Privacy Policy

This policy explains how Maison Shadan Ltd, trading as Crowthorne Automotive (“we”, “us”, “our”), collects and uses personal information.

We are the data controller for the purposes of UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025.

Privacy requests should be directed to the company director using the details above.

It applies when you:

• visit our website or contact us
• enquire about, buy, sell or part-exchange a vehicle
• ask us to introduce you to a finance provider
• request a valuation, test drive, delivery or collection
• deal with us as a supplier or other motor trader

Depending on what you do with us, we may collect:

• Contact details — name, address, email and phone
• Identity details — date of birth, driving licence, passport or other ID, and documents used to check who you are
• Vehicle details — registration, V5C, mileage, MOT and service history, and part-exchange information
• Finance details — if you apply for finance, employment, income, bank and credit-related information needed by a lender
• Payment details — amounts paid or received, including settlement of existing finance where relevant
• Website data — IP address, device and browser data, pages viewed, and cookies (see our Cookie Policy)
• Call and message records — emails, live chat or WhatsApp messages, and calls if we record them
• CCTV — images captured if we operate cameras at our premises
• Special category data — only where needed, such as accessibility or vulnerability support, or health and safety after an incident. We will ask for additional consent where required by law

We do not need every item for every customer. We only collect what the specific transaction requires.

Most information comes from you through forms, phone calls, emails, chat, identity checks and vehicle documents.

We may also receive information from:

• credit reference and identity-check providers
• finance lenders and intermediaries
• other dealers, auctions or traders
• DVLA or DVSA where the law allows
• publicly available sources
• payment and delivery providers

We do not use automated decision-making that has legal or similarly significant effects unless we tell you first.

We may be unable to value, sell or buy a vehicle, complete a delivery, or introduce you to a lender.

Information is available only to people who need it for their work. We may share it externally with:

• finance lenders and credit brokers, if you want finance
• identity, credit and anti-fraud providers
• insurers, warranty or aftercare providers you choose
• transport and delivery companies
• IT, hosting, email, telephony and payment providers
• DVLA, DVSA, HMRC, the ICO, Trading Standards, the FCA where applicable, and the police
• professional advisers, including accountants, solicitors and insurers
• auctions or other traders, if that is how the vehicle is bought or sold
• a buyer of our business, subject to equivalent protections

We do not sell your personal data.

If we introduce you to a lender, that lender is a separate controller for the data they receive. You should also read their privacy notice.

We will only act as a credit broker where permitted to do so and will provide the relevant regulatory information separately.

If a supplier stores data outside the UK, we will use a UK-approved transfer tool, such as the UK Addendum or IDTA, or rely on an adequacy decision where one exists.

We keep information only as long as needed for its purpose and any legal retention requirements, including tax, accounting, complaints and finance records. Vehicle sale and finance files are typically kept for several years after the transaction. Marketing lists are kept until you opt out or the list is no longer used. CCTV is kept for a short, fixed period unless it is needed for an incident.

We use reasonable technical and organisational measures to protect your information. No method of storage or transmission is completely secure.

You can ask us to:

• access your data
• correct it
• erase it in limited circumstances
• restrict or object to certain processing
• move data you gave us (data portability), where the law allows
• withdraw consent where we rely on consent

Email info@crowthorneautomotive.com or write to our registered office. We may need to verify your identity.

Please contact us first so we can try to resolve your concern.

You can also complain to the Information Commissioner’s Office:

Our site may use essential cookies and, with consent where required, analytics or marketing cookies. See our Cookie Policy for further details and information about changing your choices.

Our services are for adults. We do not knowingly collect personal data from children.

We will update this page when the policy changes. The date at the top will change.