THIS PRIVACY NOTICE EXPLAINS HOW WE COLLECT, USE, DISCLOSE, TRANSFER AND STORE YOUR PERSONAL INFORMATION.

We have developed this Privacy Notice because we want you to feel confident about the privacy and

the security of your personal information. Grays of Holbeach Limited (company number 04721012 )

whose registered office is at Grays of Holbeach Ltd, 25 Fen Road Holbeach Lincs PE12 8QA is

committed to complying with the data protection laws in the United Kingdom, and we reference the

following legislation:

Data Protection Act 1998;

From 25th May 2018, new data protection laws will come into force in the United Kingdom, as follows:

General Data Protection Regulation 2018 (Regulation (EU) 2016/679)

Hereinafter known as the “Acts”.

When we refer to “personal information” or “personal data" in this Privacy Notice, we mean

information which identifies you as an individual, or is capable of doing so. In the context of this

Privacy Notice, the terms “personal information” and “personal data” may be used interchangeably.

Where we rely on your consent to use your personal data, you have the right to withdraw that consent

at any time.

We may hold and use data about you in your capacity as a consumer, business customer, individual,

as a shareholder, or any other capacity in which you may visit our websites. Please read this Privacy

Notice carefully. By continuing to visit any of our websites or use of any of our services, you indicate

your agreement to our use of your personal information as set out in this Privacy Notice.

Topics

When do we collect information?

What information will we collect?

How we will use your information?

How we protect your information

Disclosure of your information

Fraud prevention checks

Data retention

Children

Your rights

Marketing

Changes to our Privacy Notice

Contacting us

When do we collect information?

We will collect information from you when you register with us, apply to use any of our services,

become our client, or contact us in person, by telephone, by e-mail or by post. We may collect

information about you from fraud prevention agencies and other organisations when we undertake

checks such as identification verification checks, as explained further below.

Information may also be collected about you when you visit our websites (for example via

cookies), such as your IP address and other browser-generated information. More information about

this can be found in our Cookie Policy.

We may collect the following information:

Your contact details, such as your name, address, telephone number and email address;

Your date of birth, nationality, country of birth, country of residence, employment status and tax

identification number (i.e. National Insurance Number);

Passport details, driving licence and utility bills;

Details of the services you request from us;

Any records held by financial crime prevention agencies, on the Electoral Register and by

providers of utility services;

Details of your employment status, income and source of wealth.

In some cases, you are not obliged to provide any personal data to us, but if you have requested

information or a service from us, we will not be able to provide it without certain information, such as

your contact details. Before we can begin providing you with our services, we need to obtain certain

information about you, so that we can verify your identity in order for us to meet our obligations under

the Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017, the Criminal

Justice (Proceeds of Crime) (Financial Services Businesses) and any other applicable legislation and

for the purposes of crime prevention and fraud prevention. You are obliged to provide this information

and if you do not provide it, we will be unable to provide you with our services.

We also collect information from you when you voluntarily complete customer surveys, provide

feedback or complete a contact form on our website. When you access or use our websites, website

usage information is collected using cookies.

How we will use your information

We use information held about you in the following ways:

to process your application to use our services;

to undertake checks such as identification verification checks;

to comply with our obligations arising from any contracts entered into between you and us and

to provide you with the information, products and services that you request from us;

to help protect your information and prevent unauthorised access to it;

to deal with any queries, complaints or problems reported by you;

to generate statistics relating to use of our website, such as the popularity of certain features or

services. We do not use personally identifiable information for these purposes;

to provide you with information about other services we offer that are similar to those that you

have already engaged us to provide, or enquired about. You may opt out of receiving this information

when we collect your details or at any time by contacting us using the Data Preferences Centre;

if required to do so by law and to the extent necessary for the proper operation of our systems,

to protect us/our customers, or for the enforcement of any agreement between you and us;

to notify you of changes to our services;

to help improve the services we provide to you.

Unless otherwise stated in this Privacy Notice, the legal basis for our use of your personal data will be

that this information is required for one or more of the legitimate interests described within the Acts.

How we protect your information

We take appropriate security measures (including physical, electronic and procedural measures) to

help protect the confidentiality, integrity and availability of your personal information from

unauthorised access and disclosure. For example, only authorised employees are permitted to

access personal information, and they may do so only for permitted business functions. In addition,

we use firewalls to help prevent unauthorised persons from gaining access to your personal

information.

Despite our efforts regarding security it is important to bear in mind that the internet is not a secure

means of communication. Personal information communicated through the internet may be

intercepted by other people. We cannot guarantee the security of personal information sent to us

through this website. You accept that you use this website at your own risk.

