Haynes Group – Privacy Notice


The following document is designed to outline the approach adopted by Haynes Brothers Ltd for the handling of the GDPR legislation, brought into UK law on May 25th 2018.

It outlines the options available and the general approach supported.

Haynes Brothers Ltd (“Haynes Group”) take the privacy of our customers, visitors and employees very seriously and to help you understand what we do with the information you provide to us we have compiled this Privacy Policy statement.

1. Who we are (Data Controller)

This Privacy Notice applies to Haynes Brothers, Limited:

  • Haynes of Maidstone T/A Haynes Ford
  • Haynes Trucks
  • Haynes Agritec
  • Haynes Agricultural

Registered address: Haynes Brothers Ltd, 23 Ashford Road, Maidstone, Kent, ME14 5DQ

Contact: dpo@haynesgroup.co.uk

We are the data controller for all personal data collected through our websites, showrooms, service centres and digital channels.

2. What personal data we collect

We collect personal data when you:

  • Make an enquiry
  • Book a test drive
  • Request a valuation or part‑exchange
  • Apply for vehicle finance
  • Book a service, MOT or repair
  • Purchase a vehicle
  • Sell us a vehicle
  • Visit our dealerships (CCTV)
  • Use our websites (cookies, analytics)
  • Interact with marketing emails or our social media channels
  • Use connected vehicle services or telematics (where applicable)

Categories of data we may collect

  • Identity data – name, title, date of birth
  • Contact data – address, email, phone
  • Vehicle data – registration, VIN, service history, warranty status
  • Test drive data – licence details, insurance checks
  • Finance data – affordability information, credit application details
  • Transaction data – purchases, deposits, invoices
  • Technical data – IP address, browser type, device identifiers
  • Usage data – website interactions, cookie data
  • CCTV footage – for safety and crime prevention
  • Telematics (where applicable) – battery status, charging, diagnostics, location

3. How we collect your data

  • Directly from you (online forms, phone calls, in‑person)
  • Automatically via cookies and analytics
  • From our manufacturers
  • From finance partners
  • From third‑party marketplaces
  • From service partners (warranty providers, roadside assistance)

4. Why we use your data (Purposes & Legal Bases)

Purpose

Legal Basis

Responding to enquiries

Contract / Legitimate Interests

Booking test drives

Contract

Processing vehicle purchases

Contract / Legal Obligation

Finance applications

Consent / Contract

Service, MOT, repairs

Contract / Legitimate Interests / Legal Obligation

Warranty & recall work

Legal Obligation / Contract

Marketing communications

Consent / Legitimate Interests

CCTV monitoring

Legitimate Interests / Public Interest

Website analytics

Consent (non‑essential cookies)

Fraud prevention

Legal Obligation / Legitimate Interests

Connected vehicle services

Consent / Contract

Legitimate Interests we rely on

Under UK GDPR and DUAA 2025, we rely on legitimate interests for:

  • Ensuring dealership security and preventing fraud
  • Providing customer service and follow‑up
  • Maintaining accurate service and warranty records
  • Marketing to existing customers about similar products (soft opt‑in)
  • Improving website performance and user experience

5. Who we share your data with

We may share your data with:

  • Our Vehicle manufacturers:
    Vehicle Manufacturers are listed below in Appendix A
  • Finance providers:
    Finance Providers are listed below in Appendix B
  • Other Third Parties : Warranty companies, Service partners, Marketing platforms, Website & CRM providers, Regulators (DVLA, HMRC, FCA), Law enforcement (CCTV requests).

The Haynes Group will never sell your data.

