GDPR Compliance

Last updated: June 2026

Our Commitment to Data Protection

windy-automotives is committed to ensuring the security and protection of the personal information that we process, and to provide a compliant and consistent approach to data protection. We have implemented robust policies and procedures to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Lawful Basis for Processing

We process personal data on the following lawful bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
• Contract: Where the processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
• Legitimate Interests: Where the processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.

Your Data Protection Rights

Under data protection law, you have rights including:

• Right of Access: You have the right to ask us for copies of your personal information.
• Right to Rectification: You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Right to Erasure: You have the right to ask us to erase your personal information in certain circumstances.
• Right to Restriction of Processing: You have the right to ask us to restrict the processing of your personal information in certain circumstances.
• Right to Object to Processing: You have the right to object to the processing of your personal information in certain circumstances.
• Right to Data Portability: You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

How We Protect Your Data

We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage. These measures include:

• Secure storage of electronic data with access controls
• Regular review of data collection, storage, and processing practices
• Restriction of access to personal information to employees, contractors, and agents who need that information to process it for us
• Confidentiality agreements with staff and contractors who handle personal data

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process your personal data, and applicable legal requirements.

International Transfers

We do not transfer your personal data outside the United Kingdom. All data processing takes place within the UK using UK-based servers and service providers.

Data Breach Procedures

We have procedures in place to detect, report, and investigate personal data breaches. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Exercising Your Rights

To exercise any of your rights, or if you have questions about how we handle your data, please contact us:

windy-automotives
47 Greenwood Lane
Richmond, Surrey
TW10 6QJ
Email: [email protected]

Complaints

If you have any concerns about our use of your personal information, you can make a complaint to us at the contact details above. You also have the right to complain to the Information Commissioner's Office if you are unhappy with how we have used your data. Their contact details are:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire
SK9 5AF
Website: ico.org.uk