Last updated: October 2026
This policy explains how THECARDRIFT LTD (“we”, “us”) collects and uses personal information through thecardriftautos.com. We are the controller of your personal data for the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018).
Who we are
THECARDRIFT LTD, Newton Industrial Estate, Eastern Avenue West, Romford, England, RM6 5SD. Email: info@thecardriftautos.com.
What we collect
- Enquiries and forms: your name, email address, phone number and the details you enter, such as the vehicle you are interested in, your part-exchange vehicle, finance preferences, or your review.
- Technical information: our web server records standard log data (such as IP address, browser type and pages requested) to keep the site secure and working.
- Cookies and local storage: see our cookie policy.
How we use it and why
- To reply to your enquiry and arrange viewings, test drives, valuations or finance discussions – necessary to take steps at your request before entering into a contract, or our legitimate interest in responding to you.
- To complete a sale and keep records we are legally required to keep – contract and legal obligation.
- To publish your review, if you submit one – your consent (you can ask us to remove it at any time).
- To keep the website secure and prevent misuse – our legitimate interests.
We do not sell your personal information and we do not use it for marketing without your permission.
Who we share it with
- Our website hosting and IT service providers, who process data on our behalf.
- Finance lenders or brokers, only if you ask us to help you apply for finance.
- Authorities where we are required to by law.
Our hosting provider may store data outside the UK. Where that happens we rely on appropriate safeguards required by UK data protection law.
How long we keep it
Enquiries that do not lead to a sale are kept for up to 24 months. Records relating to a sale are kept for as long as the law requires, usually six years.
Your rights
You have the right to access, correct or delete your personal data, to restrict or object to its use, and to data portability. To exercise these rights, email us. You can also complain to the Information Commissioner’s Office at ico.org.uk – we would appreciate the chance to deal with your concerns first.