Privacy Policy

• Contact and identity details you give us, such as your name, business details, email, phone number and address.
• Vehicle, quotation, part-exchange and finance information you provide.
• Information contained in enquiries, applications, correspondence and customer-service records.
• Website and device information where collected through permitted analytics, security or storage technologies.
• Information supplied by lenders, credit-reference or fraud-prevention organisations where this is necessary for a finance application and permitted by law.

• To respond to enquiries, provide quotations and supply vehicles or related services.
• To introduce eligible customers to finance providers and administer finance applications.
• To meet legal, regulatory, accounting, fraud-prevention and FCA compliance obligations.
• To improve our website and services using information collected lawfully and, where required, with consent.
• To send marketing only where we have a lawful basis to do so; you can opt out at any time.

Where necessary, information may be shared with lenders, credit brokers, vehicle manufacturers or suppliers, professional advisers, IT and communications providers, fraud-prevention or credit-reference agencies, regulators and public authorities. We only share what is reasonably necessary for the relevant purpose.

UK data-protection law gives individuals rights which may include access, correction, erasure, restriction, objection, portability and withdrawal of consent, depending on the circumstances. A subject access request can be made verbally or in writing and is normally free of charge. We generally respond within one month once any necessary identity information has been received.

To exercise a privacy right, email info@gorillavans.net. You may also complain to the Information Commissioner’s Office if you are unhappy with how your information has been handled.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, contractual and regulatory requirements. We use appropriate organisational and technical measures to protect information from unauthorised access, loss or misuse.

We may update this policy when our services or legal requirements change. This version reflects UK data-protection requirements including the UK GDPR, Data Protection Act 2018 and relevant changes under the Data (Use and Access) Act 2025.