Data Protection and Privacy Policy

White House Motors

 

White House Motors ensures that personal information given to it is protected from unauthorised access, and only used for:

  • Processing garage service orders, generating job sheets and invoices.
  • Archiving details of work done because of the legitimate interest in viewing work history if the car returns.
  • Reminding previous MOT customers of the renewal date of their test because of the legal interest.
  • Checking data for errors, duplications and inactive customers because of the legitimate interest in keeping company records accurate.
  • We never share personal information with anybody, unless required by law.

 

Protection is assured by:

  1. Having documented data protection procedures and keeping proof these are followed.
  2. Appointing a Data Controller responsible for maintaining this policy and Data Processor responsible for ensuring that processing is done as documented.
  3. Regularly analysing where and how information is stored and processed to ensure all risks to personal information are properly identified, understood and appropriate protection measures taken.  
  4. Ensuring there is a legal basis for each process that uses personal information.
  5. Regularly checking personal data for accuracy, duplication and removing inactive customer information from the company’s data stores unless required for archiving, and legal reasons.  Usually someone is regarded as inactive if they have not made a booking of any type in the last 3 years.
  6. Ensuring that all staff that hold and process information are regularly trained in this policy, and that this includes the process of ensuring a prompt notification of any breach to the Information Commissioner’s Office as required by law
  7. Giving information on what information is held on a subject on request by that person.
  8. Never sharing personal data with third parties.
  9. Never sending marketing information.
  10. Ensuring the accounting service, garage management system, marketing, email and web server providers give written assurance of compliance with appropriate security and privacy standards to enable this policy to be delivered.
  11. Not holding or processing data.
  12. Not collecting information on visits to the website through logs or cookies that can be attributed to a person.

 

Awareness, Objections and Data Requests

  • Awareness of the policy is ensured by publishing it on the website and displaying notices about it in email communications, and in garage reception.
  • Anybody can object to the company’s use of their personal data by contacting the Data Controller to have it removed from White House Motors data stores.
  • Anybody can request details of what information is held on them.
  • All questions relating to data protection and privacy should be sent to the Data Controller at the email address below.  If this does not result in a satisfactory resolution the ICO’s office can be contacted and details are on its website: ico.org.uk.

 

Data Controller – Peter Barter, data controller. recovery@whitehousemotors.co.uk

 

The Information Commissioner’s website: ico.org.uk explains rights to request information and how to complain.

 

Peter Barter- Proprietor White House Motors