1. Introduction
Car Giant Limited ("Cargiant", “we”, “us”, or “our”) is committed to protecting your privacy.
This Privacy Notice explains how Car Giant Limited uses, shares and retains personal data now that Cargiant is closed for retail vehicle sales. We no longer sell vehicles to the public or operate the previous online and showroom vehicle purchase journey. Although Cargiant is closed for retail vehicle sales, we may still use and retain personal data where necessary to support existing customers, handle complaints, meet legal or regulatory obligations, and manage claims or data protection requests.
For the purpose of the UK General Data Protection Regulation and the Data Protection Act 2018, the Data Controller is Car Giant Limited, a company registered in England and Wales under company registration number 01407612 and whose registered office address is at 44Hythe Road, London, NW10 6RS.
Revisions to the Notice will be updated here so you will always be aware of what information we collect and the legal basis for our processing.
The Privacy Notice was last updated on 8th July 2026.
2. What is personal data?
Personal data is data which relates to an identified or identifiable living individual. This may include information that identifies you directly, such as your name or contact details, or information that could identify you when combined with other information we hold.
3. What is our legal basis for processing your data?
We no longer collect personal data for new vehicle sales, reservations, showroom viewings, valuations or finance applications. However, we may continue to use, hold and, where necessary, collect limited personal data in connection with existing customer support, complaints, legal or regulatory obligations, data protection requests and the management of historic records.
We only process personal data where we have a lawful basis to do so under UK data protection law. The main lawful bases we rely on are:
3.1 Legal obligations
We may process and retain personal data where this is necessary to comply with legal or regulatory obligations. This includes retaining records for HMRC, accounting and company record-keeping purposes, and meeting FCA requirements relating to motor finance commission complaints, which currently require firms to keep data for relevant motor finance commission complaints until 11 April 2031.
3.2 Legitimate interests
We may process and retain personal data where this is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. This includes responding to existing customer enquiries, handling complaints, investigating issues, assisting with warranty or insurance-related matters, preventing fraud or misuse, maintaining business records, and establishing, exercising or defending legal claims.
Further details about the types of personal data we may still hold, why we use it, who we may share it with and how long we retain it are set out below.
4. Why we may continue to use and retain your personal data
We no longer use personal data to provide new vehicle sales, reservations, showroom viewings, valuations, finance applications, marketing or other active sales services.
We may continue to use and retain personal data that we already hold where this is necessary for the purposes set out below:
| Purpose | Examples of data used | Lawful basis |
|---|---|---|
| HMRC, accounting and company record-keeping | Customer details, transaction records, invoices, vehicle purchase records, payment records and related correspondence. | Legal obligation |
| FCA and motor finance commission requirements | Finance application records, lender details, agreement information, commission-related records, complaints, correspondence and supporting documents. | Legal obligation and/or legitimate interests |
| Complaints and existing customer enquiries | Contact details, vehicle purchase details, complaint records, correspondence, call recordings and relevant historic account notes. | Legitimate interests and, where applicable, legal obligation |
| Establishing, exercising or defending legal claims | Purchase records, finance records, complaints, correspondence, call recordings, internal notes and other evidence relevant to a claim or potential claim. | Legitimate interests |
| Warranty, insurance or related product queries | Customer details, vehicle details, product purchase records, policy or warranty information, complaints and related correspondence. | Legitimate interests and, where applicable, legal obligation |
| Data protection requests and complaints | Identity verification information, request details, correspondence, internal review notes and our response records. | Legal obligation |
| Fraud prevention, security and misuse investigation | Contact details, transaction records, correspondence, ID and other relevant evidence. | Legitimate interests and, where applicable, legal obligation |
We will only use personal data where it is necessary and proportionate for the relevant purpose. Where we rely on legitimate interests, we consider whether our interests are overridden by the rights and freedoms of the individual.
5. How long do we keep personal data
We will only keep personal data for as long as it is necessary for the purposes set out in this notice.
Where a customer purchased a vehicle from Cargiant and did not enter into a finance arrangement through Cargiant, we will usually retain relevant customer and vehicle purchase records for 7 years from the date of sale. This retention period allows us to meet HMRC, accounting and company record-keeping requirements and to retain records that may be needed to establish, exercise or defend legal claims.
