.webp)
Find us
Contact Us
My account
Stellantis &You UK Privacy Statement
This Privacy Statement sets out all the information that we are required, by UK Data Protection laws, to provide to you about how Stellantis &You Sales & Service (trading as Stellantis &You UK) (hereinafter referred to as “Stellantis &You UK”, "we" or "us") will process your personal data.
1. What Personal Information Do We Collect?
We will collect and process some or all of the following personal data about you depending on our relationship with you:
(a) Personal data collected directly from you:
Account Registration –Title, full name, address, date of birth, marital status, employment status, current vehicle details.
Contact Information – Full name, home address, email address, contact details, contact preferences (such as post, phone, sms, email, or WhatsApp)
Payment Information - Data about your billing address and method of payment, such as bank details, credit, debit, or other payment card information.
Financial Information - Details including salary, income.
Transaction Information - Data about purchases from Stellantis &You UK including digitally signed order forms, invoices and location of sale.
Copies of Formal Identification – We may request a copy of your driver’s licence to perform a DVLA check where a courtesy car is required.
Other Information You Provide to Us – Additional information may be provided during other interactions with Stellantis &You UK, including interactions with customer support involving call recordings, AI Assistants, voicemails and through other channels of communication including social media.
You are not required to provide the personal data that we have requested. However, if you choose not to do so, in many cases we will not be able to provide you with our products or services or respond to requests you may have.
(b) Personal data collected from other sources
Third Parties: We may receive personal data about you from third parties including other companies within the Stellantis group of companies, credit agencies, banks, fraud prevention agencies, police, law enforcement agencies, recognised governing and regulatory bodies such as the Drivers and Vehicle License Agency (DVLA).
When you access our website: When you visit our websites or applications, we will collect information about your device and use of the website/application. This might include your IP address, device type, unique identification number, browser type, broad geographic location, performance and other technical information. Where you consent, we will also collect and process information about how you interact with our websites/applications e.g. pages visited and features used, content viewed, and interactions with chat functions available. Some of this information may be collected using cookies and similar tracking technologies. For more information see our Cookie Policy.
2. The purpose and lawful bases for processing your personal information
Our main reason for collecting personal information is to provide and improve the services, products and experiences that our customers expect from us.
We will only process your personal information where the law allows. Personal data will, most commonly, be processed in the following circumstances:
|
|
The purposes for which we collect and process your personal data are: |
We are lawfully permitted to use your personal data for this purpose because: |
|
1 |
To fulfil your order, deliver or service your vehicle and to manage our relationship with you. |
It is necessary to enable us to perform our contractual commitments to you. |
|
2 |
To book any test drive or provide any brochure you request or to respond to any query you might have. |
It is necessary in our legitimate interests to serve our customers properly. |
|
3 |
To provide, manage and respond to any requests you have made to us |
It is necessary in our legitimate interests to ensure that we serve our customers properly. |
|
4 |
To help us identify you when you contact us. |
It is necessary in our legitimate interest to ensure that we serve our customers properly and provide you with a personalised service. |
|
5 |
To manage safety recalls and quality campaigns |
It is necessary to do this to comply with legal requirements. |
|
6 |
To provide you with service/MOT reminders |
It is necessary in our legitimate interests to ensure that our customers are aware of when their vehicle is due a service or MOT. |
|
7 |
To provide you with the most user-friendly online navigation experience. |
It is necessary in our legitimate interest to improve our websites and provide you with the best possible experience when you visit our websites. |
|
8 |
For general administration, reporting, audit and analysis purposes and to manage our relationship with you |
It is necessary in our legitimate interests and to ensure the effective management of our business. |
|
9 |
For market research purposes, customer satisfaction surveys (on our behalf and on behalf of the manufcturers) and to carry out mystery shopping exercises. This helps us improve the quality of our products and services we provide. |
It is necessary in our legitimate interest to manage our business effectively and to improve our offering to you. |
|
10 |
To market to you and, where appropriate, to invite you to any events that we might organise |
You have consented for us to contact you for these purposes. We will not contact you for these purposes unless you have consented. |
|
11 |
To help us detect and prevent fraud and money laundering and to recover any debts owed to us. |
It is necessary in our legitimate interests to protect our business. |
|
12 |
To comply with law for example if we are required by any law enforcement agency, court, regulator, government authority or other third party. |
It is necessary to comply with a legal obligation |
|
13 |
Pass on to any third party that purchases, or to which we transfer, all or substantially all of our assets or business. Should such a sale or transfer occur, we will use reasonable efforts to try to ensure that the entity to which we transfer your personal information uses it in a manner that is consistent with this Policy, |
This is necessary in our legitimate interests to manage our business. |
|
14 |
To carry out analysis and customer profiling. We may combine and analyse your personal information to help us develop and improve our products and services, understand our customers better; and to manage and improve our relationship with you. This could include, for example, informing our distribution strategy, evaluating the effectiveness of our marketing and customer service, conducting market analysis and identifying products or services which may be of interest to you. |
It is necessary in our legitimate interests to ensure that we personalise the service we provide to you and interact with you in the way that suits you best. |
|
15 |
For analysis purposes and to help us make business improvements. |
It is necessary in our legitimate interests to improve our business |
| 16 | We have CCTV installed at our premises for security, health and safety, crime prevention and insurance purposes. | It is necessary in our legitimate interests to protect and safeguard our premises, employees, customers and visitors. |
|
17 |
We may also record calls you make to our customer service team or that we make to you for training and monitoring purposes. |
It is necessary in our legitimate interests to ensure that our staff are trained and ensure that we are dealing with your queries efficiently and effectively. |
