EMaC Privacy Notice
EMaC Privacy Notice – Maintenance Plan
Selling Agent: Autorama UK Limited
1. Controller and Contact Details
EMaC Limited is the data controller for the processing activities described in this notice.
Registered Address: Bembridge House, 1300 Parkway Solent Business Park, Whiteley, Fareham, Hampshire, PO15 7AE, United Kingdom.
Data Protection Officer (DPO): Nathan Steele
Email: DPO@Innovation.Group
2. How We Collect Your Data
We initially receive your personal data indirectly from the selling agent, Autorama UK Limited. You can view their privacy notices here (Autotrader) and here (Vanarama) to understand how they collect and share your data. After the initial registration, we may collect additional data directly from you during the active life of your maintenance plan.
3. Categories of Personal Data
We may collect and process the following categories of personal data:
• Full name
• Contact details (address, email, phone number)
• Vehicle details (make, model, registration number)
• Payment and billing information
• Maintenance plan details
• Communication records
• Any other information you provide during interactions with us
4. Purpose and Legal Basis for Processing
We process your personal data for the following purposes and under the following lawful bases:
• Contract (Article 6(1)(b)): To fulfil our contractual obligations to you, including administering your maintenance plan, collecting payments via Direct Debit, and arranging services such as repairs and breakdown assistance.
• Legitimate Interests (Article 6(1)(f)): We process your personal data to support internal analytics, prevent fraud, and collaborate with Autorama UK Limited for reporting, complaint resolution, and service improvement. Each organisation acts as an independent data controller and determines its own purposes and means of processing. These activities are subject to a Legitimate Interests Assessment (LIA) to ensure your rights and freedoms are respected.
• Legal Obligation (Article 6(1)(c)): We retain customer and transaction data for up to 7 years to comply with applicable UK legal requirements, including accounting regulations and limitation periods for contractual claims.
5. Sharing Your Data
We may share your data with third-party service providers such as repair networks, breakdown assistance providers, and vehicle hire companies. All third parties are subject to due diligence and contractual obligations to ensure compliance with data protection laws.
6. International Data Transfers
Your data may be processed outside of the UK or EEA by our third-party service providers or group companies. Where this occurs, we ensure appropriate safeguards are in place, such as adequacy decisions, Standard Contractual Clauses (SCCs), International Data Transfer Agreements (IDTAs), or Binding Corporate Rules (BCRs), to ensure your data is protected to UK GDPR standards.
7. Automated Decision-Making
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
8. Marketing
We do not use your data for marketing purposes. However, we may send you service reminders related to your maintenance plan, which are not considered marketing communications.
9. Vulnerable Individuals
While our services are not directed at children, and vehicles are only leased to individuals aged 18 or older, we recognise that some customers may be considered vulnerable due to personal circumstances. We are committed to treating all individuals fairly and respectfully, and we take additional care when interacting with individuals who may require extra support.
10. Your Rights
Under UK data protection law, you may have the following rights, depending on the circumstances and the legal basis for processing:
• Right to access your personal data
• Right to rectification of inaccurate or incomplete data
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, please contact our Data Protection Officer at DPO@Innovation.Group.
11. Complaints and Supervisory Authority
If you have any concerns about how we handle your personal data, please contact our Data Protection Officer at DPO@Innovation.Group.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk
Phone: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Version – 1.0
Last Updated – 1st August 2025.