Anycolourcar Limited (company number 12573459, FCA No. 946186, ICO registration ZA863807) is the data controller responsible for your personal data when you use our website, request a quote, apply for finance, buy a vehicle from us, sell us a vehicle, or use our service centre.

This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how long we keep it, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).

If you have any questions about this policy, or wish to exercise any of your rights, please contact us using the details in section 12 below.

Last updated: May 2026

1. Who we are

Anycolourcar Limited, trading as anycolourcar.com, is the data controller. Our details are:

• Registered address: The Old Garage, Genn Lane, Worsbrough, Barnsley, S70 6TF

• Company number: 12573459

• FCA registration: 946186 (credit broker, not a lender)

• ICO registration: ZA863807

• Email for data protection enquiries: [privacy@anycolourcar.com]

• Phone: 01226 574321 (Customer Care)

2. What personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data about you:

Identity Data — title, first name, last name, date of birth, marital status, residential status, driving licence details.

Contact Data — address, email address, telephone numbers.

Employment Data — current employment status, time in current employment, occupation, payslips, employer name, net monthly income (collected only where you apply for finance).

Financial Data — bank statements, payment card details (collected only where you apply for finance or make a payment).

Vehicle Data — current vehicle details, registration, road tax status, service and MOT history.

Transaction Data — details of products and services you have engaged from us.

Profile Data — services engaged, your interests, preferences and feedback.

Technical Data — internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.

Usage Data — information about how you use our website and services.

Marketing and Communications Data — your preferences in receiving marketing from us and our third parties, and your communication preferences.

We do not knowingly collect special category data (such as data about your health, race, religion, sexual orientation or biometric data). If you choose to share such information with us — for example, in support of a finance affordability assessment, or to flag a vulnerability so that we can support you appropriately — we will treat it with extra care and only use it for the purpose for which you provided it.

3. How we collect your personal data

We collect personal data:

• Directly from you, when you fill in forms on our website, request a quote, apply for finance, communicate with us by phone, email, WhatsApp or social media, or visit our premises.

• From third parties, including credit reference agencies (via our finance partners), fraud prevention agencies, the DVLA, vehicle provenance providers and our lender panel.

• Automatically, through cookies and similar technologies when you use our website (see our Cookie Policy).

4. Why we use your personal data and the legal bases we rely on

We only use your personal data when the law allows us to. The legal bases we rely on are:

Contract — to take steps at your request before entering into a contract, and to perform a contract we have with you (for example, to process your vehicle purchase, your finance application, your part-exchange, or a service booking).

Legitimate interests — to run our business and provide our services, to keep our records up to date, to develop and improve our products and services, to recover debts due to us, to protect our business from fraud and other risks, and to send service-related communications. We only rely on legitimate interests where your interests and fundamental rights do not override those interests.

Legal obligation — to comply with our legal and regulatory obligations, including those under the Consumer Credit Act 1974, the Consumer Rights Act 2015, money laundering regulations, tax law and FCA rules.

Consent — for sending direct marketing communications by email or text message, and for non-essential cookies. You can withdraw consent at any time.

5. Automated decision-making and profiling

We do not carry out credit scoring or any automated decision-making in relation to your finance application. When you apply for finance through us, we act as a credit broker only — we introduce your application to a finance provider on our panel, and the finance provider decides whether to offer you credit and on what terms.

The finance provider you are introduced to is likely to use automated processing, including a credit score generated by a credit reference agency, to make their lending decision. Automated decisions taken by the finance provider can affect whether your finance application is approved, the interest rate offered to you, and the credit limit available.

You have the right to obtain human intervention, to express your point of view, and to contest any automated decision made about you. As we do not make the automated decision, you should exercise this right against the finance provider directly. We can support you in making that contact if helpful.

6. Who we share your personal data with

We share personal data with the following recipients, where it is necessary for the purposes set out above. All recipients listed below are based in the UK, except where stated otherwise (see section 7 on international transfers).

Our lender panel — to introduce your finance application. Our current panel is: Black Horse Finance, MotoNovo Finance, DSG, Carfinance 247 and Blue Motor Finance. Occasionally, at your request, we may introduce your application to a lender outside our panel.

Credit reference agencies — your application data will be shared with credit reference agencies (typically Experian, Equifax or TransUnion) by the finance provider as part of their credit assessment. Soft searches do not affect your credit score; hard searches, which are carried out by the finance provider, may do. We do not carry out credit scoring ourselves.

