Plain English notice of practice
Welcome to Carbon VIP’s plain English notice of our practice
In compliance with the General Data Protection Regulations (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (‘GDPR’) this is a plain English notice briefly outlining our practice in relation to:
- the information we hold about visitors to our website (visitors)
- the information we hold about our clients (clients)
- our data collection
- our processing policies and procedures.
Links to our legalese policies can be found at the foot of this page.
Who we are and what we do
Carbon VIP Limited is a service which helps professional sportspeople and celebrities locate a vehicle through specific car manufacturer ‘new car’ VIP schemes.
We have special relationships with car manufacturers and dealerships offering these VIP schemes and will locate suitable vehicles on behalf of our clients. Having found a vehicle, Carbon VIP will then act as a broker between the client and the dealership with the client's desired car.
Our privacy ethos
Carbon VIP is committed to safeguarding the personal data of our clients, contacts and website visitors. We take your privacy seriously and only use your personal information to administer your account and to provide the services you have requested from us. How we collect and store information depends on whether you visit the Carbon VIP website as a visitor or whether you are one of our clients. Certain types of information are automatically collected when anybody visits our website. These are outlined below.
Cookies and server logs - and how we sue them
Every device connected to the Internet is allocated a number called an IP (Internet Protocol) address. The format looks like this: 220.127.116.11
Depending on which Internet service you opt for, your service provider may allocate a different IP address each time you connect. Alternatively, you may have a ‘static’ IP address that never changes.
Some cookies are necessary to enable you to login to the member area. Cookies and server logs use IP addresses to record interactions with websites. This information can subsequently be analysed through Google Analytics. We use Google Analytics so we can understand which parts of the Carbon VIP website are the most popular and which types of devices are being used to access the site. This helps us make decisions about where to invest our development efforts and what sort of devices we need to optimise our website for. We do not monitor individuals’ data specifically, we look at the collective data to help us determine trends. We collect this type of data from our website visitors and from our Carbon VIP clients.
If you would like to know more about how Google uses data when you visit a website that uses Google Analytics, please visit https://www.google.com/policies/privacy/partners/
We do not have Google's 'User ID' feature enabled. Neither have we enabled Google's 'data collection for display and search remarketing' functionality.
Other things to be aware of:
When you follow a link from Carbon VIP to any other site, we have no control over what, if any, tracking technologies those sites may employ or how they may use them.
Most browsers automatically accept cookies. The browser companies (e.g. Google Chrome, Microsoft Internet Explorer, Microsoft Edge, Mozilla Firefox, Apple Safari) control these settings. However, your browser’s help page will tell you how to limit or decline cookies and you can change your settings to notify you when a cookie is being set or updated, or to block cookies altogether.
For general information about cookies, and how to disable them, you may find a visit to www.allaboutcookies.org useful. You can also manage the use of Adobe Flash technologies, including Flash cookies, within the Flash Player Help area of the Macromedia website.
Bear in mind that if you do choose to decline cookies, you may not be able to sign in, customise, or use features on some websites. Similarly, disabling Flash technologies may impact on your experience using some websites.
Information we hold about our clients and what we do with it:
When you complete a Vehicle Request Form and become a Carbon VIP client you provide us with the information requested on that form and give us your permission to pass those details on to the supplier of your vehicle. As your request is processed, a credit reference agency search may be made and this will be recorded by the credit reference agency.
No debit or credit card information or bank details are stored on our servers.
It is not our intention to allow any advertising on our site. However, if that policy ever changes we guarantee never to share any identifiable information with advertisers or any other third parties.
How and where we store your personal data
Our servers use the most up-to-date security and encryption protocols to protect and preserve your data. These are hosted in one of the UK's largest Tier 4 data centres and operate full end-to-end SSL encryption for all data transfers. Backups are taken regularly which are each fully encrypted and stored in a secure limited-access area within the same data centre.
As you may already be aware, the transmission of any information via the Internet cannot be guaranteed to be completely secure. As such we cannot vouch for the security of the data you transmit to our website, any transmission is at your own risk. However, on receipt of your information, we will use strict procedures and security features to try and prevent unauthorised access.
Emails from us
When you register with Carbon VIP this automatically adds you to our email lists. These are administered through MailChimp and you can opt-out of receiving any or all of our emails at any time.
Examples of emails we may send you:
- details of vehicles available at the time your existing VIP scheme is due for renewal
- information about our referral schemes and/or our loyalty schemes
- ad-hoc announcements about enhancements to the Carbon VIP website or Carbon VIP services
- information about special offers we have negotiated with affiliates or partners and which we believe may be of interest to you.
The Data Protection Act (DPA) gives you the right to access information held about you, and this right can be exercised at any time in accordance with the DPA.
The General Data Protection Regulation (GDPR) has extended these rights, giving you: the right to be informed; the right to access; the right to rectification; the right to erasure; the right to restrict processing; the right to data portability; the right to object; and the right not to be subject to automated decision-making including profiling.
Should you wish to make an access request in accordance with the DPA or the GDPR, simply contact us using the subject line ‘Access request’ and detailing your request/s in the message box. We aim to comply with such requests within seven days and at the most within 30 days of receiving your request.