW On Lease
2A Gaunts Business Centre
We will respond to your request without delay and at the latest, within one month of receipt of your request.
Rectifying or updating personal data
If you believe the personal data we hold about you is inaccurate or incomplete, you have the right to rectification. Where possible, we will also inform any third parties to whom we have disclosed the personal data in question to so they can rectify their records.
We will typically respond to your request within one month, although this can be extended by two months if your request for rectification is complex, such as a Transfer of Lease.
You have the right to withdraw your consent for us to collect, process and store your data at any time. If you wish to withdraw your consent, please confirm this in writing to our Data Protection Officer:
Data Protection Officer
ACL Automotive Ltd t/a BMW On Lease
2a Gaunts Business Centre
By Email: email@example.com
Please note, by withdrawing consent, BMW On Lease may be unable to execute the contract that you have entered into with us and will result in termination of our services. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.