Privacy Policy

Norton Way Motors Ltd is aware that proper management and protection of personal information collected from customers are its important responsibility in the course of conducting its businesses and services. In order to fulfil its responsibility, the Company will handle personal information pursuant to the privacy policy stated below.

Compliance with laws, etc.

The Company recognizes that proper management of personal information is a part of its compliance activity. In complying with the Act on the Protection of Personal Information and the guideline of the Personal Information Protection Commission, the Company will establish internal regulations concerning handling of personal information and other internal rules, and fully disseminate the importance among officers and employees.

Management structure

The Company has an appointed DPO team (Data Protection Team) who are responsible for control over the management and operation of personal information, as well as thereunder a personal information group supervisor for each group handling personal information. Through the DPO team the Company have established structure to properly manage personal information.

You can contact the DPO team at any time; please write to us at NORTON WAY MOTORS, Norton Way North, Letchworth, SG6 1BL or email DPO@nortonway.com

Collection of personal information

When the Company collects personal information, it will, in advance, specify the purpose of use and clearly state, notify or announce to the person of such purpose. When information collected is considered to be special care-required personal information, the Company will obtain persons’ consent. Collection of personal information from visitors to this website.

Cookies

Some pages on this website use a technology called cookies to enhance users’ convenience in subsequent visits. Cookies never enable the Company to obtain information that can identify a person or have a negative effect on users’ computers. Users may disable cookies via browser setting (web browsing software).

Web beacons

This website does not use web beacons.

SSL

This website uses an encryption technology called SSL (Secure Socket Layer) on the “Contact” section of the top page in order to make users feel at ease when entering personal information. Information entered by users will be encrypted and then transmitted through SSL.

Obtaining logs

This website tracks user information recorded in an access log. This includes users’ IP addresses, browser type, number of accesses and other related details, but not any information that can identify a person. The Company will never use the access log for any purpose other than for statistics and analysis on how the site is being utilized.

Use of personal information

The Company may use the collected personal information only within the scope of the purpose of use clearly stated, notified or announced in advance, or to the extent that the information is deemed to be related to the stated purpose of use . Any change in the purpose of use will be made by obtaining persons’ prior consent.

Management of personal information

The Company will strive to keep the collected personal information accurate and up to date, and properly manage personal information by taking appropriate security measures to prevent it from being accessed by an unauthorized person, lost, destroyed, altered, leaked, etc.

Notice, disclosure, correction/addition/deletion, discontinuance of utilization/erasure/discontinuance of third party provision, etc. of the purpose of use for personal information

The Company will properly respond to any request by customers regarding notice, disclosure, correction/addition/deletion, discontinuance of utilization/erasure/discontinuance of third party provision, etc. of the purpose of use of personal information held by the Company, after verifying the identity of the requester.

The Company will review this policy periodically through further efforts to improve the protection of personal information.

Our Website

Our website is powered by G-Forces Web Management Limited (“GForces”), our third party web services provider. GForces is committed to ensuring that data is processed in accordance with applicable data privacy laws, and is kept secure. GForces is certified to the standard of ISO27001 (an international standard for information security). GForces uses Amazon Web Services, Inc. as its cloud platform provider. All data processed by GForces is stored on Amazon’s web servers in the EEA.

If you visit our website

When someone visits our website, GForces collects standard internet log information (your IP address, browser, and type of device) and details of visitor behaviour patterns (where you joined our site from, the path you take through our site and where you leave). These are stored against unique ids (which are strings of numbers). GForces collects this information for the legitimate business purpose of monitoring the number of visitors to the various parts of the site, the general geographic location of visitors and engagement levels, which in turn enables it to make improvements to its websites and services, and provide business intelligence. This information is only processed in a way which does not identify anyone. It is kept indefinitely.



GForces also uses Google Analytics to collect standard internet log information and details of visitor behaviour patterns, which are stored against unique ids (i.e. strings of numbers). We collect this information for the legitimate business purpose of monitoring website traffic and engagement levels, which in turn enables us to make improvements to our website and the way we sell our cars and services. This information is only processed in a way which does not identify anyone. It is kept indefinitely.



If you use our enquiry forms

When you submit information using an online form, GForces processes the data collected and stores it for 31 days for the legitimate business purpose of enabling us to access the information and deal with your request (it is then kept for a further 14 days in GForces’ routine back-ups for business continuity purposes). We collect the following information:

Name

Email Address

Contact Number



If you enter your post code, GForces stores the first part of it (e.g. ‘ME14’ or ‘SW1’) and links it to standard internet log information already collected (it is used for the same purposes as that information, as outlined above).



If you use our LiveChat service

We use a third party provider, Gubagoo Inc.to supply and support our LiveChat service. If you use the LiveChat service we will collect your name and email address if you provide this and any other personal information that you volunteer to us. This is used for the legitimate business purpose of handling customer enquiries in real time and then following up. This data is stored by Gubagoo for 2 years to enable us to access the information and deal with your enquiry. Gubagoo stores the information in the US under the EU-US privacy shield framework. Please see Gubagoo’s privacy policy for more information on how they use your data. https://www.gubagoo.com/about/policy.



Data Preference Centre

Under data privacy laws, you have the rights to:

request access to your personal data;

request deletion or correction of your personal data; and

• request that your personal data be transferred to another person.

Our online data preference centre helps you to exercise the rights that data privacy laws give you and control your personal information. It contains five separate forms, as set out below.

•See your data



You can ask to see any personal information that we hold (known as a “subject access request”) by submitting the form on the “See your data” tab.

If you agree, we will try to deal with your request informally, for example by providing you with the specific information you need over the telephone.

•Transfer your data



By completing the form on the “transfer your data” tab, you can ask us to provide your data to a third party.

•Delete your data



You can ask us to delete the information we hold about you by completing the form on the “delete your data” tab.

•Change your data



If we do hold information about you, you can also ask us to correct any mistakes by completing the form on the “Change your data” tab.

•Marketing Preferences



On the “marketing preferences” tab, you can tell us how you would like us to send you marketing information, or ask us to stop marketing to you entirely.



Any data collected through the data preference centre is stored for of a maximum of 12 months before asking for resolicitation.