Prestige Wheel Centre is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.
Prestige Wheel Centre may change this policy from time to time by updating this page. You should occasionally check this page to ensure that you are happy with any changes. This policy is effective from 25/05/2018.
What we collect
Prestige Wheel Centre will be what is known as the ‘Controller’ of the personal data you provide to us. Our company registration number is 0633 5269 and its registered address is: Unit 8 Birmingham Trade Park, Kingsbury Road, Birmingham, B24 9PS.
Unless otherwise agreed with you, we will only collect basic personal data about you, which does not include any special categories of personal information about you (special category data includes things like medical information and is often known as ‘sensitive personal data’). This information we will collect includes the likes of your name, address, email address, bank details. This is not an exhaustive list.
Why we need it
We need to know basic personal data in order to provide the services the creditor has engaged us to provide, and to assert our right to be recompensed in return for these services, as per the services agreement or contract we have with you. If you do not provide this information then we will be unable to provide the consultancy services you have requested. We will not collect any personal data from you that we do not need in order to provide and oversee the services you request.
What we do with it
All the personal data we hold about you will be processed by our staff in the United
Kingdom and selected third parties will have access to your personal data where there is a service they provide to us or there is a legal obligation for us to provide them with this. Please be aware, however, that your information may be stored on a cloud-based system whose servers are located within the European Union. We take all reasonable steps to ensure that your personal data is processed securely.
How long we keep it
We will generally keep your personal data for a minimum of 6 years after our business relationship, after which time it will be destroyed if it is no longer required for the lawful purpose(s) for which it was obtained. If you consent to marketing, any information we use for this purpose will be kept with us until you notify us that you no longer wish to receive this information. More information on our retention schedule can be found on our website.
Sensitive personal data
In addition to the basic data described above, it may also benefit you to notify us of any health condition or disability you have, so that we are aware of these conditions and how they affect you. This will allow us to take any reasonable steps to accommodate specific needs or requirements you have when providing our services to you. This type of information is known under the law as ‘special category information’ (you may also know this as ‘sensitive personal data’) and we require your explicit consent to process this information. This kind of information will only be collected from you and used by us to assist you, it will not be shared with any third parties and will only be kept as long as it is required for this purpose, or until such time as you notify us you no longer consent to its processing.
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
Controlling your personal information
You may choose to restrict the collection or use of your personal information in the following ways:
Whenever you are asked to fill in a form on the website, look for the box that you can click to indicate that you do not want the information to be used by anybody for direct marketing purposes if you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by writing to or emailing us at email@example.com
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen.
You may request details of personal information which we hold about you under the Data Protection Act 1998. A small fee will be payable. If you would like a copy of the information held on you please write to Administration team, Prestige Wheel Centre Ltd, Unit 8 Birmingham Trade Park, Kingsbury Road, Erdington, Birmingham, B24 9PS.
If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.
Every wheel and tyre order is checked by a specialist. If there seems to be a problem one of our advisors will contact you. We do not want to send you wheels and tyres that will not fit your car, so it is important you provide us with as much info about your car as possible. This is especially important if you have carried out modifications to your vehicle.
We accept most payment methods through our site including PayPal where we are verified members.
Note on all credit/debit card orders address verification checks are made. We can only deliver to the credit card holder’s address, or in some circumstances an alternative address verified at our discretion. Security checks are made on all purchases to insure we only deliver to the credit card holder. We may ask for additional information to establish this. We recommend using our secure area for payment. PayPal accounts must be confirmed.
What are your rights?
Under data protection legislation, you have several rights regarding the use of your personal data, as follows:
If at any point you wish to either confirm whether your personal data is being processed and/or access the data we hold on you, you can request to see this information, usually free of charge, and we will respond to this request within a month. You also have the right for certain data you have provided to us with to be provided to you in a structured and commonly used electronic format (for example, a Microsoft Excel file), so that you can move, copy or transfer this data easily to another data controller. You may also request that transmit this data directly to another organisation where it is practical for us to do so.
You are entitled to have data corrected if it in inaccurate or incomplete.
You are entitled to have data deleted if it is no longer needed or there is no longer a legitimate reason for the processing, or if the data in question has otherwise unlawfully Commented [MM7]: Article 7, Para. 1 states that where processing is based on consent, the controller must to demonstrate that the data subject has consented to processing of their data.
Article 4, Para. 11 states that consent must, among other things, be given by a clear, affirmative action, therefore pre-ticked boxes must not be used. It is good practice to split out marketing consent via communication method. Commented [MM8]: Article 13, Para. 2(e) states that whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether the data subject is obliged to provide the personal data and of the possible consequences of failure to provide such data, must also be given. Commented [MM9]: Article 4 Para. 3 states that at the point of data collection, the right to withdraw consent must be given (where this is the basis for processing). Article 7(3) also states that “It shall be as easy to withdraw consent as give it.” Commented [MM10]: The ‘explicit’ consent to process special category data should be separate from any other consents you are seeking, in line with the guidance in Recital 43 on appropriate granular control. Commented [MM11]: Explicit consent is one of several reasons why special category data can be processed but is the appropriate basis in this context. Commented [MM12]: Explicit consent is not defined under the GDPR and, as with standard consent, must involve a specific, informed and unambiguous indication of the individual’s wishes. The difference, however, is likely to be that ‘explicit’ consent must be affirmed in a clear statement (whether oral or written), rather than any other type of affirmative action. Commented [MM13]: Article 13, Para 2(b) states at the point of data collection the right of access must be given. Commented [MM14]: Article 13, Para 2(b) states at the point of data collection the right to data portability must be given. Commented [MM15]: Article 13, Para 2(b) states at the point of data collection the right to rectification must be given. You may also request deletion of your personal data if it was only being processed as a result of you consenting to this and you now withdraw your consent.
You have the right to object to the processing of your personal data (note that this only provides you with the right to raise your objections, not a blanket right to have any and all processing cease). You have the right to restrict the processing of your personal data under certain circumstances, including if you have contested its accuracy and while this is being verified by us, or if you have objected to its processing and while we are considering whether it has legitimate grounds to continue to do so.
How to complain about the use of your data
If you wish to raise a complaint about how we have handled your personal data, including in relation to any of the rights outlined above, you can contact our Data Protection Officer, Caprice (firstname.lastname@example.org) and they will investigate your concerns. If you are not satisfied with our response, or believe we are processing your data unfairly or unlawfully, you can complain to the Information Commissioner’s Office (ICO). You can find further information about the ICO and their complaints procedure here: https://ico.org.uk/concerns/.