3. Who do we share your personal data with?
To manage our business effectively, and to provide the services we offer to you, we may need to share your personal information with third parties. We will always limit the personal information we share with third parties to that which is necessary to enable them to perform their services or functions.
We will ensure that before we share your personal information with a service provider, we have entered into a contract with the service provider which requires them to keep your information secure and to only use it for the purposes we permit.
The types of third parties that we may share your personal information with include:
|
|
Type of third party |
Reason for sharing |
|
1 |
Third parties who provide our Contact Centre services. |
To answer general queries and action brochure & test drive requests. |
|
2 |
Stellantis Financial Services and other providers of financial services |
For any questions about your existing finance agreement. |
|
3 |
Marketing & Advertising Agencies |
To enable them to create our advertising campaigns, emails, newsletters, letters, brochures & social media posts. |
|
4 |
Print & Fulfilment Partners |
To enable them to send material such as letters and brochures. |
|
5 |
Data Management Partners |
To securely manage data. |
|
6 |
Media Partners (such as Google, Facebook, Quantcast and AdRoll). |
To advertise our products and services. |
|
7 |
Technology Partners and IT service providers |
To manage services on our websites, for example Part Exchange Valuation and to help us maintain our IT systems. |
|
8 |
Analysis Partners |
Analyse how our websites are navigated how effective our advertising campaigns are and which products and services are of most interest. |
|
9 |
Market Research Partners |
To research how you use your vehicle, what you like and what you dislike and what we need to do in order to increase your satisfaction and improve our products and services going forward. |
|
10 |
Credit Card Payment Processors |
To securely process credit card payments. |
|
11 |
Driver & Vehicle Licencing Agency (DVLA) |
Organisation that keeps a register of licenced vehicles in the UK. |
| 12 | Insurance providers | To provide vehicle insurance and to process information related to incidents and accidents. |
| 13 | Service, maintenance and repair providers and vehicle breakdown and recoveries providers | To provide vehicle assistance |
|
14 |
Vehicle manufacturers |
We will share your information with the vehicle manufacturer, and they will process it in order to process vehicle sales, replacement parts and accessory sales, manufacture and deliver your vehicle, for servicing, to manage warranty claims, to provide vehicle related data, to send customer satisfaction surveys, for analysis, reporting and to record vehicle history. For more information about how the manufacturer will use your information you can access their full Privacy Policy by clicking here: Abarth, Alfa Romeo, Citroen, DS Automobiles, Fiat, Jeep, Leapmotor, Peugeot and Vauxhall. |
|
15 |
Other companies in the Stellantis Group of Companies |
We may share your personal data with other companies in our group of companies. This might happen for a number of reasons including to enable us to make use of the groups IT infrastructure, for reporting purposes and to otherwise ensure that we run our business effectively. In particular we will share your personal data with Stellantis Europe S.p.A who will process your personal data as independent data controller as they perform all marketing and customer relationship management activities on behalf of all other companies in the Stellantis Group of companies. You can find their privacy policy here. |
|
16 |
Third parties who provide marketing services to us |
To contact you on our behalf |
|
17 |
Providers of Artificial Intelligence and other IT services |
To help us perform analysis, to support our IT infrastructure and we also use an AI assistant for some customer contact, such as conversational AI and chatbots. |
| 18 | Any prospective purchaser of our business assets or organisation | Stellantis and You UK may choose to buy or sell assets (including the whole or part of its company or business operations). If our company or all of its assets are purchased by another company, customer data (including your personal data) would be one of the assets transferred as part of that acquisition. When you give consent to Stellantis and You UK for the use of your personal data (including for marketing purposes), this consent applies to our company and any subsequent purchasers of our company or business. After the sale has completed the purchaser will let you have its own privacy notice, and any marketing communications you receive from them will include the option to unsubscribe. |
| 19 | Tax authorities and law enforcement agencies | For the purposes of the prevention and detection of crime |
| 20 | Governmental and regulatory authorities | To comply with our regulatory obligations |
| 21 | Debt collection agencies | Should we need to recover any outstanding debts |
| 22 | Legal and other professional advisors | To provide support to our business |
4. Are your personal data transferred outside the UK and EEA?
We may transfer your Information to a country outside the United Kingdom (“UK”) and European Economic Area ("EEA"), provided that the country to which the personal data is transferred ensures an adequate level of protection for your rights and freedoms.