Where a customer entered into a finance arrangement through Cargiant, we may retain relevant records relating to the sale, finance arrangement, commission arrangements, complaints and related correspondence until at least 11 April 2031, in order to comply with FCA requirements relating to motor finance commission complaints and related civil claims.
Where a complaint, legal claim, regulatory request, investigation or data protection request is ongoing, we may retain relevant personal data for longer if this is necessary to deal with that matter. We will only retain the data that is relevant to the matter concerned.
When personal data is no longer required, it will be securely deleted or anonymised.
6. Data we have deleted
As part of Cargiant closing for retail sales, we have reviewed the customer data we hold and have securely deleted personal data that we no longer need to retain.
This includes:
- MyGarage accounts;
- customer details relating to vehicles purchased more than 7 years ago, where Cargiant did not arrange a finance agreement; and
- customer records where no vehicle was purchased.
We may still need to retain some personal data where there is a legal, regulatory, tax, complaints or claims reason to do so. Please refer to Point 4 and 5 for more information.
You can still ask us to erase your personal data. However, if the information has already been deleted, there may be no further data for us to erase. If we are required to retain information for legal, regulatory, tax, complaints or claims reasons, we may not be able to delete it at this stage. If that applies, we will explain what information we need to keep and why.
7. How do we protect your information?
Cargiant take reasonable and appropriate technical and organisational measures to protect your personal information from unauthorised access, accidental loss, disclosure or destruction.
Our security measures include access controls, secure storage, staff confidentiality obligations, data protection policies and procedures, system security controls, and processes for responding to data security incidents.
All information (except Payment Card information) you provide to Cargiant is stored on Cargiant’s servers and or on a leading technology providers.
Our security procedures mean that we may request proof of identity before we disclose personal information to you.
8. How may we disclose your data to third parties?
We will only share personal data where it is necessary and lawful to do so.
As Cargiant is closed for retail vehicle sales, we no longer share personal data for new vehicle sales, new finance applications, vehicle reservations, showroom viewings, valuations, marketing or promotional purposes.
We may share personal data with third parties where this is necessary for the purposes set out in this notice, including:
| Third party / recipient | Why data may be shared |
|---|---|
| Finance lenders | Where a customer previously made a finance application through Cargiant, we may have shared personal data with lenders so they could assess the application and administer any finance agreement. We may also share relevant historic records with lenders where necessary for motor finance commission complaints, regulatory requirements, FOS matters, civil claims or related enquiries. |
| Helvetia Global Solutions Ltd and Spectrum Insurance Services Limited | Where a customer purchased an insurance product on or after 18 December 2025, relevant personal data may have been shared with Helvetia and/or Spectrum for the purposes of arranging or administering that product. |
| Cargiant Warranty administrator (Spectrum Insurance Services Limited) | To assist with existing customer queries, complaints, product administration, claims or related matters. |
| Regulators and public authorities | Where required or appropriate, including the FCA, Financial Ombudsman Service, Information Commissioner’s Office, HMRC, law enforcement agencies, courts or other public bodies. |
| Professional advisers | Including legal advisers, insurers, auditors, accountants or other advisers where necessary for legal, regulatory, tax, accounting, complaints or claims purposes. |
| Service providers | Including IT, storage, communications, customer support, records management or other service providers who process personal data on our behalf. |
| Fraud prevention, security or law enforcement bodies | Where necessary to prevent, investigate or detect fraud, crime, misuse, security incidents or unlawful activity. |
Finance Lenders
Where a customer previously made a finance application through Cargiant, we may have shared personal data with one or more finance lenders so that they could assess the application and, where applicable, administer any finance agreement.
