Privacy Notice


Unipart is committed to protecting your personal data and to respecting your privacy. This Privacy Notice explains the reasons for processing your personal data, the way we collect, handle and process such data and your rights in relation to your personal data, in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 (“DPA 2018”) and other applicable data protection legislation. All terms referred to in this Privacy Notice are defined in this legislation.

This Privacy Notice is provided in a layered format so that you can click through to the specific areas set out below.

  1. Who are we?
  2. What personal information do we collect?
  3. How is your personal data collected?
  4. Why and how do we process your personal data?
  5. How long do we keep your personal data?
  6. What are your rights and how can you exercise them?  
  7. Marketing
  8. Data security and protecting your information
  9. Disclosures of your personal data
  10. International transfers
  11. Cookies
  12. Changes to this Privacy Notice
  13. Contact us

Please note that this Privacy Notice applies to the use of this website only. For any other data processing, Unipart is committed to providing specific Privacy Notices where relevant and/or needed.

  1. Who are we?

Unipart Group Limited (“We”, ”Us”, “Unipart”) is a company incorporated in England and Wales, registered at Companies House (00576777), whose registered address is located at Unipart House, Garsington Road, Cowley, Oxford OX4 2PG.

For the purpose of this Privacy Notice, Unipart Group Limited is acting in its capacity as a Data Controller within the meaning of the DPA 2018 and UK GDPR

Further information regarding the legal entities that form part of Unipart Group Limited can be found here Unipart’s Terms & Conditions/Legal Notice.

    2. What personal data do we collect?

Personal data means data which relates to a living individual and which identifies that individual, either directly or indirectly, such as your name or your contact information, or information which, when combined with other information, can identify you.

We may collect, use, store and transfer different kinds of personal data about you including (which we have grouped together as follows) but not limited to:

  • Identity Data – e.g. first name, maiden name, last name, title.
  • Contact Data – e.g. email address and telephone numbers, company name (where you use the ‘contact us’ link on our website).
  • Technical Data – e.g. internet protocol (“IP”) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
  • Profile Data – e.g. your interests, preferences, feedback and survey responses.
  • Usage Data – e.g. information about how you use our website, products and services.
  • Marketing and Communications Data – e.g. your preferences in receiving marketing from us and our third parties and your communication preferences including email and telephone.

We do not intentionally collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data), nor do we purposely collect any information about criminal convictions and offences. In very limited circumstances, we may process Special Categories of Personal Data. For instance, if you have entered into a specific type of contract with us or where you have provided this data with your consent.

  1. How is your personal data collected?

We use different methods to collect data from and about you, including:

  • Direct interactions. You may give us your Identity and/or Contact details when completing forms on our website or when corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
    ask for information about our goods and services;
    contact us directly via the Unipart General Enquiry/Find Us form;
    subscribe to our services or publications;
    request marketing to be sent to you or downloaded; and/or
    complete a survey
  • Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our separate Cookie Policy for further details.

This website and our services are not designed for, or intentionally targeted at, children aged 13 years or under. In the event that any personal data pertaining to children aged 13 years or under is processed, it will be treated in the same manner as other personal data.

  1. Why and how do we process your personal data?

Unipart takes your data protection seriously and will only use your personal data where we have a lawful basis to do so, for instance:

  • Where you have given us consent to use your personal information.
  • Where we need to perform a contract we are about to enter into or have entered into with you.
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • Where we need to comply with a legal or regulatory obligation.

Consent

Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to marketing communications (please see the Marketing Section below for further information). For instances where consent is the most appropriate lawful basis, for us to process your personal data, you will be provided with a separate consent form and Privacy Notice for that processing.

In the limited circumstances where your consent is relied upon for the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that processing at any time. You may contact the Data Protection Team using the contact detail below to withdraw consent using the contact detail below. We will ask you to confirm certain details relating to the consent.

See the table below to find out more about the types of lawful basis that we will rely on to process your personal data. Note that we may process your personal data on more than one lawful ground depending on the specific purpose for which we are using your data.

