Stellantis &You UK Privacy Statement

This Privacy Statement sets out all the information that we are required, by UK Data Protection laws, to provide to you about how Stellantis &You Sales & Service (trading as Stellantis &You UK) (hereinafter referred to as “Stellantis &You UK”, "we" or "us") will process your personal data.

1. What Personal Information Do We Collect?

We will collect and process some or all of the following personal data about you depending on our relationship with you:

(a) Personal data collected directly from you:

Account Registration –Title, full name, address, date of birth, marital status, employment status, current vehicle details.

Contact Information – Full name, home address, email address, contact details, contact preferences.

Payment Information - Data about your billing address and method of payment, such as bank details, credit, debit, or other payment card information.

Financial Information - Details including salary, income.

Transaction Information - Data about purchases from Stellantis &You UK including digitally signed order forms, invoices and location of sale.

Copies of Formal Identification – We may request a copy of your driver’s licence to perform a DVLA check where a courtesy car is required.

Other Information You Provide to Us – Additional information may be provided during other interactions with Stellantis &You UK, including interactions with customer support involving call recordings, voicemails and through other channels of communication including social media.

You are not required to provide the personal data that we have requested. However, if you choose not to do so, in many cases we will not be able to provide you with our products or services or respond to requests you may have.

(b) Personal data collected from other sources

Third Parties: We may receive personal data about you from third parties including other companies within the Stellantis group of companies, credit agencies, banks, fraud prevention agencies, police, law enforcement agencies, recognised governing and regulatory bodies such as the Drivers and Vehicle License Agency (DVLA).

When you access our website: When you visit our websites or applications, we will collect information about your device and use of the website/application. This might include your IP address, device type, unique identification number, browser type, broad geographic location, performance and other technical information. Where you consent, we will also collect and process information about how you interact with our websites/applications e.g. pages visited and features used, content viewed, and interactions with chat functions available. Some of this information may be collected using cookies and similar tracking technologies. For more information see our Cookie Policy.

2. What purposes does Stellantis &You UK process your personal data for and what is the legal justification for this processing?

	*The purposes for which we collect and process your personal data are:*	*We are lawfully permitted to use your personal data for this purpose because:*
1	To fulfil your order, deliver or service your vehicle and to manage our relationship with you.	It is necessary to enable us to perform our contractual commitments to you.
2	To book any test drive or provide any brochure you request or to respond to any query you might have.	It is necessary in our legitimate interests to serve our customers properly.
3	To provide, manage and respond to any requests you have made to us	It is necessary in our legitimate interests to ensure that we serve our customers properly.
4	To help us identify you when you contact us.	It is necessary in our legitimate interest to ensure that we serve our customers properly and provide you with a personalised service.
5	To manage safety recalls and quality campaigns	It is necessary to do this to comply with legal requirements.
6	To provide you with service/MOT reminders	It is necessary in our legitimate interests to ensure that our customers are aware of when their vehicle is due a service or MOT.
7	To provide you with the most user-friendly online navigation experience.	It is necessary in our legitimate interest to improve our websites and provide you with the best possible experience when you visit our websites.
8	For general administration, reporting, audit and analysis purposes and to manage our relationship with you	It is necessary in our legitimate interests and to ensure the effective management of our business.
9	For market research purposes, customer satisfaction surveys and to carry out mystery shopping exercises. This helps us improve the quality of our products and services we provide.	It is necessary in our legitimate interest to manage our business effectively and to improve our offering to you.
10	To market to you and, where appropriate, to invite you to any events that we might organise	You have consented for us to contact you for these purposes. We will not contact you for these purposes unless you have consented.
11	To help us detect and prevent fraud and money laundering and to recover any debts owed to us.	It is necessary in our legitimate interests to protect our business.
12	To comply with law for example if we are required by any law enforcement agency, court, regulator, government authority or other third party.	It is necessary to comply with a legal obligation
13	Pass on to any third party that purchases, or to which we transfer, all or substantially all of our assets or business. Should such a sale or transfer occur, we will use reasonable efforts to try to ensure that the entity to which we transfer your personal information uses it in a manner that is consistent with this Policy,	This is necessary in our legitimate interests to manage our business.
14	To carry out analysis and customer profiling. We may combine and analyse your personal information to help us develop and improve our products and services, understand our customers better; and to manage and improve our relationship with you. This could include, for example, informing our distribution strategy, evaluating the effectiveness of our marketing and customer service, conducting market analysis and identifying products or services which may be of interest to you.	It is necessary in our legitimate interests to ensure that we personalise the service we provide to you and interact with you in the way that suits you best.
15	For analysis purposes and to help us make business improvements.	It is necessary in our legitimate interests to improve our business
16	We may also record calls you make to our customer service team or that we make to you for training and monitoring purposes.	It is necessary in our legitimate interests to ensure that our staff are trained and ensure that we are dealing with your queries efficiently and effectively.

