1. WHO WE ARE
ONYX VAULT LTD ("Onyx Vault", "we", "our" or "us") is committed to protecting your privacy and handling your personal information responsibly.

For the purposes of UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, ONYX VAULT LTD is the Data Controller.

Company Details
Company Name: ONYX VAULT LTD
Company Number: 16905446
Registered Office: 82a James Carter Court, Bury St. Edmunds, IP28 7DE
ICO Registration Number: ZC162139
If you have any questions regarding this Privacy Policy or the personal information we hold about you, please contact:
Email: info@onyxvaultuk.com
Telephone: (+44) 7444 636 676
Postal Address: 82a James Carter Court, Bury St. Edmunds, IP28 7DE

Trading Address: Gasoline Juice, Unit 14-A1 The Royal Ordinance Depot, Northampton, NN7 4PS


2. INFORMATION WE COLLECT
We may collect and process the following information:
Identity Information

• Full name

• Date of birth

• Driving licence details

• Photographic identification

Contact Information

• Home address

• Email address

• Telephone numbers

Financial Information
Where you request vehicle finance or other regulated products, we may collect:

• Employment details

• Income information

• Banking information

• Credit-related information

Vehicle Information

• Vehicle registration numbers

• Vehicle Identification Numbers (VIN)

• Vehicle ownership records

• Purchase and transaction history

• Warranty and service records

Communications

• Telephone calls

• Emails

• Website enquiries

• Social media messages

• Customer feedback

Website Usage Information
When you visit our website, we may automatically collect certain technical information such as:

• IP address

• Browser type

• Device information

• Website usage statistics

• Cookie information
  
   

3. HOW WE USE YOUR INFORMATION
We only use your personal information where we have a lawful basis to do so.
Contractual Obligations
To:

• Buy or sell vehicles

• Arrange vehicle collection and delivery

• Provide aftersales support

• Process payments

• Manage warranties

• Respond to enquiries
   

Legal Obligations
To comply with legal and regulatory requirements including:

• HMRC record keeping

• Vehicle registration requirements

• Anti-Money Laundering obligations

• Fraud prevention

• FCA compliance requirements where applicable
   

Legitimate Business Interests
To:

• Manage customer relationships

• Improve our services

• Respond to customer enquiries

• Handle complaints

• Notify customers of vehicle recalls or safety issues

• Send service and MOT reminders

• Protect our business from fraud
   

Consent
Where you have given consent, we may contact you regarding:

• Vehicle stock updates

• Marketing promotions

• Company news

• Events and offers

You may withdraw your consent at any time.


4. FINANCE APPLICATIONS
If you request vehicle finance, we may share your personal information with finance providers, lenders, brokers and credit reference agencies for the purpose of assessing your application.

These organisations may carry out credit and affordability checks and may retain records of those searches in accordance with their own privacy policies.


5. WHO WE SHARE YOUR INFORMATION WITH
We never sell your personal information.

We may share your information where necessary with:

• Finance providers and brokers

• Warranty providers

• Insurance providers

• The DVLA

• HMRC

• The Financial Conduct Authority

• Professional advisers including accountants and solicitors

• IT, website and software providers

• Law enforcement agencies where legally required

All third parties are required to process your information securely and in accordance with applicable data protection laws.


6. MARKETING COMMUNICATIONS
Where you have agreed to receive marketing communications, we may contact you by:

• Email

• Telephone

• SMS

• Post

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in our emails

• Contacting us directly

• Updating your communication preferences

7. TELEPHONE CALLS AND COMMUNICATIONS
We may monitor or record telephone calls and retain written communications for:

• Training purposes

• Quality assurance

• Regulatory compliance

• Fraud prevention

• Dispute resolution

8. COOKIES AND WEBSITE ANALYTICS
Our website may use cookies and analytics tools to improve functionality and understand how visitors use our website.

You can control cookies through your browser settings.

Further information can be found in our Cookie Policy.


9. HOW LONG WE KEEP YOUR INFORMATION
We only keep personal information for as long as necessary.

In most cases:

• Customer and transaction records are retained for up to 7 years after our last interaction with you.

• Finance-related records may be retained for longer where required by lenders, regulators or legal obligations.

• Marketing records are retained until consent is withdrawn or no longer valid.
   

When information is no longer required, it will be securely deleted or anonymised.


10. YOUR RIGHTS
Under UK GDPR you have the right to:

• Be informed about how your information is used

• Access the personal information we hold about you

• Request correction of inaccurate information

• Request deletion of your information in certain circumstances

• Restrict processing of your information

• Object to processing

• Request transfer of your information to another organisation

• Withdraw consent where processing is based on consent
   

To exercise any of these rights, please contact us using the details provided in Section 1.

We may request proof of identity before processing your request.


11. DATA SECURITY
We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, disclosure or destruction.

While we take every reasonable precaution, no method of transmitting information over the internet can be guaranteed to be completely secure.


12. INTERNATIONAL TRANSFERS
Some of our service providers may process information outside the United Kingdom.

Where this occurs, we will ensure appropriate safeguards are in place to protect your personal information in accordance with UK GDPR requirements.


13. COMPLAINTS
If you have concerns about how we handle your personal information, please contact us first so we can attempt to resolve the issue.

You also have the right to complain to the Information Commissioner's Office (ICO).
Information Commissioner's Office
Website: www.ico.org.uk
Telephone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF


14. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements or regulatory obligations.

The latest version will always be available on our website.
Version: 1.1
Last Updated: 18/06/2026