Who are we?

The organisation responsible for the processing of your personal information is NextGear Capital UK Limited (NGC) of:

NextGear House
Kingsfield Court
Chester Business Park
Chester
CH4 9RE

You can contact our privacy team by emailing ukca.dataprotection@coxautoinc.com.

NGC is part of the Cox Automotive Europe (CAE) group of companies (“We”, “Us”, and “Our”). More information on which companies are included in the CAE group can be found at https://www.coxautoinc.eu/our-products/. References in this privacy policy to the ‘Cox Automotive Group’ should be taken to include all of these companies.

What personal information do we collect and what do we do with it?

NGC collects and uses personal data including names and contact details, information about your financial position, website usage data, and information about your business for the following purposes:

1. To enable Us to fulfil contracts entered into between you and NGC, including the provision of any services that form part of those contracts.
2. To carry out credit checks and to monitor for, detect and prevent fraud.
3. To administer your account, including keeping you informed of changes to Our products and services and responding to your queries, complaints and other correspondence.
4. To carry out research and statistical analysis for the purposes of improving and enhancing Our services.
5. To monitor use of Our website and to collate, analyse and report on aggregate, anonymised data derived from personal data of those who use Our site.
6. To provide you with offers about Our products and services that you request from Us or which We feel may be of interest to you, unless you have told Us not to contact you about these offers.
7. We process personal data relating to how you manage your account and your account activity for the purposes of assessing the level of business risk. This includes sharing it with other companies in CAE.
8. We may monitor and record calls, emails and SMS messages between you and Us for quality control, for training purposes, to improve Our services and to keep a record of what was agreed.

Legal basis for processing

• Where we process your personal information for the purposes of providing you with products or services, we do this on the basis that it is necessary for the performance of the contract between you and Us.
• Where we process your personal information for matters which are not strictly required for the performance of our contracts but are not related to marketing activities, we process this personal information on the basis of our legitimate interests. We consider it within our legitimate interests, as a funding business, to conduct credit checks and to obtain and share personal information about the way in which you manage your accounts with us. This is to protect us from taking uninformed risks by providing funding to businesses who have a poor credit history.
• Some of our checks are carried out to comply with anti money laundering regulations and so processing of any personal information
• Where we process personal information for marketing purposes we do so on the basis that you have provided opt in consent for us to do so. You can withdraw your consent by emailing our data privacy team.

Who your personal information may be disclosed to

Your personal information will be shared with the following recipients:

• Our employees and employees of any of our suppliers where necessary to ensure the provision of the products or services you have requested.
• To the police or other law enforcement or investigative bodies where necessary to support them in the investigation of criminal or similar matters.
• Other members of the CAE Group for marketing purposes.
• Our suppliers and partners for the purposes of cross matching and establishing whether you are a mutual customer of Ours and of the partner or to enable the partner to provide the services needed to fulfil the contract between you and Us.

International Transfers of personal information

We transfer your personal information outside of the UK.
We transfer your personal information to the countries listed below using the associated safeguards:

• To the United States of America to our parent company Cox Automotive Inc via standard contractual clauses.
• To Brazil to our parent company’s subsidiary there Cox Automotive Brazil using standard contractual clauses.

Your rights in relation to your personal information

You have the right to:

• Object to the processing of your personal data in certain circumstances
• Object to the use of your personal information for direct marketing purposes
• Request the deletion of your personal data in certain circumstances
• Request access to the personal information we hold about you
• Request that we rectify inaccurate personal information we hold about you
• Restrict the way in which we can use your personal information in certain circumstances
• Request the portability of your data in certain circumstances
• You have the right, where personal information is processed on the basis of consent, to withdraw that consent at any time
• If you are unhappy with the way in which we have handled your personal information you have the right to lodge a complaint with the Information Commissioner’s Office. You can contact them at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or online at www.ico.org.uk.

Retention & disposal of personal information

We will retain your personal information for as long as we require it in order to provide you with the products and services you have requested. We will retain certain personal information beyond that point where it is necessary for compliance with a legal obligation we are subjected to or where we have a legitimate business reason to do so.

Automated decision making

We do not undertake any automated decision making using personal information we collect about you.