If we do send personal information overseas, we will make sure that appropriate safeguards are in place to ensure it is protected in accordance with UK data protection laws, such as ensuring transfers are based on adequacy decisions or putting in place contracts with the recipient containing terms providing adequate protection.
5. How long do we keep your personal data for?
The length of time we will keep your personal data for will depend on the purpose we are processing it for. However, in deciding how long we need to keep it for, we will apply the following criteria:
- we will keep personal data for the minimum period we need to for the purpose(s) we collected it for as described in section 1 above.
- Your personal data are then archived as required by law for the length of time we are legally required to keep it for
- Your personal data are then anonymized or deleted.
For more information, you can also refer to our Data Protection Co-ordinator by email to pcrukdataprotectionofficer@stellantis.com or by post to the Data Protection Co-ordinator, Stellantis &You UK Head Office, Pinley House, 2 Sunbeam Way, Coventry, CV3 1ND.
6. Your data protection rights and how to exercise them
Data Protection laws give you a number of rights in relation to the personal data we hold about you. In particular, you have the right to access your personal data, to have it corrected (where it is inaccurate or incomplete) and, in certain circumstances to have it erased, restricted or transferred to a third party. You also have the right to object to it being processed. You should be aware that not all of these rights apply in every instance therefore, in some cases, we would not have to comply.
If you would like to exercise these rights or would like more information about any of your rights, please contact us at: pcrukdataprotectionofficer@stellantis.com
7. How to make a complaint
You are important to us and so is protecting your personal information. We take any complaints we receive from you about our use of your personal information very seriously and request that you bring any issues to our attention as soon as possible.
You have a statutory right to raise a complaint if you are concerned about the way we have handled your personal information. We are committed to addressing all concerns fairly, promptly and transparently.
You may submit a complaint to us by email at: pcrukdataprotectionofficer@stellantis.com,
We will acknowledge receipt of your complaint within 30 days. We will then investigate your concerns, which may involve seeking further information from you. When our investigation has concluded we will provide you with a written response explaining the outcome of your complaint.
If you remain dissatisfied about how Stellantis &You UK has handled (or is handling) your personal data, or our response to any complaint you have made, then you have the right to complain to the UK’s data protection authority, the Information Commissioner’s Office (ICO) by visiting: www.ico.org.uk.
8. Marketing communications
When you fill out a contact form online or otherwise contact us to express interest in our services, we may ask you to provide your Contact Information such as your name, email address and contact number.
Where you have given consent to receive marketing communications from Stellantis &You UK, we will use your personal data to send you information about our products, services, latest offers, competitions, and other things we think you might be interested in.
You can withdraw your consent to marketing at any time by updating your marketing preferences on our Contact Preferences form or by clicking the unsubscribe option in any email. Once received, your request will be actioned as soon as reasonably practicable.
9. Keeping personal information secure
We are committed to protecting the security of your personal information. We comply with data protection laws, industry standards and regulations, and we review our security practices regularly to remain vigilant to any potential security threats.
We implement appropriate technical, organisational, and administrative security measures, such as end-to-end encryption to protect any personal data we process about you.
To further safeguard your personal information, we practice data minimisation, collecting only what is essential, and anonymising data where possible.
If at any point you suspect or become aware of a personal data breach, please report the incident to pcrukdataprotectionofficer@stellantis.com as soon as possible.
10. CCTV
Photographic images and footage of you is collected via the operation of CCTV when you visit our showrooms or dealerships. This is for security, health and safety, crime prevention and insurance purposes.
We may also, on occasion, undertake video and audio recordings of mystery shopper exercises at our sites. These recordings are made to ensure our employees are providing excellent service to customers. Whilst customers are not the intended subject of these recordings, it is possible that customer images may be captured during this process.
11. Data Controller contact details
For more information, you can also refer to our Data Protection Co-ordinator by email to pcrukdataprotectionofficer@stellantis.com or by post to:
Data Protection Co-ordinator,
Stellantis &You UK Head Office,
Pinley House, 2 Sunbeam Way, Coventry, CV3 1ND.
12. Links to other websites
Our website may contain links to other websites of interest. If you follow a link to any of these websites, please note that we do not accept any responsibility or liability for these sites. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement.
You should exercise caution and look at the privacy statement applicable to the website in question.
13. Updating this Privacy Statement
We keep our Privacy Statement under regular review in order to ensure that it properly reflects our use of personal information. This Privacy Statement was last updated on 25 March 2026.
