Privacy Policy
- Version update date:
[ 29th AUGUST 2025 ]
- Version effective date:
[ 29th AUGUST 2025 ]
Omoda & Jaecoo UK Limited (“Omoda & Jaecoo UK”, “we”, “us” or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we, as the controller and responsible for your personal data, collect, use, store and share your personal information when you use our Approved Used Cars website (https://ojapproved.co.uk), make an enquiry, book a test drive, or purchase a vehicle from our authorised retailers.
We have appointed a data protection officer (DPO) who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact the DPO or us using the information set out in (Paragraph 9).
This Privacy Statement does not apply to:
The processing of personal data when you use our vehicle;
Your use of third-party services in our website. The data processing of these services is subject to their individual privacy policies, which we strongly advise you to read carefully;
Your use of mobile apps provided by O&J;
Our employee personal data or candidate recruiting practices.
In this Privacy Statement, we will explain to you:
1. What personal data we collect and how do we use it and what its legal basis?2. What third-party services do we use?3. With whom will we share this data?3.1 Affiliates and subsidiaries3.2 Services providers and business partners as data processors3.3 Law enforcement and government authorities4. How do we transfer your data outside your region?5. What rights do you have in relation to your personal data?5.1 Right to withdraw consent5.2 Right to access your personal data5.3 Right to rectification5.4 Right to restriction5.5 Right to portability5.6 Right to erasure5.7 Right to object5.8 Right to be informed5.9 Right to lodge a complaint6. How long do we retain your data?7. How do we protect your data?8. Privacy of children9. How can you contact us and make a request？10. How will we update this Privacy Statement?1. What personal data we collect and how do we use it and what its legal basis?
“Personal data” means any information that identifies you, or from which you can be identified. We may collect, use, store, and transfer different kinds of personal data about you in order to:
provide our Approved Used Car services;
respond to your enquiries on our website;
improve our customer support and website experience, and
protect our IT systems against attacks and other illegal activity.
We process your personal data based on one or more of the following legal grounds:
Consent – where you have provided your explicit consent (e.g. for marketing or call recordings).;
Contract – where processing is necessary to perform a contract with you, or take steps at your request before entering into a contract (e.g. arranging a test drive or purchase);
Legal obligation – where processing is required to comply with the law (e.g. financial record-keeping);
Legitimate interests – where we have a business interest in providing, improving, and promoting our products and services, provided your rights do not override those interests.
How we use your personal data
| Data Processing Purpose | Type of Personal Data Collected | Legal Basis for Processing |
|---|---|---|
| To fulfil requests or appointments you make to us, including test drives, after-sales service, warranty appointments, or other events (via our website, email, or call centre) | Contact details (first name, last name, phone number, email, postcode); enquiry details; recordings/transcripts of calls and communications (where consented) | Necessary for the performance of a contract, or to take steps at your request prior to entering into a contract. Where we contact you to confirm or follow up, we may also rely on legitimate interests (efficient customer service). Consent (for recordings). Legitimate interests (quality assurance/training for B2B interactions). |
| To respond to feedback, requests, questions, or complaints regarding our Approved Used Car services | Contact details; request details; communications records; recordings/transcripts of calls (where consented) | Performance of a contract, or steps at your request prior to entering into a contract. Legitimate interests (to manage enquiries and improve customer service). Consent (for recordings). |
| To invite you to participate in surveys or offline events regarding your experience with our Approved Used Cars | Account information; contact details; survey or feedback responses | Legitimate interests (to understand, analyse, and improve customer experience). |
| To provide you with marketing communications or updates (e.g. newsletters, promotions, offers relating to Approved Used Cars) | Basic information (first name, last name, phone number, email address); marketing preferences | Consent (where required by law). Legitimate interests (B2B communications). |
To realise our services and improve your experience. We also process your personal data to provide certain website functions, enhance our Approved Used Cars services, and ensure information security.
| Data Processing Purpose | Type of Personal Data Collected | Legal Basis for Processing |
|---|---|---|
| To help you find a nearby authorised retailer | Contact information, including your postcode and (where enabled) precise location | Consent (where you actively provide or enable location data) |
| To analyse website behaviour and usage in order to improve our services | Analytics data (aggregated information about website usage, page views, navigation patterns, and user interactions) | Legitimate interests (to understand, analyse, and improve customer experience). Consent (for cookies and similar technologies) |
To ensure information security
| Data Processing Purpose | Type of Personal Data Collected | Legal Basis for Processing |
|---|---|---|
| To detect and defend against unauthorised access to data, and to maintain system security | Device information, network activity information | Legitimate interests (to protect the confidentiality, integrity, and availability of IT systems) |
| To upload error or crash logs for troubleshooting | Relevant technical or crash log data | Consent (where you have agreed to share logs for troubleshooting) |
Other circumstances
| Data Processing Purpose | Type of Personal Data Collected | Legal Basis for Processing |
|---|---|---|
| To demonstrate compliance with regulatory or legal requirements | Contact information; order information; vehicle information (including transaction and warranty records) | Legal obligation |
To ensure information security
| Data Processing Purpose | Type of Personal Data Collected | Legal Basis for Processing |
|---|---|---|
| To detect and defend against unauthorized access to data, and to enhance information security | Device information Network activity information | Necessary for our legitimate interests: to protect the confidentiality, integrity, and availability of IT systems |
| To upload crash logs for troubleshooting | Relevant crash logs | Where you have provided your consent |
O&J has a legitimate interest in processing personal data in order to provide and improve our Approved Used Car services. This includes responding to customer enquiries, handling issues or complaints, maintaining accurate vehicle and warranty records, and conducting analysis to better tailor our products, services, and customer experience.
