PRIVACY AND COOKIE POLICY

Last updated: 13 July 2026

1. About this policy

This policy explains how Britlith Auto Ltd collects, uses, shares and protects personal information when you:

  • visit britlithauto.co.uk;
  • purchase Driven By Gabi merchandise;
  • enquire about workshop services;
  • purchase or enquire about a vehicle;
  • request vehicle recovery or another service;
  • contact us by telephone, email, website form or social media;
  • subscribe to marketing communications;
  • attend our premises; or
  • otherwise interact with us.

This policy also explains how our website uses cookies and similar technologies.

2. Who we are

Britlith Auto Ltd is the controller responsible for the personal information covered by this policy.

Britlith Auto Ltd
Registered in England and Wales
Company number: 13387046
Registered office: Unit 1, Bodenham, Saffrons Cross, Hereford, HR1 3LE

Email: contact@britlith.co.uk
Telephone: 01432 620221

Gabija Puidokiene
trading as Driven By Gabi

All sales made through the Driven By Gabi section of this website are made by Gabija Puidokiene trading as Driven By Gabi.

Payments received from sales are received and held by Gabija Puidokiene trading as Driven By Gabi and are used for the operation, development and running of the Driven By Gabi brand and related activities.

Britlith Auto Ltd may provide website hosting, technical support, logistics coordination or administrative services in relation to the website, but is not the seller of Driven By Gabi merchandise.

For further information, please see ONLINE SHOP TERMS, DELIVERY, RETURNS AND COMPLAINTS.

3. Personal information we may collect

Depending on how you interact with us, we may collect:

Identity and contact information

  • name;
  • postal and delivery address;
  • billing address;
  • email address;
  • telephone number; and
  • social-media username or profile information where you contact us through social media.

Order and transaction information

  • products and services purchased;
  • order number;
  • payment status;
  • transaction reference;
  • refunds and returns;
  • delivery and tracking information;
  • discount codes used; and
  • correspondence concerning an order.

We do not normally receive or retain your complete payment-card number. Payments may be processed securely by independent payment providers.

Vehicle and workshop information

  • vehicle registration number;
  • make, model, year, mileage and vehicle identification information;
  • service, repair, inspection and diagnostic information;
  • photographs of a vehicle or its components;
  • warranty and parts information;
  • MOT-related information;
  • insurance details where relevant;
  • recovery or collection location; and
  • information required to provide a courtesy vehicle.

Where legally necessary, we may also request driving-licence details, proof of identity or other documents relevant to a vehicle transaction or courtesy-car arrangement.

Enquiry and communication information

  • information submitted through contact forms;
  • emails, letters and messages;
  • call notes;
  • customer-service enquiries;
  • complaints; and
  • feedback or reviews.

Account information

Where customer accounts are available, we may collect:

  • account username;
  • encrypted password information;
  • order history;
  • saved addresses; and
  • account preferences.

Website and device information

We may collect:

  • IP address;
  • browser type and version;
  • device type;
  • operating system;
  • time zone;
  • website pages visited;
  • referring website;
  • links clicked;
  • session and shopping-basket information;
  • cookie identifiers; and
  • information about how you use the website.

Marketing preferences

We may record:

  • whether you have agreed to receive marketing;
  • the type of communications selected;
  • when and how consent was obtained; and
  • when you unsubscribe or change your preferences.

CCTV

CCTV may operate at our business premises for safety, security, crime prevention and protection of people, vehicles and property.

Appropriate notices should be displayed where CCTV is in operation.

4. How we collect information

We may collect information:

  • directly from you;
  • when you place an order;
  • when you contact or visit us;
  • when you create an account;
  • when you subscribe to marketing;
  • when you use our website;
  • from payment, delivery and technology providers;
  • from vehicle-information or history services;
  • from insurers, warranty providers or finance-related organisations where relevant;
  • from publicly accessible sources;
  • from social-media platforms; and
  • from cookies and similar technologies.

5. How and why we use personal information

UK data-protection law requires us to have a lawful basis for using personal information.

To process merchandise orders

We use identity, contact, order, payment-status and delivery information to:

  • accept and process orders;
  • arrange payment;
  • deliver products;
  • send order updates;
  • administer returns, refunds and exchanges;
  • prevent fraud; and
  • provide customer support.

Our lawful bases are performance of a contract, compliance with legal obligations and our legitimate interests in operating and protecting our business.

To provide workshop, recovery and vehicle-related services

We use customer and vehicle information to:

  • provide estimates and quotations;
  • diagnose faults;
  • perform requested work;
  • order parts;
  • arrange MOT tests or recovery;
  • maintain service records;
  • provide courtesy vehicles;
  • manage warranties;
  • communicate about work;
  • issue invoices; and
  • deal with complaints.

