Legal
Privacy & cookies
Last updated 2026-08-29.
This notice explains what personal information OYR Automotive collects through this website, why we use it, who we share it with and the choices you have. It applies to this website and to enquiries you send us through it.
Who we are
OYR AUTOMOTIVE LTD is the controller of the personal information described in this notice.
- OYR AUTOMOTIVE LTD
- Company number 16348942
- Registered in England and Wales
- Registered office: Office 204, 10 Courtenay Road, East Lane, Wembley, Middlesex, HA9 7ND
- Trading / visiting address: 21 Rowan Road, London, SW16 5JF
You can contact us about your information by:
- telephone on 07379 197842
- the contact form on this website
- post to the registered office above
The personal information we collect
Depending on how you use the site, we may collect:
- your name
- your telephone number
- your email address, if you choose to enter one in a form
- the message or enquiry you send us
- for a trade-in: your vehicle's registration, mileage and any condition details you give us
- the vehicle you are enquiring about and the page the enquiry was sent from
- the date and time the enquiry was submitted
- spam and security-verification information from Cloudflare Turnstile when you submit a form
- basic technical information such as your IP address, browser and device information, and server logs
- sign-in information for authorised OYR staff who use the admin area
We only collect what the forms and the service actually need. We do not ask for, and do not knowingly collect, special-category information.
How and why we use your information
We use your information for the following purposes, relying on the lawful bases shown:
- Responding to your enquiry, arranging viewings and taking steps you ask for before a possible vehicle purchase — steps taken at your request before entering into a contract, and our legitimate interests in dealing with business enquiries.
- Assessing a trade-in you propose — steps taken at your request before entering into a contract, and our legitimate interests in assessing a proposed transaction.
- Completing a vehicle sale or part exchange and keeping the business records the law requires — performance of a contract, and compliance with our legal obligations.
- Keeping the website secure and preventing spam and fraud — our legitimate interests in protecting our customers, our staff and the service.
- Authenticating and administering OYR staff accounts for the admin area — our legitimate interests and our contractual and organisational requirements.
We do not currently use information submitted through this website for email or SMS marketing, and we do not sell your information.
The privacy checkbox on our forms
Ticking the box on the enquiry and trade-in forms confirms you have read this notice so we can respond to you. It is not consent to marketing, and we do not send marketing on the strength of it.
Who we share your information with
We use the service providers below to run this website and handle enquiries. They act on our instructions and process your information only to provide their service to us.
We may also disclose information where we are legally required to, to our professional advisers where necessary, and to a buyer or their advisers if OYR's business is sold or reorganised. Because these providers receive your information, we cannot say that it is never shared.
- Railwaywebsite hosting and application infrastructure — privacy information
- Supabasedatabase, staff authentication and vehicle-image storage — privacy information
- Cloudflare Turnstilespam and abuse prevention on our forms — privacy information
- Resenddelivering enquiry notifications to our own inbox — privacy information
- Google Mapsshowing an interactive map, only after you choose to load it — privacy information
Processing outside the UK
Some of our providers may process information outside the United Kingdom. Where that happens, we rely on the contractual and legal safeguards that apply to that provider to keep your information protected. We are not able to say that every service is UK-only.
How long we keep your information
- Enquiries and trade-in requests that do not lead to a transaction: normally no longer than 12 months after our last meaningful contact with you.
- Records connected with a completed sale or part exchange: kept for as long as we need them for accounting and legal obligations and to handle possible claims — normally up to six years.
- Security and abuse-prevention logs: kept only as long as reasonably necessary to investigate issues and protect the service.
- Staff accounts: kept while access is authorised and disabled or removed when no longer required.
An operator reviews stored enquiry and trade-in records against this policy on a regular basis and removes records that are no longer needed. Deletion is a manual step, not automated.
Your rights
Depending on the circumstances and the lawful basis we rely on, you may have the right to:
- ask for a copy of the information we hold about you
- ask us to correct information that is wrong
- ask us to erase information
- ask us to restrict how we use information
- object to processing based on our legitimate interests
- ask for portability of information you gave us, where that right applies
- withdraw consent where our processing genuinely relies on consent
These rights are not absolute and may not apply in every case. We may need to confirm your identity before we act on a request.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office. We would appreciate the chance to look into it first.
Information Commissioner's Office — make a data protection complaint.
Cookies and similar technologies
This site keeps cookies and browser storage to a minimum. The items below are used to run the service you asked for:
- Cloudflare Turnstile sets short-lived storage when you submit a form, to tell real visitors from bots. This is used only for spam and abuse prevention.
- When an OYR operator signs in to the admin area, an authentication cookie keeps them signed in. This is essential for signed-in staff and is not set for ordinary visitors.
We do not use advertising or analytics cookies. The interactive map is handled separately, below.
The map on this site
The Google map on the homepage and contact page is not loaded automatically, because loading it would let Google set cookies and receive your device and network information. The map stays as a placeholder until you select “Load map”.
Selecting “Load map” contacts Google, which may then set cookies and receive your IP address and browser or device information, under Google's own privacy terms. You do not need to load the map — the address and a “Get directions” link are always available without it.
Automated decisions and marketing
- This website does not make decisions about you by solely automated means that have legal or similarly significant effects.
- We do not currently use website form submissions for email or SMS marketing.
- Any part-exchange figure we give is an estimate to start a conversation. It is not binding and is not produced by a fully automated valuation.
Changes to this notice
We may update this notice from time to time. When we make a material change we will update the “Last updated” date shown at the top of this page.