GDPR Statement

Effective Date: January 2025

Our Commitment to GDPR Compliance

ZippCar is fully committed to compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

Lawful Basis for Processing

We process your personal data under the following lawful bases:

Legitimate Interest: To pursue car finance compensation claims on your behalf

Contract: To fulfill our services agreement with you

Legal Obligation: To comply with regulatory requirements

Consent: For marketing communications (where applicable)

Data Subject Rights

Under GDPR, you have the following rights:

Right of Access (Article 15)

You can request copies of your personal data.

Right to Rectification (Article 16)

You can request correction of inaccurate or incomplete data.

Right to Erasure (Article 17)

You can request deletion of your personal data in certain circumstances.

Right to Restrict Processing (Article 18)

You can request limitation of how we process your data.

Right to Data Portability (Article 20)

You can request transfer of your data in a structured format.

Right to Object (Article 21)

You can object to processing based on legitimate interests.

Data Retention

We retain personal data only for as long as necessary for the purposes outlined in our Privacy Policy or as required by law.

International Transfers

If we transfer your data outside the UK/EEA, we ensure appropriate safeguards are in place.

Data Protection Officer

For GDPR-related queries, contact our Data Protection Officer:

Email: dpo@zippcar.co.uk

Address: [DPO Address]

Complaints

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.

ICO Contact Information:

Website: ico.org.uk

Helpline: 0303 123 1113