Legal
Privacy notice
What we collect when you contact us, why, how long we keep it and your rights.
Last updated: 5 October 2026
This notice is a working draft and has not yet been reviewed by a lawyer. Items in square brackets are still to be confirmed.
Who we are
Coggy Cars is the data controller for the personal information described in this notice.
[Company details to be confirmed]
Registered name, company number, registered address and ICO registration number to be added.
To contact us about your data, use our enquiry form and mention “privacy” in your message.
What we collect
When you send an enquiry through this website, we collect:
- your name and email address
- your phone number, if you choose to give it
- the type of enquiry, and your message
- your budget, the type of car and any model you mention, if you choose to give them
- that you ticked the consent box, and when you sent the enquiry
When you place a custom order, we also collect the car and spec you ask for (make, model, years, mileage, grade, colour, features and budget), your postcode for delivery estimates, your order reference, and whether your sourcing deposit has been paid.
The form also contains a hidden field that people never see. It helps us spot automated spam and should always be empty.
Like most websites, the servers that host this site may record technical information such as your IP address, browser type and the time of each request. These records are used to keep the site secure and working, and to block abuse.
If you go on to buy a car through us, we’ll need more information, such as your address and the details needed for import and registration paperwork. We’ll explain that at the time.
Why we use it, and our lawful basis
- To reply to your enquiry or handle your order and give you estimates, shortlists and quotes you ask for. Our lawful bases are your consent, and taking steps at your request before entering into a contract with you.
- To keep the website secure and prevent spam and abuse. Our lawful basis is our legitimate interests in running a safe website.
- To meet legal obligations if you become a customer, for example customs, VAT, vehicle registration and accounting records.
We don’t use your details for marketing unless you separately ask us to, and we never sell them.
Who we share it with
- Trusted logistics, shipping and vehicle-registration providers who help us deliver your order, only if you ask us to search for or buy a car, and only the details needed to do that. Some of this happens in Japan, which the UK recognises as providing an adequate level of data protection.
- Service providers who host this website and handle our email, under contracts that require them to protect your data.
- Our payment provider, Stripe, which processes your deposit payment on its secure payment page. We don’t see or store your card details.
- Government bodies such as HMRC and the DVLA, where the law requires it to import and register your car.
How long we keep it
If you don’t go ahead, we keep your enquiry for up to 12 months after our last contact, so we can pick up the conversation if you come back, and then delete it. [Retention period to be confirmed]
If you become a customer, we keep the records we need for as long as the law requires, which for tax and accounting records is usually six years.
Server security logs are kept for a short period and then deleted automatically.
Cookies and tracking
This website does not use analytics, advertising or tracking cookies, and it doesn’t load scripts, fonts or images from third-party websites. There’s no cookie banner because there’s nothing to opt into.
Your rights
Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct information that is wrong or incomplete
- ask us to delete your information
- ask us to restrict how we use it, or object to us using it
- ask for your information in a portable format
- withdraw your consent at any time — this doesn’t affect anything we did before you withdrew it
To use any of these rights, contact us through the enquiry form. We’ll reply within one month.
Complaints
If you’re unhappy with how we’ve handled your information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk/make-a-complaint.
Changes to this notice
We’ll update this page if anything changes and show the date at the top.