Last updated: 22 April 2020
IAA Vehicle Services Ltd. (“IAA” or “we”) has developed a comprehensive privacy program designed to respect and protect your data privacy rights. This Privacy Notice explains what information, including any personal information, we collect through our Internet websites located at http://iaaiuk.co.uk and all subdomains thereof (the “Sites”) and any services, content or functionality available through or on the Sites and any mobile applications (collectively, together with the Sites, the “Service”), and how we use that information.
For the purposes of applicable data protection law, the data controller is IAA Vehicle Services, IAA Vehicle Services Ltd., IAA House, Charfleets Road, Canvey Island SS8 0PQ.
Information We Collect
In general, you can visit our Sites without telling us who you are or revealing any personal information about yourself. In fact, we encourage anonymous surfing so that you can research vehicle salvage help streamline business communications and other processes. You can also log in to research vehicles. During this process, there are times when we may need and request information from you so that we can better serve you. We may also receive information from other sources.
Information we collect may include the following:
Name and job title
Contact information including email address and telephone
Demographic information such as address, postcode, preferences and interests
Information relevant to customer surveys and/or offers
Information provided to us through forms and other inputs on the Sites
Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, mobile location information
Information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our site including date and time, vehicles you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and any phone number used to call our customer service number
Mobile applications may also disclose certain permissions for certain device settings such as CAMERA, RECORD_AUDIO, READ_PHONE_STATE, GET_ACCOUNTS and READ_CONTACTS.
How We Use Your Information
We may use this information to provide you with products and services as well as for the following purposes:
Internal record keeping
Improvement of our products and services
Customisation of the Sites per your interests
Research purposes to enable us to investigate trends
Periodic promotional emails about new products, special offers or other information
To contact you via the contact methods you provide for market research purposes or in relation to your account.
Basis for Processing
We rely on the following legal basis for processing your personal information:
(i) legitimate interests to market to customers and conduct research and analytics; and necessary for the performance of a contract, with some processing based on (ii) consent, such as electronic direct marketing.
Disclosure of Information to Third Parties
In connection with the purposes set out above, we may share your information with:
Any member or affiliate of our group
Selected third parties, including:
business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you;
analytics and search engine providers that assist us in the improvement and optimisation of our site; and
parties based outside of the United Kingdom and European Economic Area (for example, our parent company, IAA, Inc. (IAA), in the United States) under a transfer mechanism(s) used to legitimate such transfers (e.g. model contractual clauses, Privacy Shield).
We may also disclose your information to third parties:
To provide needed information to our agents, partners and contractors who may provide products and/or services to you
As necessary to support transactions
In the event that we sell or buy any business or assets, in which case we will disclose your information to the prospective seller or buyer of such business or assets
If we are under a duty to disclose or share your personal information in order to comply with any legal obligation, or in order to enforce or apply any of our terms and conditions and other agreements
To protect our company’s (including its affiliates and their respective employees, sub-contractors, agents, and customers) rights, property or safety including, but not limited to, exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
Protecting Your Information
We are committed to protecting the information entrusted to us. We have implemented reasonable and appropriate physical, electronic and administrative procedures to safeguard this information from loss, misuse, unauthorized access or disclosure, alteration and destruction.
Storing Your Information
The information that we collect from you is stored on our secure servers. It shall be stored for as long is as reasonable necessary for the purposes for which it was collected.
We may, from time to time, and subject to our Privacy Notice, use technologies similar to cookies, including web beacons, pixel tags, flash objects, location tracking and/or third party widgets for purposes of enhancing your web or mobile experience and/or for purposes of allowing you to share information on another platform, such as a social media platform.
For more information on the types of cookies we collect, to control cookie settings and/or to disallow, delete and otherwise manage the cookies, please visit our “Privacy Preference Centre” with additional information about the different types of cookies used (e.g., strictly necessary, performance, functional, targeting) and your options for settings controls. You may also send an email to Privacyuk@iaai.com.
Please note that e-privacy rules require us to obtain your prior consent before sending any electronic direct marketing by email, SMS or text messaging. In addition, you have the right to withdraw your consent to direct marketing and/or object to it.
Third Party Links
We may provide links to third party Internet sites strictly as a service to you. We are not responsible for the privacy practices of third party Internet sites. If you leave the Sites, you should be sure to read the privacy notice of each Internet site that you visit.
Transfer of Personal Information outside the United Kingdom
Your personal information will be treated in accordance with UK law concerning data protection and may be transferred outside the UK. During the Brexit transition period, the General Data Protection Regulation will continue to apply. When we transfer your personal information outside the UK or European Economic Area (EEA), or when our staff access your personal data from outside the United Kingdom, we will put in place appropriate safeguards in accordance with our legal obligations to ensure that your personal information is adequately protected irrespective of the country to which it is transferred. These safeguards may include obtaining contractual assurances from any third party given access to your personal information that your personal information will be protected by standards which are equivalent to those that protect your personal information when it is in the EEA.
Any transfers of personal data to the United States are made pursuant to the EU-U.S. Privacy Shield, the Swiss-U.S. Privacy Shield, or pursuant to European Commission-approved Standard Contractual Clauses.
You can review IAA’s Privacy Shield registration here. IAA is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC) and may be required to disclose personal information that we handle under the Privacy Shield in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Changes to this Privacy Notice
It is our policy to post any changes we make to our Privacy Notice on the Sites. If we make material changes to how we treat the personal information that falls within the scope of this Privacy Notice, we will notify you by email to the email address specified in your account or through a notice on the Site. The date that this Privacy Notice was last revised is identified at the top of the page. Please periodically visit the Site and this Privacy Notice to check for any changes.
Your Rights in Relation to Your Personal Information
You have various rights under data protection law regarding the processing of your personal information, including rights to the following:
request access to personal information we hold about you and details of our processing of your personal information;
request us to correct inaccurate personal information;
request us to delete personal information in certain circumstances;
receive your personal information in a format suitable for transmission to a third party;
object to and/or restrict the processing of your personal information (including profiling) on certain grounds;
object to the processing of your personal information for direct marketing;
object to any decision about you based solely on automated processing (including any profiling) that produces legal effects or otherwise significantly affects you; and
lodge a complaint with the UK Information Commissioner’s Office.
Subject Access Requests
You can make a request to us in relation to these rights at any time by writing to us at the following local address: Data Privacy Manager, IAA Vehicle Services Ltd., IAA Vehicle Services Ltd., IAA House Charfleets Road, Canvey Island SS8 0PQ. You may also send an email to Privacyuk@iaai.com or submit a Subject Access Request online through the IAA website. Any information to which you are entitled will be provided within a reasonable timeframe, subject to the exemptions stipulated in applicable data protection laws.