Disclosure of your information

We may disclose your information:

to our providers, IT providers, services providers and agents in order to provide and maintain

the provision of the services;

to our appointed auditors, accountants, Compliance Officer, lawyers and other professional

advisers, to the extent that they require access to the information in order to advise us;

to fraud prevention agencies and other organisations to allow us to undertake the checks set

out below. We will supply details of such agencies on request;

to providers of services we recommend including insurance products or other such products or

services;

if required to do so by the Financial Conduct Authority, or any relevant regulatory authority

where they are entitled to require disclosure;

if required to do so to meet applicable law, the order of a Court or market rules and codes of

practice applicable to the circumstances at the time;

to investigate or prevent fraud or activities believed to be illegal or otherwise in breach of

applicable law;

We will not lend or sell your information to third parties.

Fraud Prevention Checks

As part of our application process we will carry out automated checks using your personal data, such

as your name, postal address, date of birth, telephone numbers and employment status. These

checks include identification verification checks and financial crime checks and involve us obtaining

information from fraud prevention agencies and any records held by financial crime prevention

agencies, on the Electoral Register and Credit checks.

We need to carry out these checks in order to meet our obligations under the Money Laundering

Regulations (and any other applicable legislation). The information obtained from these checks is

used by us to determine if we can accept you as a client, whether further information is required or

the application is rejected, based on factors such as whether we have been able to verify your

identity.

We may make periodic searches with fraud prevention agencies during the course of our relationship

with you to verify the information we hold remains correct and that there has been no change in your

status (for example when you are a politically exposed person or if you have been subject to a

financial sanction). We and other organisations (who may be from other countries) may use and

access the information recorded by fraud prevention agencies.

To prevent or detect fraud, or to assist in verifying your identity we may make searches at fraud

prevention agencies. We may also provide information to financial and other organisations involved in

fraud prevention to protect ourselves and our customers from theft and/or fraud. If false or inaccurate

information is provided and fraud is identified or reasonably suspected, details will be passed to fraud

prevention agencies who will record this. This information may also be accessed by law enforcement

agencies. This information may be used by us, other Group companies and other organisations to

prevent fraud and money laundering, for example, when processing applications for services or for

debt recovery.

Data retention

We are committed to only keeping your personal data for as long as we need to in order to fulfil the

relevant purpose(s) it was collected for, as set out above in this notice, and for as long as we are

required or permitted to keep it by law.

We retain copies of our customer contracts in order to enable us to deal with any legal issues and the

information provided to us for identification verification checks, financial crime and anti-money

laundering checks (as required by law) for 7 years after termination or expiry of our contract with you.

We retain details of complaints indefinitely.

Children

We understand the importance of taking extra precautions to protect the privacy and safety of

children using our services. Children under the age of 17, or equivalent minimum age in the relevant

jurisdiction, are not permitted to use our services, unless their parent provided verifiable consent.

If we learn that we have collected the personal information of a child under 17, or equivalent minimum

age depending on jurisdiction, outside the above circumstances, we will take steps to delete the

information as soon as possible.Or obtain parental/legal guardian consent if appropriate.

Your rights

You have the following rights (unless exemptions apply), which can be exercised by contacting us

using the details provided below.

The right:

To ask us not to process your personal data for marketing purposes;

To access personal data held about you and to obtain a copy of it;

To prevent any processing of personal data that is causing or is likely to cause unwarranted and

substantial damage or distress to you or another individual;

To request the rectification or completion of personal data which are inaccurate or incomplete;

To restrict or object to the processing of your personal data (from 25th May 2018 onwards);

To request its erasure under certain circumstances;

In certain circumstances, to receive your personal data, which you have provided to us, in a

structured, commonly-used and machine-readable format and the right to transmit that data to

another data controller without hindrance, or to have that personal data transmitted to another data

controller, where technically feasible (from 25th May 2018 onwards) (known as Data Portability);

To be informed about any use of your personal data to make automated decisions about you,

and to obtain meaningful information about the logic involved, as well as the significance and the

envisaged consequences of this processing;

To lodge a complaint about the way in which your personal data is being used to your Data

Protection Authority: the Information Commissioner's Office (United Kingdom)

When you contact us to exercise any of the rights above, we may ask you to provide some additional

information in order to verify your identity, such as your name, your address and proof of identity.

If you would like to lodge a complaint or exercise any of your rights set out above, you can contact us

at:

E-mail: jon@graysofholbeach.co.uk

Post: Jon Gray, Grays of Holbeach Ltd, 25 Fen Road, Holbeach, Lincs, PE12 8QA

Alternatively, you can contact your Data Protection Authority

Marketing

We would like to send you information about products and services of ours which may be of interest

to you. If you have consented to receive marketing communications you may change your

preferences or opt out at a later date.