Fraud prevention agencies — to verify identity and prevent fraud.

Vehicle provenance providers — we use Motorcheck, Experian and HPI to check vehicle history, outstanding finance and provenance.

The DVLA — to register your vehicle and verify driving licence details.

Our compliance consultancy — a third-party FCA compliance consultancy that provides our compliance software and produces our annual regulatory reporting. They process customer data on our behalf as a data processor. The company we use are The Compliance Guys.

Our website provider — Autofintech Limited, trading as Motorsales.ai, which provides and hosts our website platform.

Our dealer management system — Navigator DMS, which stores customer, vehicle and transaction records.

Our showroom system — Codeweavers, which powers our in-showroom sales and quotation tools.

Our analytics and tag management provider — Google (Google Analytics and Google Tag Manager). See section 7 below on international transfers, and our Cookie Policy.

Our social media advertising providers — Meta (Facebook and Instagram), where you have consented to marketing cookies. We use the Meta Pixel for conversion tracking and retargeting. See section 7 below.

Our customer review widget provider — an embedded customer review carousel on our website (served from raxcdn.com). See section 7 on international transfers.

Our professional advisers — our insurers Oyster, our accountants Poppy Accounting, and our solicitors where instructed on a specific matter.

Trading Standards, the Financial Ombudsman Service and other regulators — where required to resolve a complaint or comply with our regulatory obligations. South Yorkshire Trading Standards is our appointed Alternative Dispute Resolution provider.

Law enforcement, courts and government bodies — where required by law.

We do not sell your personal data to third parties.

7. International transfers

All of the recipients listed in section 6 are based in the UK, with the following exceptions, which may process data outside the UK (including in the United States):

• Google (Google Analytics and Google Tag Manager).

• Meta (Facebook and Instagram advertising), where you have consented.

• Our customer review widget provider (raxcdn-hosted).

Where data is transferred outside the UK, we rely on the following safeguards:

• The UK Government's adequacy regulations for transfers to the EEA, where the recipient's processing takes place in the EEA.

• For other transfers (including to the United States), the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, supplemented by additional safeguards where appropriate.

• Where relevant, the recipient's certification under the UK Extension to the EU–US Data Privacy Framework.

You can request further details of the safeguards we rely on by contacting us using the details in section 12.

8. How long we keep your personal data

We keep your personal data only for as long as we need it for the purposes set out in this policy, and to comply with our legal and regulatory obligations. Our retention periods are:

Vehicle purchase records (customer, vehicle and transaction data) — 6 years from the end of our relationship, to meet limitation periods under English law, HMRC record-keeping requirements, and the period during which a consumer may bring a claim under the Consumer Rights Act 2015.

Finance application data (where an agreement was entered into) — 6 years from the end of the relationship, in line with FCA record-keeping requirements.

Finance application data (where the application was rejected or withdrawn) — 3 years from the date of the application.

Complaints records — 6 years from the date the complaint is closed, in line with FCA DISP record-keeping requirements.

Service and aftercare records (MOT, servicing, repairs) — 6 years, to support warranty and service claims and to mirror our purchase records.

Marketing and enquiry data (where you have enquired but not purchased) — 2 years from the date of your last interaction with us, or until you opt out, whichever is sooner.

Website analytics data — 14 months, in line with the Google Analytics default retention period.

Cookie data — as set out in our Cookie Policy.

CCTV (where in use) — 30 days, except where retained for a specific incident.

After the retention period, we will securely delete or anonymise your personal data. Where data is retained beyond a standard retention period for a specific reason (for example, an ongoing complaint, dispute or legal proceedings), we will only retain it for as long as is necessary for that purpose.

9. Your rights under UK data protection law

You have the following rights in relation to your personal data:

• The right to be informed (this policy serves that purpose).

• The right of access — you can ask for a copy of the personal data we hold about you.

• The right to rectification — you can ask us to correct inaccurate or incomplete data.

• The right to erasure (the "right to be forgotten") — in certain circumstances, you can ask us to delete personal data.

• The right to restrict processing — you can ask us to limit how we use your data in certain circumstances.

• The right to data portability — for data you have provided to us, where we are processing on the basis of consent or contract.

• The right to object — including the absolute right to object to direct marketing.

• Rights in relation to automated decision-making and profiling (see section 5).