6. How long we keep your data

We retain data only as long as necessary:

  • Vehicle purchase records: 7 years
  • Service/MOT records: 7 years
  • Finance applications: 7 years
  • CCTV footage: 30 days (unless required for investigation)
  • Marketing data: until you withdraw consent or opt out
  • Phone Call Recordings: Up to 30 days

7. Your rights

You have the right to:

  • Access your data
  • Correct inaccurate data
  • Request deletion
  • Restrict processing
  • Object to processing (including marketing)
  • Withdraw consent at any time

8. Marketing preferences

We will only send marketing communications where:

  • You have given consent, or
  • You are an existing customer and we rely on soft opt‑in for similar products

You can opt out of marketing communications at any time via:

  • Email unsubscribe link included within all communications
  • Contacting us directly using the email address dpo@haynesgrp.co.uk
  • Speaking to a member of staff

9. Cookies & tracking technologies

Our websites use:

  • Essential cookies – required for site functionality
  • Analytics cookies – Google Analytics, Meta Pixel (consent required)
  • Advertising cookies – remarketing, behavioural ads (consent required)

You can manage your preferences at any time via our cookie banner.

10. Automated decision‑making

Finance providers may use automated credit scoring. Where this occurs, you will be informed and may request human review.

11. Connected vehicle & telematics data

Where applicable, we may receive:

  • Diagnostic data
  • Battery/charging status
  • Vehicle health alerts
  • Location data (only with consent)

This is used for:

  • Servicing
  • Warranty
  • Safety notifications
  • Customer support

You can disable connected services via your vehicle settings or app.

12. CCTV

We use CCTV at our dealerships for:

  • Safety
  • Crime prevention
  • Staff and customer protection

Images are retained for 30 days unless required for investigation.

13. How to complain

If you are unhappy with how we use your data, please contact us first by emailing dpo@haynesgroup.co.uk

Under the UK GDPR and the Data (Use and Access) Act 2025, you have the right to raise a data protection complaint directly with us if you are unhappy with how we have handled your personal information.

We will acknowledge your complaint within 30 days, investigate it without undue delay, keep you informed of progress and provide you with an outcome as soon as possible.

If you remain dissatisfied after we have completed our internal complaints process, you may escalate your concerns to the Information Commissioner’s Office (ICO).

14. Changes to this notice

We may amend this Policy from time to time. If we make substantial or material changes in the way we wish to use your personal information we will communicate by providing a prominent notice on the Website or by contacting you directly. If you do not agree with these changes, please do not continue to use our company Websites.

This privacy notice was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects of Haynes collection and use of personal information.

This privacy notice was last updated on July 7th 2026.

Appendix A – Vehicle Manufacturers

Ford Motor Company, Arterial Road, Laindon, Essex. SS15 6EE

CNH Industrial N.V / Case IH, Cranes Farm Road, Basildon, Essex. SS14 3AD

JCB World Headquarters, Lakeside Works, Rocester, Uttoxeter, Staffordshire, ST14 5JP

New Holland Agriculture, Cranes Farm Road, Basildon, Essex. SS14 3AD

Husqvarna UK Ltd, Preston Road, Aycliffe Industrial Park, Newton Aycliffe, County Durham, DL5 6UP

Honda UK, reflex, Cain Road, Bracknell, Berkshire, RG12 1HL

Vauxhall Motors Limited, Pinley House, 2 Sunbeam Way, Coventry, West Midlands, CV3 1ND

Changan UK, Building 3500 Parkside, Birmingham Business Park, Birmingham, B37 7YG

Iveco Ltd, Third Floor, Phoenix House, Phoenix Business Park, Christopher Martin Road, Basildon, Essex. SS14 3EZ

Appendix B – List of Finance Providers

FCE Bank PLC, Dunton Campus, Arterial Road, Laindon, Basildon, Essex, SS15 6EE

ALD Automotive (trading as Ford Lease) Oakwood Drive, Emersons Green, Bristol, BS16 7LB

Mann Island Vehicle Finance, 5 St Paul’s Square, Liverpool, Merseyside. L3 9SJ

Stellantis Financial Services, 61 London Road, Redhill, Surrey. RH1 1QA

Iveco Capital, Third Floor, Phoenix House, Phoenix Business Park, Christopher Martin Road, Basildon, Essex. SS14 3EZ.

Appendix C - List of Third Parties used for reviews and marketing events in consultation and accordance with Haynes Group policies and procedures:

JudgeService, 12 Cardale Ct., Cardale Park, Harrogate. HG3 1RY

Rhino Design (Manchester) Ltd, Monaghan House, Clarendon Street, Hyde, Cheshire, SK14 2EP