Our lawful bases are performance of a contract, taking steps at your request before entering into a contract, compliance with legal obligations and our legitimate interests.

To sell vehicles

We may use personal information to:

  • respond to vehicle enquiries;
  • arrange viewings and test drives;
  • verify identity where appropriate;
  • process purchases, deposits and part exchanges;
  • complete required records;
  • manage warranties and aftersales matters; and
  • prevent fraud.

Our lawful bases are performance of a contract, taking steps before entering into a contract, legal obligation and legitimate interests.

Where a third-party finance provider is involved, that provider will normally use your information under its own privacy notice.

To communicate with you

We use your contact details and correspondence to answer enquiries, administer bookings, provide updates and resolve complaints.

Our lawful bases are contract and legitimate interests.

To operate and secure our website

We use technical and usage information to:

  • keep the website functioning;
  • remember basket contents;
  • maintain account sessions;
  • detect and prevent abuse;
  • troubleshoot technical problems;
  • understand website performance; and
  • improve our content and services.

Our lawful bases are legitimate interests, legal obligation and consent where consent is required for non-essential cookies.

To comply with legal and regulatory duties

We may use and retain information to:

  • comply with accounting and tax obligations;
  • respond to legal claims;
  • fulfil consumer-law duties;
  • maintain business records;
  • assist law-enforcement or regulatory authorities where legally required; and
  • protect our legal rights.

Our lawful basis is compliance with legal obligations and, where applicable, legitimate interests.

To send marketing

With your consent where required, we may send news, offers, merchandise-drop announcements and information about our services.

We may also send limited marketing about similar products or services to existing customers where the law permits and where an unsubscribe option is provided.

You may unsubscribe at any time by using the link in a marketing message or contacting contact@britlith.co.uk.

Our lawful bases are consent or legitimate interests, as applicable.

6. Legitimate interests

Where we rely on legitimate interests, those interests may include:

  • operating and improving our business;
  • communicating with customers;
  • protecting customers, staff, property and systems;
  • preventing fraud;
  • maintaining appropriate records;
  • recovering debts;
  • handling legal claims; and
  • marketing related products and services where permitted.

We consider whether our interests are necessary and whether they are overridden by your rights and freedoms.

7. When we may share your information

We may share relevant personal information with trusted third parties, including:

  • website-hosting and technical-support providers;
  • ecommerce and website-platform providers;
  • payment processors;
  • banks and payment networks;
  • delivery and courier companies;
  • email and communications providers;
  • analytics and cookie-consent providers;
  • parts suppliers;
  • MOT testing stations;
  • recovery providers;
  • warranty and insurance providers;
  • professional advisers, including accountants, solicitors and insurers;
  • debt-recovery providers;
  • government departments, courts, regulators, police or enforcement authorities where legally required; and
  • prospective purchasers or advisers involved in a business sale, merger or restructuring.

Third parties may act as processors operating under our instructions or as independent controllers with their own privacy obligations.

We do not sell personal information to advertisers or data brokers.

8. Payment processing

Payments made through the website are processed by the payment method selected at checkout.

The payment provider may collect payment-card, account, fraud-prevention and transaction information under its own privacy notice.

We normally receive confirmation of payment, limited transaction details and a payment reference rather than your full card information.

9. International transfers

Some service providers may store or access personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure that an appropriate legal safeguard is used, such as:

  • UK adequacy regulations;
  • the UK International Data Transfer Agreement;
  • the UK Addendum to approved standard contractual clauses; or
  • another safeguard permitted by data-protection law.

You may contact us for further information about safeguards relevant to your information.

10. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, accounting, warranty and dispute-resolution requirements.

Indicative retention periods are:

  • order, sales, invoice and accounting records: normally six years after the end of the relevant financial year or transaction;
  • workshop and vehicle-service records: normally up to six years after the customer relationship or relevant work;
  • vehicle-sale and warranty records: normally up to six years after the sale or end of the warranty;
  • unsuccessful general enquiries: normally up to 12 months;
  • customer-service and complaint correspondence: normally up to six years where needed to establish or defend legal claims;
  • customer account information: while the account is active and for a reasonable period afterwards;
  • marketing records and consent evidence: while marketing continues and for a reasonable suppression period after you unsubscribe;
  • CCTV: normally retained for a limited period, commonly up to 30 days, unless needed to investigate an incident or legal claim;
  • cookie information: for the period stated in our cookie settings or cookie table.

We may retain information for longer where a dispute, investigation, legal hold or statutory obligation requires it.

11. Keeping information secure

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include access controls, passwords, encryption where appropriate, backups, software updates, staff controls and secure third-party services.

No internet transmission or storage system can be guaranteed to be completely secure.