• The right to withdraw consent at any time, where we are relying on consent.

To exercise any of these rights, please contact us using the details in section 12. We will respond within one month. We will not charge you a fee, except in limited circumstances permitted by law.

10. Your right to complain to the ICO

If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk

• Helpline: 0303 123 1113

• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, appreciate the chance to deal with your concerns before you approach the ICO. Please contact us first.

11. Marketing

We may send you marketing about our products and services, including offers, new vehicle stock and service reminders, by post, email, text message or phone, where we have your consent or where we are entitled to do so on the basis of legitimate interests (for example, marketing similar services to existing customers, subject to your right to opt out).

You can opt out of marketing at any time by:

• Clicking "unsubscribe" in any marketing email we send you.

• Replying STOP to any marketing text message.

• Emailing us at [privacy@anycolourcar.com].

• Contacting Customer Care on 01226 574321.

Opting out of marketing will not stop us sending service-related communications about an active order, finance agreement, service booking or complaint.

12. Contact us

For any questions about this Privacy Policy, or to exercise any of your rights:

• Email: [privacy@anycolourcar.com]

• Post: Data Protection, Anycolourcar Limited, The Old Garage, Genn Lane, Worsbrough, Barnsley, S70 6TF

• Phone: 01226 574321

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version will always be available at anycolourcar.com/privacy-policy. Where the changes are significant, we will let you know by email or a prominent notice on our website.

Cookies

About this Cookie Policy

This Cookie Policy explains what cookies are, which cookies we use on anycolourcar.com, why we use them, and how you can control them.

It should be read alongside our Privacy Policy, which explains how we use your personal data more generally.

Issue date: May 2026

Next review date: May 2027

What are cookies?

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work, or to work more efficiently, as well as to provide information to the site owners.

Our website also uses similar technologies, including HTML5 local storage and session storage. Where we refer to "cookies" in this policy, we mean cookies and these similar technologies, all of which are treated the same way under data protection law.

Some cookies are essential for the website to work. Others help us understand how visitors use our site so we can improve it, remember your preferences, or — with your consent — show you relevant marketing on this site and elsewhere.

The categories of cookies we use

Strictly necessary cookies — these are essential for the website to function (for example, to maintain your session as you browse vehicles, or to support secure parts of the site). These cookies cannot be switched off. They do not require your consent under data protection law.

Functional cookies — these remember choices you make to give you a better experience (for example, recognising your browser across sessions so we can show you your recently viewed vehicles).

Analytics cookies — these help us understand how visitors use our site so we can improve it. They collect information in an aggregated form. We use Google Analytics 4.

Marketing cookies — these are used to show you relevant advertising on this site and on other websites and platforms, including Meta (Facebook and Instagram) and Google. They are only used where you have given consent.

Your choices

When you first visit our website, you will see a cookie banner. You can:

• Accept all cookies.

• Reject all non-essential cookies.

• Choose which categories of cookie to allow.

You can change your preferences at any time by clicking the "Cookie preferences" link in the footer of every page.

You can also manage cookies through your browser settings. Most browsers allow you to refuse to accept cookies, delete cookies, or be notified before a cookie is stored. The way to do this varies by browser — see your browser's help section for instructions.

Please note that if you reject or disable cookies, some parts of the website may not work as intended.

This list below is based on the configurations of the third-party services we use. The exact cookies set on your device will depend on the cookie preferences you select and on changes from time to time made by those third parties to their own services. We review the cookies in use periodically and update this policy when significant changes occur.

Third-party cookies

Some cookies are set by third parties on our behalf. These include:

• Google, for Google Analytics (which helps us understand site usage), Google Tag Manager (which manages the loading of other tags), and Google Ads.

• Meta, for advertising on Facebook and Instagram, where you have consented.

• Our customer review widget provider, which serves embedded customer reviews on our website.

• Motorsales.ai (our website platform provider), for cookies and local storage that support the functioning of the website.

These third parties have their own privacy and cookie policies, which we encourage you to read. Google, Meta and our review widget provider are based outside the UK and may process cookie data outside the UK — please see section 7 (International transfers) of our Privacy Policy for details of the safeguards we rely on.

Changes to this Cookie Policy

We may update this Cookie Policy from time to time. The current version will always be available at anycolourcar.com/cookie-policy.

Contact us

If you have any questions about our use of cookies, please contact us:

• Email: customer@anycolourcar.com