You have a right at any time to stop us from contacting you for marketing purposes. If you no longer

wish to be contacted for marketing purposes, please contact us by email jon@graysofholbeach.co.uk

We may from time to time offer joint or co-branded products and services.

Cookies

Cookies are small text files that are sent by websites and stored on your device. They collect

information about how the website is being used by those accessing it and allow websites to

remember information. Our website uses cookies to distinguish you from other users to enable us to

provide you with a better experience when you browse our website and to allow us to improve our

site.

For further information about cookies, visit www.aboutcookies.org or www.allaboutcookies.org

We have to obtain your consent before placing cookies on your device. We will ask you to consent to

our use of cookies and to the terms of use of our website when you try to access our website.

Clicking ‘continue’ when prompted will indicate your consent.

You can set your browser settings not to accept cookies and the above websites tell you how to

remove cookies from your browser. However, if you do not consent to cookies being placed on your

computer or you set your browser not to accept cookies, some of our website features may not

function or you may not be able to access parts of our website.

The cookies we use and our reasons for using them are set out below:

Google Analytics

These cookies are used to collect information about how our visitors use our site. We use the

information to compile reports and to help us improve the site. The cookies collect information in an

anonymous form, including the number of visitors to the site, where visitors have come to the site

from and the pages they visited.

Click here for an overview of privacy at Google. To opt out of being tracked by Google Analytics

across all websites visit http://tools.google.com/dlpage/gaoptout.

Disclaimer cookie

This cookie relates to the pop-up disclaimer on our website. It enables the website to remember your

user type so that our disclaimer does not pop up every time you visit our website.

Content cookie

This cookie enables us to sort content within the web site to help improve your experience of our

website.

Java Script cookie

This cookie tells our website whether or not you have Java Script enabled. Java Script is a scripting

language that improves the functionality of our website.

Session cookie

This cookie stores user session information. This is used to improve your experience of our website.

This cookie does not collect or hold any personal information

Other Websites

Will sometimes embed photos and video content from other websites. Pages with this embedded

content may present cookies from their websites. Does not control the dissemination of these cookies

and we will not block cookies from those websites. You should check the relevant third party website

for more information and should read the privacy notices on those sites.

Changes to our Privacy Notice

We keep our Privacy Notice under regular review and we will place any updates on this webpage.

This Privacy Notice was last updated on 24th May 2018, to reflect and fully comply with the GDPR

2018.

Contacting us

If you have any queries, comments or requests regarding this Notice or you would like to exercise

any of your rights set out above, you can contact us at:

E-mail: jon@graysofholbeach.co.uk

Post: Jon Gray, Grays of Holbeach Ltd, 25 Fen Road, Holbeach, Lincs, PE12 8QA.

Disclosure - Whilst every care has been taken to ensure all of the information on this site is accurate, please always check with your dealer as errors can occur.

COPYRIGHT

All rights, including copyright and database right, in the website and its contents, are owned by or licensed to Grays of Holbeach, or otherwise used by Grays of Holbeach as permitted by applicable law or the copyright holder. You may not copy, reproduce, republish, download, post, broadcast or transmit any text, images, graphic, logo, button, icon, image and their selection and arrangement thereof, and any underlying source code and software, for any commercial or public purpose without prior written permission from Grays of Holbeach or the copyright holder.

You may not adapt, alter or create any of the material or information in this site or use it for any other purpose other than for your personal non-commercial use. You agree to use this site only for lawful purposes.

Grays of Holbeach reserves the right to use for its own purposes any material submitted to the site, including text and images, either on the site or in any other form, including for publicity purposes. Grays of Holbeach reserves the right to monitor submissions to the site and to edit or reject any submissions.

DISCLAIMER

We try to ensure that information on our site is accurate, complete and up-to-date. In using this site, however, you agree to be bound by the Terms & Conditions, which take effect on the date when you first use the site.

Without prejudice to your statutory rights, the site and all information, text, names, images, pictures, logos, links and icons and other materials (without limitation) are provided 'AS IS' and on an 'IS AVAILABLE' basis without representation warranty or endorsement, express or implied. In particular, we do not warrant or represent the accuracy or completeness of information provided on this site nor do we guarantee that use of this site will be uninterrupted or error-free, or that the site and its servers are free of computer viruses or bugs.

In no event will Grays of Holbeach be liable to any person for any damage or loss that may arise from the use of any information contained in our site or products displayed on our site, including, without limitation, indirect or consequential damages, or any damages whatsoever arising from use or loss of use, data, or profits, whether in action of contract, negligence or other tortious action, arising out of or in connection with the use of the site.

Please note that we use your online browsing activities to engage in remarketing or similar audiences to advertise online.

Third-party vendors, including Google, show our ads on sites across the Internet.

Third-party vendors, including Google, use cookies to serve ads based on visitors’ past visits to our website.