3. Who do we share your personal data with?

The personal data we process will be shared by Stellantis &You UK, on a need-to-know basis to a restricted number of third parties, depending on the purpose of the processing, as follows:

	Type of third party	Reason for sharing
1	Third parties who provide our Contact Centre services.	To answer general queries and action brochure & test drive requests.
2	Stellantis Financial Services and other providers of financial services	For any questions about your existing finance agreement.
3	Marketing & Advertising Agencies	To enable them to create our advertising campaigns, emails, newsletters, letters, brochures & social media posts.
4	Print & Fulfilment Partners	To enable them to send material such as letters and brochures.
5	Data Management Partners	To securely manage data.
6	Media Partners (such as Google, Facebook, Quantcast and AdRoll).	To advertise our products and services.
7	Technology Partners and IT service providers	To manage services on our websites, for example Part Exchange Valuation and to help us maintain our IT systems.
8	Analysis Partners	Analyse how our websites are navigated how effective our advertising campaigns are and which products and services are of most interest.
9	Market Research Partners	To research how you use your vehicle, what you like and what you dislike and what we need to do in order to increase your satisfaction and improve our products and services going forward.
10	Credit Card Payment Processors	To securely process credit card payments.
11	Driver & Vehicle Licencing Agency (DVLA)	Organisation that keeps a register of licenced vehicles in the UK.
12	Vehicle manufacturers	We will share your information with the vehicle manufacturer, and they will process it in order to process vehicle sales, replacement parts and accessory sales, manufacture and deliver your vehicle, for servicing, to manage warranty claims, for analysis, reporting and to record vehicle history. For more information about how the manufacturer will use your information you can access their full Privacy Policy by clicking here: Peugeot, Citroen, DS Automobiles, Vauxhall, Fiat, Abarth, Jeep and Alfa Romeo.
13	Other companies in the Stellantis Group of Companies	We may share your personal data with other companies in our group of companies. This might happen for a number of reasons including to enable us to make use of the groups IT infrastructure, for reporting purposes and to otherwise ensure that we run our business effectively. In particular we will share your personal data with Stellantis Europe S.p.A who will process your personal data as independent data controller as they perform all marketing and customer relationship management activities on behalf of all other companies in the Stellantis Group of companies. You can find their privacy policy here.
14	Third parties who provide marketing services to us	To contact you on our behalf
15	Providers of Artificial Intelligence and other IT services	To help us perform analysis and to support our IT infrastructure.

4. Are your personal data transferred outside the UK and EEA?

We may transfer your Information to a country outside the United Kingdom (“UK”) and European Economic Area ("EEA"), provided that the country to which the personal data are transferred ensures an adequate level of protection for your rights and freedoms. If this country does not offer the same level of data protection as the European and local data protection legislation, Stellantis &You UK will take adequate measures to ensure that the collected personal data is processed in accordance with the applicable legislation relating to data protection.

5. How long do we keep your personal data for?

The length of time we will keep your personal data for will depend on the purpose we are processing it for. However, in deciding how long we need to keep it for, we will apply the following criteria:

we will keep personal data for the minimum period we need to for the purpose(s) we collected it for as described in section 1 above.
Your personal data are then archived as required by law for the length of time we are legally required to keep it for
Your personal data are then anonymized or deleted.

For more information, you can also refer to our Data Protection Co-ordinator by email to pcrukdataprotectionofficer@stellantis.com or by post to the Data Protection Co-ordinator, Stellantis &You UK Head Office, Pinley House, 2 Sunbeam Way, Coventry, CV3 1ND.

6. What are your rights and how can you exercise them?

Data Protection laws give you a number of rights in relation to the personal data we hold about you. In particular, you have the right to access your personal data, to have it corrected (where it is inaccurate or incomplete) and, in certain circumstances to have it erased, restricted or transferred to a third party. You also have the right to object to it being processed. You should be aware that not all of these rights apply in every instance therefore, in some cases, we would not have to comply. If you are unhappy about how Stellantis &You UK has handled (or is handling) your personal data, you have the right to complain to the Information Commissioner’s Office (“ICO”). You can do this by visiting www.ico.gov.uk. The ICO can investigate your claim and take action against anyone who’s misused personal data.

7. Marketing

When you fill out a contact form online or otherwise contact us to express interest in our services, we may ask you to provide your Contact Information such as your name, email address and contact number.

Where you have given consent to receive marketing communications from Stellantis &You UK, we will use your personal data to send you information about our products, services, latest offers, competitions, and other things we think you might be interested in.

You can withdraw your consent to marketing at any time by updating your marketing preferences on our Contact Preferences form or by clicking the unsubscribe option in any email. Once received, your request will be actioned as soon as reasonably practicable.

8. Security

We know how important it is to protect your personal data. As such, we will implement appropriate technical, organisational, and administrative security measures to protect any personal data we process about you.

9. Data Controller contact details

For more information, you can also refer to our Data Protection Co-ordinator by email to pcrukdataprotectionofficer@stellantis.com or by post to:

Data Protection Co-ordinator,

Stellantis &You UK Head Office,

Pinley House, 2 Sunbeam Way, Coventry, CV3 1ND.