2. What third-party services do we use?
In order to provide you with better service, we may entrust a cooperative third party to process your personal data. We are not responsible for the collection or use of personal data by third party services, and we recommend that you read the applicable terms and conditions (and any relevant privacy statements/policy/notice) carefully before using such services and make your own choice after ensuring that you fully understand the rules governing process of your personal data. If you have any questions about the process of your personal data by a specific third party, please contact that third party directly. The table below provides information on the third parties we might engage for the processing of your personal data, if any:
| Third-Party Service | Purpose and Use | Link to Third-Party’s Privacy Policy |
|---|---|---|
| Cookie Bot by usercentrics | Purpose: Cookiebot is used to manage cookie consent and compliance with data protection regulations, including GDPR. It collects data on user preferences and consents related to cookies and tracking technologies. Data Collected: Cookiebot may collect information such as the user’s consent status, cookie preferences, and interactions with consent banners or pop-ups. Usage: This data helps us ensure that we only place cookies on your device that you have explicitly consented to. Cookiebot’s compliance tools help us provide transparency about the cookies we use and enable you to manage your cookie preferences. | Privacy Policy (Cookiebot) |
| Google Analytics | Purpose: Google Analytics is used to track and analyse user behaviour on our website. This includes collecting data on page views, session duration, bounce rates, traffic sources, and user interactions. Data Collected: Google Analytics collects information such as IP addresses, device information, browser type, location data, and usage patterns. Usage: The data collected helps us understand how users interact with our website, assess the performance of our content and features, and make improvements to enhance the user experience. The data may also be used for reporting and analysis. | |
| Mapbox | Purpose: Mapbox is used to provide interactive maps and location services on our website. It may collect data on user interactions with the maps and location-based features. Data Collected: Mapbox may collect data such as IP addresses, location data, device information, and interactions with maps. Usage: This data helps us offer accurate and relevant location-based content and features. | |
| Google Maps API | Purpose: Google Maps API is used to integrate Google Maps and related services into our website. It may collect data on user interactions with the maps and location-based services. Data Collected: Google Maps API may collect data such as IP addresses, location data, and user interactions with maps and other map-related features. Usage: The data collected is used to provide users with map and location-based services, such as showing their current location or finding nearby places of interest. The data may also be used for reporting and analysis to improve the services. | |
| Driftrock | Purpose: Driftrock is used to process and manage customer leads and enquiries securely. Data collected: First Name, Last Name, Email, Phone Number, Postcode, Model of interest, opt-in permissions and test drive interest. Use: Driftrock validates leads and sends customer leads/enquiries to their nearest OMODA & JAECOO retailer based on the postcode entered on the contact forms, or direct to the brand’s customer service team. |
3. With whom will we share this data?
We may share your personal data with third parties in order to operate our business, fulfil your Approved Used Car enquiry or purchase, and provide related services.
3.1 Affiliates and subsidiaries
We may share personal data with our affiliates and subsidiaries to support our operations and services, including customer care, IT support, compliance, and reporting. This is based on our legitimate interest in outsourcing and coordinating certain business functions within the Omoda & Jaecoo group.
3.2 Service providers and business partners (acting as processors)
We also share data with service providers and business partners who process personal data on our behalf, for example to maintain our operations, support our relationship with you, and provide services.
| Categories of providers | Purpose of processing / legal basis |
|---|---|
| Authorised retailer(s) (and their sub-processors) | Personal data is transferred to authorised Omoda & Jaecoo retailers to communicate with you, arrange test drives, and administer the handover and aftersales of Approved Used Cars. Legal basis: performance of a contract, legitimate interests. |
| Marketing and advertising suppliers | To deliver marketing campaigns, digital advertising, and communications in line with your preferences. Legal basis: consent (where required), legitimate interests. |
| Cloud service and IT providers | To host our website, store data securely, and provide essential IT support. Legal basis: legitimate interests (ensuring secure and effective IT systems). |
| Authorised partners for supporting services (e.g. warranty providers, finance and insurance partners, roadside assistance partners) | To administer related services connected with your Approved Used Car purchase, where you have requested them. Legal basis: performance of a contract, consent (where applicable). |
3.3 Law enforcement and government authorities
To meet our legal obligations, we may disclose personal data in response to lawful requests, such as subpoenas, court orders, or investigations by government authorities. This may include compliance with regulatory inquiries, law enforcement requirements, or the enforcement of our policies and procedures. We may also share information in emergency situations to prevent or address potentially illegal, unethical, or harmful activity.