Lawful basis for processing personal data
Purpose/Activity Type of data Lawful basis for processing including basis of legitimate interest
To manage our relationship with you which may include:
a) Publishing changes to our terms or Privacy Notice on our website
b) Asking you to leave a review or take a survey
a) Identity
b) Contact
c) Profile
d) Marketing and Communications
a) Necessary to comply with a legal obligation
b) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)
To enable you to partake in completing a survey a) Identity
b) Contact
c) Profile
d) Usage
e) Marketing and Communications
a) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) a) Identity
b) Contact
c) Technical
a) Necessary for our legitimate interests (for running our business provision of administration and IT services network security to prevent fraud and in the context of a business reorganisation or group restructuring exercise)
b) Necessary to comply with a legal obligation
To deliver relevant website content and advertisements to you and to measure or understand the effectiveness of the advertising we serve you a) Identity
b) Contact
c) Profile
d) Usage
e) Marketing and Communications
f) Technical
Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)
To use data analytics from providers such as Hubspot and Google Analytics to improve our website, products/services, marketing, customer relationships and experiences a) Identity
b) Contact
c) Profile
d) Usage
e) Marketing and Communications
f) Technical
a) Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant to develop our business and to inform our marketing strategy)
b) Consent where applicable and where this is relevant to the processing
To make suggestions and recommendations to you about good or services that may be of interest to you a) Identity
b) Contact
c) Technical
d) Usage
e) Profile
Necessary for our legitimate interests (to develop our products/ services and grow our business)

 

  1. How long do we keep your personal data? 

We will only retain your personal data for as long as it is necessary to fulfil the purposes outlined in this Privacy Notice or the purposes of which you have otherwise been informed, including for the purposes of satisfying any legal or reporting requirements.

To determine the appropriate retention period for personal data, we take the following into consideration: the amount, nature, and sensitivity of the personal data; the potential risk of harm from unauthorised use or disclosure of your personal data; the purposes for which we process your personal data; whether we can achieve those purposes through other means, and the applicable legal requirements.

  1. What are your rights and how can you exercise them? 

In certain circumstances, you have the following rights under data protection legislation to your personal information:

  • The Right to be Informed: Unipart is committed to ensuring that you are always aware of what we are doing with your information and are aware of any changes to the processing of your information. We do so through this Privacy Notice, which is reviewed and updated as and when required.
  • The Right of Access: The right of access is commonly known as a “Subject Access Request” (SAR). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
    When requesting your personal information we may need to ask you to provide additional information so that we can verify your identity before we can respond to your request. This additional information may include the following; your full name, address and contact telephone number, any information used by us to identify you, and we may ask for details of the specific information you require and any relevant dates.
  • The Right to Rectification: We endeavour to ensure that the information we hold about you is always correct, however, there may be instances where the information we hold is incomplete or inaccurate. You can ask that we rectify any information about you that is incorrect, although we may need to verify the accuracy of any new information you provide to us first.
  • The Right to Erasure: You have the right to request that certain personal information be erased from our systems if you feel that there is an underlying legal issue with us processing your information, or, where you withdraw consent.
    While you may request for your information to be erased, please note that this right is not automatic and will only apply in certain circumstances. As such, each request is considered on a case-by-case basis and when we do reject a request, a response will always be provided to the data subject within one month explaining why.
  • The Right to Restrict Processing: In certain circumstances you have the right to request that we restrict the processing of your personal data. This means that you can ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
  • The Right to Object: You have the right to object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation you feel, processing on this legitimate interest ground, impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes.
  • The Right to Data Portability: In certain circumstances, you have the right to request the transfer of your personal data to you or to a third party. We will provide to you, or your nominated third party, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. Please note that due to the type of services Unipart provides, there will be very few instances where this right may apply.
  • Rights related to Automated Decision Making and Profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. Please note however that Unipart does not use any form of automated decision making or the profiling of individuals personal data.

