Privacy Notice

Introduction

We Buy Any Motor Caravan Limited is committed to protecting your personal data. We are the controller of the personal data we collect, which means we are responsible for how and why your information is used and for keeping it secure.

This privacy notice explains how we collect and use your personal data, how long we keep it, and the rights you have under data protection law. This notice applies to We Buy Any Motor Caravan Limited.

Who We Are

Organisation name: We Buy Any Motor Caravan Limited
Registered address: Prospect House 1 Prospect Place, Millennium Way, Pride Park, Derby, United Kingdom, DE24 8HG
Postal address: Repton House, Bretby Business Park, Ashby Road, Burton-on-Trent, Derbyshire, DE15 0YZ

Telephone: 01283 240237

ICO / Information Commission registration number:ZC119347 

For the purposes of data protection law, We Buy Any Motor Caravan Limited is the data controller.

Data Protection Contact

Email: dpo@webuyanymotorcaravan.com
Data Protection Officer: Laura O’Neill

Personal Data We Collect

When you engage with our motor caravan sales services, we will use the personal information you provide to respond to your enquiry and to market relevant motor caravans and related services based on your interest in motorhomes.

We will store and process your personal data to enable us to provide our services to you, communicate with you about your enquiry, and manage our customer relationship.

We may also send you information about offers, vehicles, or services that we believe may be of interest to you.

Where applicable, we will use your data to process payments. Financial information will only be processed with your explicit consent, solely for payment purposes, and we do not store card or payment details.

How We Use Your Personal Data

Purpose / Activity	Type of Personal Data	Lawful Basis for Processing
To contact you when you make an enquiry or express an interest in buying a motorhome.	Identity information (such as your name); Contact details (such as email address and phone number, vehicle registration number).	Legitimate interests to respond to enquiries and provide information you have requested.
To manage our ongoing relationship with you, including keeping records up to date and communicating with you about our products, services, or important updates	Identity information; Contact details; Profile information (such as enquiry history); Communication preferences.	Legitimate interests  to manage customer relationships and operate our business effectively  Legal obligation Where we are required to keep records or provide information by law.
To send service-related communications, such as updates about an enquiry, purchase, or payment (these messages do not include marketing).	Identity information; Contact details; Transaction information	Legitimate interests  to provide necessary service communications
To send marketing communications to you by email, text message, or similar electronic means	Identity information; Contact details; Marketing preferences	Consent  where required under the Privacy and Electronic Communications Regulations 2003 (PECR) and UK GDPR
To send marketing communications to existing customers under the “soft opt-in” (where applicable)	Identity information; Contact details; Purchase or enquiry history	Legitimate interests (UK GDPR) where all soft opt-in conditions under PECR are met
To send marketing by post	Identity information; Contact details	Legitimate interests  to promote our products and services.
To process payments and complete the purchase of a motorhome or campervan	Identity information; Contact details;bank details sort code and account number.	Performance of a contract processing is necessary to complete the purchase and take payment
To obtain feedback and reviews to help improve our services	Identity information; Contact details; Feedback information	Legitimate interests to improve our services and customer experience

Automated Decision-Making

When you send us an enquiry about buying a motorhome through our website, we use simple automated checks to help sort and manage enquiries. This includes looking at details like the make, model and year of the vehicle you are interested in. Enquiries about older or discontinued models may be filtered out so we can focus on vehicles we currently deal with.

This process is only used to organise enquiries more efficiently and does not make any important decisions about you. If needed, a person can review your enquiry, and you can ask us to do this. The system only uses basic information about the vehicle and does not assess you personally. We regularly review how this works to make sure it is fair, transparent and follows data protection laws.

Marketing

You may opt out of communications at any time. 

Data Sharing

We may need to share your personal data with the following organisations where necessary to provide our services, comply with the law, or run our business:

• Professional advisers, such as solicitors, accountants, auditors, and insurers. 
• IT and system providers who support our website, databases, email, cloud storage, and security systems.
• Payment and banking providers to process payments. 
• Regulators and public authorities, including the Information Commissioner’s Office (ICO), HMRC, or law enforcement, where we are legally required to do so. 
• Group companies or subsidiaries, where relevant, for internal administration and business purposes

We only share personal data where necessary, in accordance with data protection law.

International Transfers

We may transfer your personal data to countries outside the UK and European Economic Area (EEA). Some of these countries may not have the same level of data protection laws as the UK or EEA.

Whenever we transfer your personal data internationally, we make sure that appropriate safeguards are in place to protect it and to ensure the transfer complies with applicable data protection laws. This includes taking steps such as:

• Transferring data to countries that have been formally recognised as providing an adequate level of data protection;
• Using approved legal safeguards, such as the UK or EU Standard Contractual Clauses, which require the recipient to protect your data;
• Transferring data to organisations that are part of recognised frameworks (such as the EU‑US Data Privacy Framework) where appropriate; or
• Transferring data within organisations that have approved Binding Corporate Rules in place.

We will only transfer your personal data where these safeguards are in place, and we take appropriate steps to ensure your data remains protected in line with this privacy notice.

If you would like more information about how we protect your data when it is transferred internationally, please contact us using the details in this notice.

Security

We use appropriate technical and organisational measures to protect personal data. These measures include:

• Multi-Factor Authentication (MFA): We require additional verification (such as a code or authentication app) when accessing systems, to help prevent unauthorised access.
• Firewalls and Network Security: We use firewalls and other security tools to monitor and protect our systems and networks from external threats.
• Encryption: We protect your data using encryption both when it is being transmitted (for example, over the internet) and, where appropriate, when it is stored.
• Role-Based Access Controls: Access to personal data is limited to individuals who need it to perform their job. Employees can only access the information necessary for their role.
• Contractual Safeguards: We require our service providers and partners to protect personal data through written agreements, including confidentiality obligations and data protection requirements.
• Staff Training: Our employees receive regular training on data protection and information security to ensure they understand how to handle personal data responsibly.

We regularly review and update our security measures to ensure they remain effective and appropriate to the risks.

Retention

Personal data is retained only as long as necessary. To provide our services to you, we use trusted third-party organisations to process payments, manage our company accounts, and provide banking and financial services. We retain transaction, payment, and order records for up to seven years, or for as long as required under UK tax, financial, and company law.

Your Rights

You have rights including access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and the right to complain directly to us under the Data (Use and Access) Act 2025. If you wish to exercise your rights please contact us directly. 

Complaints

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.

The ICO can be contacted at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: https://www.ico.org.uk

We would, however, appreciate the opportunity to deal with your concerns before you approach the ICO, please contact us in the first instance.

Policy update 

This notice will be updated periodically and inline with legislative requirements. 

Last updated: June 2026