Privacy Policy

How we collect, use, and protect your personal data

Privacy Policy Effective From: March 2026

Uber Leisure ("we," "our," "us") and the website uberleisure.com (the "Service") are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

We respect and value the privacy of all of our website users, registered trade buyers, and customers and will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law. See the Information Commissioner's Office website for more details on data protection rights and responsibilities at https://ico.org.uk/

Our Privacy Policy explains how we collect, use, disclose, and protect information about you or associated with you ("personal information"), your choices about the collection and use of your information, as well as the choices you have associated with that data.

We are committed to:

  1. Transparency, fairness and lawfulness
  2. Purpose limitation
  3. Data minimisation
  4. Accuracy
  5. Storage limitation
  6. Integrity and confidentiality (security)
  7. Accountability

Privacy Summary:

  1. Your data protection rights (GDPR)
  2. Data Controller responsibilities (Uber Leisure)
  3. How we collect, use and store personal data
  4. Types of personal data collected
  5. Cookies
  6. Links to other websites
  7. Exercise your GDPR rights
  8. How to complain about GDPR
  9. Changes to this Privacy Policy
  10. Contact Us

1. Your Data Protection Rights (GDPR)

Under the UK GDPR, you have the following rights in relation to your personal data:

  • The right to be informed about the collection and use of your personal data.
  • The right to access the data we hold about you.
  • The right to rectification of the data we hold about you if it is inaccurate or incomplete.
  • The right to erasure of the data we hold about you (also known as the "right to be forgotten").
  • The right to restrict the processing of your personal data or its use for a particular purpose.
  • The right to data portability. If you have provided personal data to us directly, you have the right to receive that data in a structured, commonly used and machine-readable format.
  • The right to object to us holding or processing data about you.
  • Rights in relation to automated decision-making and profiling.

If you wish to exercise any of these rights, please contact us using the details provided in Section 10 below. We will respond to your request within one month of receiving it.

2. Data Controller Responsibilities

Data Controller: Uber Leisure

Address: Unit 12/13 Richmond Farm, Parsloe Road, Epping Green, Essex CM16 6QB

Data Protection Officer (DPO): Aaron Mercer

Email: [email protected]

Telephone: 0800 470 1913

Website: www.uberleisure.com

Uber Leisure as the website owner is a Data Controller with responsibilities stipulated by data protection laws, the UK GDPR (General Data Protection Regulation) and the Data Protection Act 2018.

Data Controller: A website owner, or a company that collects personally identifiable information such as website cookies, or email addresses recorded as leads through web contact request forms and trade registration forms.

Data Processor: Responsible for processing personal data on behalf of a data controller. Examples of Data Processors we use include our web hosting provider, email service provider, and web analytics tools.

Data Sub-processor: We may employ third-party companies and individuals to facilitate our Service ("Service Providers"), to provide the service on our behalf, to perform service-related activities, or to assist us in analysing how our service is used. These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

3. How We Collect, Use and Store Personal Data

We collect several different types of information to provide and improve our service to you. Personal data is defined by the UK GDPR as "any information relating to an identifiable person who can be identified by reference." Personal data is information about you that enables you to be identified, such as an email address, name, phone number, company name, and usage data.

Use of Data

Uber Leisure uses the collected data for the following purposes:

  • To provide and maintain the Service, including our trade stock listings and online auction platform
  • To process your trade registration and verify your eligibility as a trade buyer
  • To manage your account and facilitate bidding in online auctions
  • To process payments and send transaction-related emails (auction won confirmations, payment reminders)
  • To respond to vehicle enquiries and valuation requests
  • To notify you about changes to our Service, new stock, or upcoming auctions
  • To provide customer care and support
  • To provide analysis or valuable information so that we can improve the Service
  • To monitor the usage of the Service
  • To detect, prevent and address technical issues

Disclosure Policy

Uber Leisure may disclose your personal data in the good faith belief that such action is necessary:

  • To comply with a legal obligation
  • To protect and defend the rights or property of Uber Leisure
  • To prevent or investigate wrongdoing in connection with the Service
  • To protect the personal safety of users of the Service or the public
  • To protect against legal liability

Storage of Data

Your personal data is stored securely on servers located within the United Kingdom and/or the European Economic Area. We take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. No transfer of your personal data will take place to an organisation or a country unless there are adequate controls in place including the security of your data and other personal information.

Security of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. We use encrypted connections (HTTPS/SSL), secure password hashing, and access controls to protect your information.

Retention of Data

We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. Auction and transaction records are retained for a minimum of 6 years in accordance with HMRC requirements.

4. Types of Personal Data Collected

When you register for an account, submit an enquiry, request a valuation, or participate in an auction on our website, we may collect the following types of personal data:

Information You Provide Directly

  • Full name
  • Email address
  • Telephone number
  • Company/business name
  • Business address
  • Vehicle details (for valuation requests)
  • Messages and correspondence (enquiries, contact forms)

Information Collected Automatically

  • IP address
  • Browser type and version
  • Pages visited and time spent on pages
  • Date and time of visits
  • Referring website
  • Device type and operating system
  • Unique device identifiers

Auction and Transaction Data

  • Bidding history and auction participation records
  • Winning bid amounts
  • Payment records and references
  • Vehicle purchase history

5. Cookies

Cookies are small text files that are placed on your computer or mobile device when you visit a website. We use cookies to provide and improve our Service, to remember your preferences, and to understand how you use our website.

Types of Cookies We Use

Cookie TypePurposeDuration
EssentialRequired for the website to function. These include session cookies for login authentication and security tokens.Session / 30 days
FunctionalRemember your preferences such as login state and display settings.Up to 1 year
AnalyticsHelp us understand how visitors use the website, which pages are most popular, and how users navigate the site.Up to 2 years

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

6. Links to Other Websites

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

7. Exercise Your GDPR Rights

If you wish to exercise any of your data protection rights as outlined in Section 1, you can do so by contacting us at:

Email: [email protected]

Post: Data Protection Officer, Uber Leisure, Unit 12/13 Richmond Farm, Parsloe Road, Epping Green, Essex CM16 6QB

Telephone: 0800 470 1913

We will respond to your request within one month. In certain circumstances, we may extend this period by a further two months where requests are complex or numerous. In such cases, we will inform you of the extension within one month of receiving your request.

To protect your privacy and security, we may ask you to verify your identity before processing your request. We will not charge a fee for responding to your request unless the request is manifestly unfounded or excessive.

8. How to Complain About GDPR

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:

Information Commissioner's Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Website: www.ico.org.uk

Helpline: 0303 123 1113

We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance using the details provided in Section 10.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective From" date at the top of this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

10. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise any of your data protection rights, please contact us:

Uber Leisure

Unit 12/13 Richmond Farm, Parsloe Road, Epping Green, Essex CM16 6QB

Email: [email protected]

Telephone: 0800 470 1913

Data Protection Officer: Aaron Mercer

Last updated: March 2026