Where we receive a request for personal data from a law enforcement authority, we will assess the necessity and proportionality of the information requested before disclosing it
4. How do we transfer your data outside your region?
In principle, personal data collected in relation to our Approved Used Cars services is stored in your country of residence or within the UK, with primary storage at our UK data centre.
As part of being an international company, we may share personal data with group companies, subcontractors, and business partners in other countries for purposes such as IT support, hosting, maintenance, and customer service.
Where personal data is transferred outside the UK to a country that does not provide the same level of protection as UK law, we ensure that appropriate safeguards are in place. This may include use of the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses approved for use in the UK.
If you would like to obtain a copy of the relevant safeguards, please contact us at privacy@omodaauto.co.uk.
5. What rights do you have in relation to your personal data?
5.1 Right to withdraw consent
Where you have provided consent (e.g. for marketing or call recordings), you may withdraw this at any time with future effect.
5.2 Right to access your personal data
You have the right to request details of the personal data we hold about you and to receive a copy.
5.3 Right to rectification
You may request correction of inaccurate or incomplete personal data. We make reasonable efforts to keep data accurate, complete and up-to-date based on the most recent information provided to us.
5.4 Right to restriction
You may request that we restrict processing of your personal data if:
you contest the accuracy of the data (pending verification),
processing is unlawful but you prefer restriction over deletion,
we no longer need the data for the original purpose but you require it for legal claims, or
you have objected to processing and we are verifying whether our legitimate grounds override yours.
5.5 Right to portability
You have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format, and to request transfer of that data to another organisation where technically feasible.
5.6 Right to erasure
You may request that we delete your personal data, except where processing remains necessary for:
compliance with a legal obligation,
archiving in the public interest, scientific or historical research, or statistical purposes, or
the establishment, exercise or defence of legal claims.
5.7 Right to object
You may object at any time to our processing of your personal data where based on legitimate interests (including for direct marketing). We will stop processing unless we can demonstrate overriding legitimate grounds or the processing is required for legal claims.
5.8 Right to be informed
You have the right to be informed about the collection and use of your personal data. This Privacy Statement has been prepared for that purpose.
5.9 Right to lodge a complaint
You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or your local supervisory authority. We would, however, appreciate the chance to address your concerns directly first.
6. How long do we retain your data?
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, tax, and accounting requirements. For example:
Vehicle purchase and warranty records may be retained for up to 7 years to comply with financial and regulatory obligations.
Enquiry and test drive information may be retained for shorter periods unless you proceed with a purchase or request further services.
In some circumstances we may retain your data for a longer period (e.g. in the event of a dispute or potential litigation). When data is no longer required, it will be securely deleted or anonymised.
7. How do we protect your data?
We apply robust technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, alteration, or disclosure. These include secure servers, encryption, access controls, and monitoring.
While we strive to safeguard your data, please note that transmission of information over the internet is not completely secure. Once we receive your data, we apply strict procedures to prevent unauthorised access.
If a personal data breach occurs, we will notify the relevant supervisory authority and affected individuals in line with our legal obligations.
All personal data collected through our Approved Used Cars services is stored in secure data centres located in London, UK, in compliance with the UK GDPR and the Data Protection Act 2018.
8. Privacy of children
Our Approved Used Cars services are not directed at children. We do not knowingly collect personal data from anyone under the age of legal majority without verified parental consent.
If you believe a child has provided us with personal data, please contact us at privacy@omodaauto.co.uk and we will take steps to delete the information as soon as possible, unless retention is required for safety or legal reasons.
9. How can you contact us and make a request?
If you have any questions about this Privacy Statement, or if you wish to exercise your rights, please contact:
privacy@omodaauto.co.ukWe will respond within one month (or such other period as required by law) after verifying your identity. If you are not satisfied with our response, you may lodge a complaint with the Information Commissioner’s Office (ICO) or another competent data protection authority.
10. How will we update this Privacy Statement?
We may update this Privacy Statement from time to time, for example to reflect changes in law, business operations, or how we handle personal data.
If changes are significant or have a substantial effect on you, we will provide clear notice in advance (e.g. via our website or email) so that you may exercise your rights before the changes take effect.