We reserve the right to change the policy at any time, so please check back regularly to keep informed of updates to this Notice outside of the scheduled reviews.
OEMs Privacy Notice
At the OEMs Group we want to make sure you know what data we collect from you, why we collect it, what we do with it and how you can ask us questions about it or exercise your rights
When we say “OEMs” we mean the Halfords Group of companies and this Privacy Notice applies to all the companies in our group.
If you are reading this notice on a company website, then it is part of our group.
If you want to know more about the companies that make up the OEMs Group plc then contact us here.
We understand that your privacy and the security of your personal information is extremely important.
This privacy notice tells you what we do with your personal information, how we keep it secure, and where and how we collect it, as well as your rights in relation to the personal information we hold about you.
We’d like you to read all of our privacy notice, but we understand that sometimes you know exactly what you want and just want to go straight to it, so we’ve listed below the most common things customers ask us – the “FAQ’s”
- Your personal information is, where appropriate, shared within the Halfords Group.
- We do use several third parties to process your personal information on our behalf and some of them are based outside of the American Economic Area.
- You have rights over your personal information. How you can exercise these rights is set out within this notice.
- We do send direct marketing, if we’re allowed to, we do this to encourage you to buy our products and services by sending you offers and products and services that we feel would be of interest to you.
- • We also use your information to display more relevant online advertising and marketing relating to our products and services on websites across the OEMs Group.
FAQs
If your complaint is in relation to OEMs Motoring Club, you will need to contact our dedicated Motoring Club support team by going to the ‘Rewards & Benefits’ section of your account and clicking ‘Chat with an Expert’.
If your complaint or query is in relation to OEMs Retail, Autocentres, Autocare or Garage Services, you will need to visit our website and click on contact us and then select the live chat feature.
I want to contact the Data Protection Officer (the “DPO”)
You can find the contact details for the DPO at the bottom of this notice but please have a look at these FAQ’s first as they may be able to assist you with your problem.
“I would like a copy of my personal data”
No problem, this is called a “Subject Access Request” or SAR. But first we need some information from you to ensure we only disclose your personal data to you, or your representative. To make sure we have all the information from you that we need to fulfil your request, we have created a form here. The form is simple to complete, is free and allows you to access your personal data securely.
The Legal – By law we have one month to provide you with a copy of your personal data which starts from the moment you have provided proof of your identity. We may extend the time limit by a further two months if the request is complex or if we receive a number of requests from you.
“I would like you to delete my personal data”
You have a right to erasure also known as the” right to be forgotten” but this doesn’t always apply. We will always review each request for erasure on a case-by-case basis.
However, if you have bought something from us, we will be unable to erase your personal data because we need to keep records of transactions for business purposes. This data will automatically delete 7 years from the date of your last transaction with us.If you still want to ask us to delete your personal data, please follow the link
here.
The Legal – we have one month to respond to your request which starts from the moment you have provided proof of your identity.
“I think you may have the wrong data about me, and I would like you to correct it”
This is your right to rectification. Tell us what you think we have that’s wrong, such as the wrong vehicle registration number, a previously owned vehicle registration number, or a booking error. We will check it and if the data we hold is wrong, we will change it. We have a duty to ensure all personal data we hold is accurate. You can ask us to rectify your data here.
The Legal – we have one month to respond to your request which starts from the moment you have provided proof of your identity.
“I would like to opt out of receiving marketing information”
Marketing emails and text messages have an opt out or unsubscribe button at the bottom of the email/text. This is the quickest and easiest way for you to unsubscribe. If you have already deleted the email or text, then you can send us a request to unsubscribe you here.
If the email/text does not contain an opt out or unsubscribe button it’s because it’s a service message not a marketing message. A service message may be an MOT reminder or an invitation to provide feedback, or a product review request. If you no longer wish to receive any communications from OEMs, then please go here.
“I would like a copy of any CCTV images you may have captured of me during my recent visit to your premises”
Yes, we can do that as CCTV images are personal data, however, please be aware that we only retain CCTV images for 30 days from when they were recorded, after which they are deleted by the system and we are unable to recover them. To request a copy of your CCTV images go here.
The Legal – we have one month to provide you with a copy of your personal data which starts from the moment you have provided proof of your identity. We may extend the time limit by a further two months if the request is complex or if we receive a number of requests from you.