The finance lenders with whom customer data may have been shared include:
| Black Horse Finance 0290 853 528 | https://www.blackhorse.co.uk/privacy.html |
| MotoNovo Finance 033 200 0030 | https://customer.motonovofinance.com/privacy |
| Creation Consumer Finance Limited (BNP Paribas) 0371 512 1983 | https://www.creation.co.uk/about-us/data-protection-notice |
| Northridge Finance 0800 917 0931 | https://www.northridgefinance.com/yourdata/ |
| Starline Finance 02920 853 528 | https://startlinemotorfinance.com/fair-processing-notice/ |
| Blue Motor Finance 020 3005 9330 | https://bluemotorfinance.co.uk/home/privacy_policy |
| Moneyway Finance 0345 111 7125 | https://www.moneyway.co.uk/privacy-statement |
| Moneybarn 0330 555 1230 | https://www.moneybarn.com/privacy-policy/ |
| Advantage Finance 01472 233 214 | https://www.advantage-finance.co.uk/home/privacy.asp |
| Oodle Car Finance 01865 477826 | https://www.oodlecarfinance.com/privacy-notice |
| Automoney Motor Finance 0800 197 9090 | https://ammf.co.uk/privacy-policy/ |
| Go Car Credit 01925 696 370 | https://gocarcredit.co.uk/privacy-notice/ |
9. What are your rights?
Depending on the legal basis we have relied upon to process your data you have various rights you can choose to exercise.
All requests will be considered by the Compliance Department or relevant Department Management and responded to within 28 days of receipt. Requests can be made either in person, by email ([email protected]).
We may ask you to provide information to confirm your identity before we respond to your request. This is to help us protect your personal data. If we need further information from you to deal with your request, such as proof of identity, the time limit may start once we have received that information.
Access
You have the right to ask us whether we hold personal data about you and to request a copy of that personal data.
Rectification
You have the right to ask us to correct personal data that you believe is inaccurate or incomplete.
Erasure
If you feel that there is no compelling reason for your personal data to continue to be processed you can request erasure. If consent was originally obtained this can simply be withdrawn. In other circumstances the request will be considered by the Compliance Department; we may not be able to delete personal data where we need to keep it to comply with HMRC, FCA, accounting, regulatory or data protection obligations, or where we need it to establish, exercise or defend legal claims.
Portability
You may have the right to receive certain personal data in a structured, commonly used and machine-readable format.
This right only applies in limited circumstances, such as where the processing is based on consent or contract and is carried out by automated means. As Cargiant is now closed for retail vehicle sales, this right is unlikely to apply to most of the personal data we retain.
Objection
You have the right to object to our use of your personal data where we rely on legitimate interests.
If you object, we will consider your request. We may still continue to use or retain the data if we have compelling legitimate grounds to do so, or where the data is needed for legal claims.Customers have the right to withdraw consent given to communications at any time.
Please visit the Information Commissioner’s Office website ico.org.uk if you require more information.
If you are unhappy with the response following your request or you would like to make a complaint about how your data has been processed please refer to the Information Commissioner’s Office at https://ico.org.uk/concerns/ who are the supervisory authority in this area.
10. Cookies
Our website only uses strictly necessary session cookies. Cookies are small text files that are placed on your computer or mobile phone when you browse websites. Session cookies are temporary and are deleted when you close your browser.
We use strictly necessary session cookies to allow the website to function properly and securely. These cookies do not require your consent because they are necessary for the operation of the website.
We do not use cookies for analytics, advertising, remarketing, social media tracking or promotional marketing. You can set your browser to block cookies, but some parts of the website may not work properly if strictly necessary cookies are blocked.
11. Turning Cookies Off
You can usually switch cookies off by adjusting your browser settings to stop it from accepting cookies. Doing so however will likely limit the functionality of our's and a large proportion of the world's websites as cookies are a standard part of most modern websites.
Amending cookies setting in different types of browser:
Cookie settings in Edge - https://support.microsoft.com/en-us/help/196955
Cookie settings in Firefox - https://support.mozilla.org/en-GB/kb/enable-and-disable-cookies-website-preferences
Cookie settings in Chrome - https://support.google.com/accounts/answer/61416
Cookie settings in Safari - https://support.apple.com/kb/ph21411
It may be that your concern around cookies relates to so called "spyware". Rather than switching off cookies in your browser, you may find that anti-spyware software achieves the same objective by automatically deleting cookies considered to be invasive. Learn more about managing cookies with antispyware software.