Timescales for complying with your request
We aim to respond to all valid requests within one month. However, it may take us longer if the request is particularly complicated or you have made several requests. We will always notify you if we think a response will take longer than one month. This period begins at the point we have been able to verify your request, not necessarily at the point you make the original request.

  1. Marketing

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. Generally we do not rely on consent as a legal basis for processing your personal data, other than where it is in relation to sending/discussing third party direct marketing communications to you via email, telephone or post.

We may share both existing customer data and prospective customer data with HubSpot as part of their third-party client management, marketing and sales software service that they provide to us. This data may include personal data, navigation data, system usage data, email data and any other electronic data that is submitted, stored, sent or received by end users via the HubSpot service.

For further information about how HubSpot handles your personal data as a third-party, please refer to their privacy policy using the link below:
https://legal.hubspot.com/privacy-policy

You have the right to withdraw consent to marketing at any time by contacting us using the unsubscribe link within the email preferences section on this website, the unsubscribe button found in all email communications, by using the contact us form below or by telephone. You may also contact the Data Protection Team to withdraw consent using the contact details below.

Promotional Offers from us
We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services, and offers may be relevant for you (we call this marketing).

You will receive marketing communications from us if you have completed a survey or registered for a White Paper, questionnaire or checklist, or subscribed to our monthly newsletter and where you have opted in (and/or consented) to receiving marketing relating to the original information request.

Third-Party Marketing
Before sharing your personal data with any organisation outside of Unipart for marketing purposes, we will obtain your express opt in consent.

Opting out

Unipart is committed to protecting the confidentiality and security of your information. We have appropriate security measures in place to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have legitimate grounds to do so. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

  1. Data Security and protecting your information

Unipart is committed to protecting the confidentiality and security of your information. We have appropriate security measures in place to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have legitimate grounds to do so.  They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

  1. Disclosures of Your Personal Data

We may have to share your personal data with the parties set out below for the purposes set out in the table in section 4 of this Privacy Notice.

  • Internal Third Parties
    • Other companies in the Unipart Group Limited and its subsidiaries acting as joint controllers or processors and which are based within Europe, Asia Pacific and/or North America.
  • External Third Parties
    • Service providers acting as processors based in Europe, Asia Pacific and North America who provide IT and system administration services.
    • Professional advisers acting as processors or joint controllers including lawyers, bankers, auditors and insurers based in Europe, Asia Pacific and North America who provide consultancy, banking, legal, insurance and accounting services.
    • Marketing platforms acting as processors such as BabelQuest and Hubspot based in Europe who provide Marketing, CRM and analytics support.
  • Specific third parties such as Hubspot and Google Analytics.
  • Third parties to whom we may choose to transfer or merge parts of our business or assets as part of acquisition of other businesses. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Privacy Notice.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes. They are only permitted to process your personal data for specified purposes, in accordance with our instructions and in compliance with legislation.

  1. International Transfers

Your information may be processed in locations outside the UK/EU/European Economic Area (EEA), including countries that may not have the same level of protection for personal information. When we do this, we’ll ensure it has an appropriate level of protection and that at least one of the following safeguards is implemented:

  • We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
  • Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.

  1. Cookies

Please see our separate Cookie Policy for further details.

12. Changes to this Privacy Notice

We reserve the right to update this Privacy Notice at any time. Any updates will be published on our website.

13. Contact Us

The Unipart Group Data Protection Officer carries out  internal supervision of   our responsibilities under this Privacy Notice. 

If you would like to exercise your rights as a data subject, or if you have comments, questions or concerns, or if you would like to submit a complaint regarding the collection and use of your personal data, you may contact Unipart’s Data Protection Officer: 

  • by post: UNIPART GROUP LIMITED attention of Data Protection Officer, Unipart House, Garsington Road, Oxford OX4 2PG
  • by email: to group.dataprotection@unipart.com
  • By telephone: to 01865 778966

You also have the right to lodge a complaint with the supervising authority, the Information Commissioner’s Office (ICO) at any time. For further information, please refer to the ICO website, www.ico.org.uk

This Privacy Notice was last updated in October 2025.