X-BeX GDPR Policy Statement

GDPR Policy Statement
Company: X-BeX Ltd

Company Number: 8524026

Data Protection Licence Number: ZA029827

Data Controller: Jamie Bond, Mike Reed

We collect customer data such as name, address, and contact details (telephone number, mobile number and e-mail address) together with relevant vehicle details for the purposes of linking customers to their vehicles and to provide contact details so that we can stay in touch during, and post vehicle repair and to make specific offers relevant to you. This is stored on our computer within the premises and backed up securely on memory sticks/external hard drive held off the premises.

We will, with express permission, share this data with mutually involved third parties such as insurance companies, warranty companies, card payment companies, contracted quality assurance companies or the police if requested. We do not share your data with unrelated third parties for marketing or any other purposes. Your data may be accessed during routine updates by our computer suppliers/maintainers whose privacy notices we are satisfied with.

In the case of vehicle repair contracts or supply of parts contracts this data is necessary for performance of the contract and for warranty purposes.

We also hold data about our suppliers such as company name, address, contact information and banking details for the purposes of recording our purchases, reconciling same and making payments via BACS. We do not share this data with any other party except when references are required from us, and then only when permission has been granted will basic contact details be provided.

Staff records are also held by us for the purposes of satisfying statutory requirements and making payments via the BACS system. These are only shared with our accountants, the bank and HMRC.

Our staff are fully aware of the sensitivity of customer's data and the terms of our data licence as well as the security conditions of our card payment scheme.

You may request copies of the data held by us about you and this will be processed within the 40-day period free of charge except postage if required. (subject to satisfactory identity request) You may request in writing to have your data deleted, altered, or opted out at any time. (again, subject to satisfactory identity request)

This notice is current from: 27/03/2019 and may be updated from time to time.