12. Your data-protection rights

Depending on the circumstances, you may have the right to:

  • be informed about how your information is used;
  • request access to your personal information;
  • ask us to correct inaccurate or incomplete information;
  • ask us to erase information;
  • ask us to restrict how information is used;
  • object to processing based on legitimate interests;
  • object to direct marketing;
  • receive certain information in a portable format;
  • withdraw consent at any time where processing is based on consent; and
  • challenge certain decisions made solely by automated means.

These rights are subject to legal conditions and exemptions.

To exercise a right, email contact@britlith.co.uk. We may request information to verify your identity.

We will normally respond within one month, although the law permits additional time for particularly complex or numerous requests.

You will not usually be charged, but a reasonable fee may be permitted where a request is manifestly unfounded, excessive or repetitive.

13. Marketing preferences

You may stop receiving marketing at any time by:

  • clicking the unsubscribe link in an email;
  • changing available account preferences; or
  • emailing contact@britlith.co.uk.

Unsubscribing from marketing will not stop necessary messages concerning an order, booking, vehicle, service, safety issue or legal matter.

We may retain limited information on a suppression list so that we can honour your request not to receive marketing.

14. Children

Our website and products are not directed at children under 13, and we do not knowingly collect their personal information through the website.

Orders must be placed by a person aged 18 or over.

If you believe a child has supplied personal information to us, please contact us.

15. Complaints about our use of personal information

Please contact us first so we can try to resolve your concern:

Email: contact@britlith.co.uk

Post:

Britlith Auto Ltd
Unit 1, Saffrons Cross
Hereford
HR1 3LE

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

16. Cookies and similar technologies

Cookies are small text files stored on your device when you visit a website.

We may also use similar technologies, such as local storage, pixels, tags or scripts.

Cookies may be set directly by us or by third-party services used on the website.

17. Types of cookies we may use

Strictly necessary cookies

These cookies are required for the website to work properly.

They may be used to:

  • maintain website security;
  • remember shopping-basket contents;
  • process checkout steps;
  • maintain account logins;
  • remember cookie choices;
  • prevent fraud; and
  • balance website traffic.

These cookies do not normally require consent because the requested website or ecommerce service could not function properly without them.

Preference cookies

These remember choices such as language, region, display preference or other website settings.

Where these are not strictly necessary, they will be used only with consent.

Analytics cookies

These help us understand how visitors use the website, including which pages are visited and whether errors occur.

Where required by law, analytics cookies will be disabled until you consent.

Marketing cookies

These may be used to measure advertising, build an understanding of visitor interests or show relevant advertising on other platforms.

They will not be placed unless the required consent has been obtained.

Embedded-content and social-media cookies

Pages may include content or links from platforms such as Instagram, Facebook, TikTok, Threads, YouTube or similar services.

Those providers may place cookies or collect technical information when embedded content is loaded or used.

Where required, embedded content will remain blocked until you consent.

Payment and fraud-prevention cookies

Payment providers may use cookies or similar technologies to process payments securely and prevent fraud.

Some may be strictly necessary for a payment method you choose. Others may require consent depending on their purpose.

18. Cookie table

The website should display an up-to-date cookie list generated from a cookie scan or maintained within its cookie-consent tool.

The table should state, for each cookie:

  • cookie name;
  • provider;
  • purpose;
  • category;
  • expiry or duration; and
  • whether it is a first-party or third-party cookie.

Because cookies can change when plugins, payment methods, analytics or embedded content are updated, the live cookie table or consent panel forms part of this policy.

19. Managing cookies

When you first visit the website, you should be offered clear options to:

  • accept all optional cookies;
  • reject non-essential cookies; or
  • manage individual cookie categories.

You can change or withdraw your cookie consent at any time through the cookie-settings link displayed on the website.

You may also block or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent the basket, checkout, account or other parts of the website from functioning properly.

Withdrawing consent does not make earlier processing unlawful.

20. Do Not Track settings

Some browsers offer a “Do Not Track” setting. There is no single universally accepted standard for how websites must respond to these signals.

Please use our cookie-preference controls to manage optional cookies.

21. External links

Our website may link to third-party websites and social-media platforms.

Those services control their own processing activities. Please review their privacy and cookie information before providing personal information or using their services.

22. Changes to this policy

We may update this policy to reflect changes in our website, services, providers or legal obligations.

The latest version will be published on this page with an updated date.

Significant changes may also be highlighted on the website or communicated directly where appropriate.

23. Contact us

For questions about privacy, cookies or your rights, contact:

Britlith Auto Ltd
Unit 1, Saffrons Cross
Hereford
HR1 3LE

Email: contact@britlith.co.uk
Telephone: 01432 620221