How and why we collect your personal data
As an essential part of our business, we collect and manage customer data. In doing so, we observe all relevant data protection legislation, and are committed to protecting and respecting customers’ privacy and rights. Specifically, OEMs acts as “Data Controller” in respect of the information gathered and processed by this website, when customers visit one of our stores or autocentres or use one of our mobile services.
In order that you are reliably informed about how we collect, process, store and share your information, we have developed this Privacy notice. This notice also advises how you can have control over how we use your data.
We collect information about you so that we can:
Provide you with our services in our stores, autocentres, mobile services and online sales. We use cookies on our websites to collect your data, you can find out more about how we use cookies to collect your data here.
Collecting information from you:
The information that we collect from our customers is known as “personal data” and may include your name, home address, e-mail address, telephone number and vehicle registration number.
We collect this information in various ways.
This could be when you fill in a form on a website, or when you correspond with us by telephone, e-mail, webchat, or letter, when you buy something from one of our stores or websites or visit one of our Autocentres.
We don’t store your payment card details as we use a third-party payment processor, so we never see your payment card information.
Who we share your personal data with
We will share your personal data with other companies within the OEMs Group, to help us provide you with products and services we think you will be interested in.
We also use third party service providers who help us provide our products and services to you. These third parties include:
- Advertising companies
- Social media providers
- Market research partners
- Companies that work with us on email campaigns
- Financial services such as Klarna purchase payments
- IT services
- Logistics and delivery services
- Security and fraud prevention service providers
- Contact centres for customer support
- Companies who assist us in administering competitions and promotions
Our legal basis for using your information
Whenever we process your personal information, we must have something called a “legal basis” for what we do. The different legal bases we rely on are:
- Consent: You have told us you are happy for us to process your personal information for a specific purpose (s).
- Legitimate interests: The processing is necessary for us to conduct our business, but not where our interests are overridden by your interests or rights.
- Performance of a contract: We must process your personal information in order to be able to provide you with one of our products or services.
- Vital interests: The processing of your personal information is necessary to protect you or someone else’s life.
- Legal obligation: We are required to process your personal information by law.
How we use your information
We may use your information in the following ways:
- To provide our products and services – we need to use your personal information to make our products and services available to you.
- To improve your shopping/service experience – Learn more about our customers and their preferences. To identify patterns and trends amongst our customers.
- For safety and security – we use your personal information to help provide safe and secure environments for our customers to shop in, our colleagues to work in and for our businesses to be conducted.
- Analytics and profiling – we use your personal information for statistical analysis and to help us understand more about our customers. That includes understanding the products and services you buy, how you shop across the OEMs Group and by creating profiles about you. This helps us to serve you better and to find ways to improve our services, stores, apps and websites. These profiles help us to send you offers that are more relevant to you.
- Contacting you – we use your personal information to contact you. This may be in relation to a service update, an issue you have raised with us, to conduct market research or to ask for your feedback.
- Marketing and advertising – we use your personal information to provide relevant marketing communications (including by email, phone, SMS, post or online advertising), relating to our products and services, and those of our suppliers and the OEMs Group. As part of this, online advertising may be displayed on websites across the Halfords Group and online media channels. We may also use information about how you shop with us to measure the effectiveness of these campaigns.
Cookies
Third parties such as Google Analytics, may drop cookies on your computer or mobile devices. These cookies may use information about your visits to our websites to provide relevant advertisements about goods and services that you may be interested in. They may also employ technology used to measure the effectiveness of our advertising using cookies to collect information about your visits to our sites in order to provide relevant advertisements about goods and services you may be interested in. The information collected through this process doesn’t let us, or them, collect your name, contact details or other personally identifying details unless you choose to provide them. We have cookie controls in place on all of our websites that allow you to choose how much, if any, personal data you provide. For more information about cookies go to our Cookie Notice.
CCTV & Body Worn Video Devices
We use CCTV across the OEMs Group for the protection of our colleagues, customers, and business. This includes investigating accidents, incidents, criminal activities, and breaches of our policies. Some car parks are run by third parties, so please check the local notice.
Some of our colleagues also wear body worn video (cameras) devices. These are only activated in high-risk situations. These devices record both audio and video. We can share CCTV with public or regulatory authorities or in response to requests from individuals seeking to protect their rights, the rights of others or helping to prevent crime and nuisance. We will only share CCTV if we consider a request to be appropriate.