PRIVACY POLICY
JAGUAR LAND ROVER CORPORATE WEBSITE PRIVACY POLICY
1. WHAT YOU CAN EXPECT TO SEE FROM READING THIS PRIVACY POLICY
2. DATA PROTECTION – WHAT YOU SHOULD KNOW WHEN USING OUR WEBSITES
1. WHO WE ARE AND WHICH WEBSITES ARE COVERED BY THIS PRIVACY POLICY
Who We Are: When we refer to ‘Jaguar Land Rover’, ‘JLR’ ‘we’ ‘our’ or ‘us’ in this Privacy Policy, we refer to: Jaguar Land Rover Automotive PLC, whose registered office is at: Abbey Road, Whitley, Coventry CV3 4LF, and whose registered number is: 1672070.
If you want to find out more about the Jaguar Land Rover group, please have a look at the “Tell me more” box below.
What this Privacy Policy covers: This Privacy Policy covers the identified UK websites, that are set out in the Annex at the end and the other sources of data set out in Section 2. To be transparent, when you visit a JLR website not covered by this Privacy Policy, these may be controlled by other JLR group entities, or by a third party acting on our group’s behalf. We encourage you to check the Privacy Policy link at the bottom of the website you are visiting to see its privacy policy terms. How we are regulated: For UK data protection legislation purposes, Jaguar Land Rover Automotive PLC is registered with the Information Commissioner’s Office under registration number ZA020510.
Customer Relationship Centre contact details: If you would like to get in touch on a website related query, Jaguar Land Rover Customer Relationship Centre contact details are accessible from these web pages:
Queries in relation to Jaguar: https://www.jaguar.co.uk/contact‑us/index.html
Queries in relation to Land Rover: https://www.landrover.co.uk/contact‑us.html
Queries in relation to any purchases made from the Jaguar store: https://shop.jaguar.com/uk/contact/
Queries in relation to any purchases made from the Land Rover store: https://shop.landrover.com/uk/contact/
Queries in relation to our recording of data on public roads: please use the email addresses in Section 5.
TELL ME MORE about the Jaguar Land Rover Group
Jaguar Land Rover is part of a group of companies whose parent company is Jaguar Land Rover Automotive plc. You can find out more corporate information about Jaguar Land Rover on our website at: https://www.jaguarlandrover.com/.
Jaguar Land Rover is part of the Tata group. More information about the Tata group and the Tata companies can be found here: http://www.tata.com/aboutus/sub_index/Leadership‑with‑trust and http://www.tata.com/company/index/Tata‑companies
2. WHAT INFORMATION WE COLLECT FROM OUR WEBSITES AND WHAT INFORMATION WE RECEIVE FROM OTHER SOURCES.
Our websites serve primarily as information portals to help you better understand our cars, products and services. We also, however, offer a number of website functions that collect information you provide to us when you ask to be kept informed, to be added to lists, events or experiences, or when you buy goods or book or request services. The main ways we collect information from our websites:
When you visit, or use and interact with our websites, for example to take steps to request or use any of our online‑available services (including but not limited to website shops, or our experiences), where you find out more about an event or experience or where you request any other information;
When you enter into personalised web areas and use our websites as a way to engage with us, as a place where you can ask for personalised reminders, receive information about your vehicle, and/or request vehicle service or other information to be notified to you;
When you provide information to or interact with any of Jaguar Land Rover careers pages;
When you contact us (via contact details or forms made available on our websites), or send us correspondence. Click on the “Tell me more” box to find out more about the data we may receive from you directly.
Information may also be received from other sources. For example:
Vehicle related data from independent third party sources: When you own a Jaguar Land Rover vehicle, information connected with you and your vehicle (including the vehicle identification number or VIN) may be shared as is appropriate between our network of retailers, repairers, importers, credit providers and credit hire product providers, and used to inform any personalised web areas you register to receive. The information that is shared will depend on factors like who you have bought your vehicle from and the services that you request from us throughout the period of your vehicle ownership. Please visit Section 4 (Who we share personal data with) below to find out more. Please also visit our separate InControl terms and privacy policies (here for Jaguar: https://incontrol.jaguar.com and here for Land Rover: https://incontrol.landrover.com) for more information on vehicle data.
Third party support services: For the performance of our website services and to allow us to maintain appropriate records and to support ongoing queries, we may receive data about you or your website activities from our group companies or third party providers (e.g. to confirm website payments, to track website order deliveries, to appropriately update our data records and to support website maintenance). More information on our categories of suppliers is provided at Section 4 (Who we share personal data with) below.
Device data: Our websites automatically take certain device information in order to optimise your website experience (for example, allowing our website to automatically adapt screen size as appropriate for the device you are using to browse the website). This data also supports our website analytics. More information on automated data collection and cookies can be found in our Cookies policy, available via this link.
Marketing data: Your contact details, marketing preferences or other information may be shared with us by retailers or other third parties partners, where there is appropriate notice and in compliance with applicable data protection laws. You have the right to ask us not to use your personal data for marketing purposes. Please see your data protection rights at Section 7 (Your data protection rights) below for further information on these.
Public sources of data: We may use public sources of data, for example, to support website functionality (e.g. to support authentication or fraud checks), and/or to maintain the accuracy of the data we hold. For example, we may make checks from time to time with the DVLA to check our vehicle owner information remains up to date.
Data recorded on public roads: we may record, log and store information captured in public areas (i.e. driving on public roads) in the form of video data as part of our ongoing research and development initiatives. This privacy policy details how we use, store and safeguard any data we collect as part of these initiatives. For more details, see the tell me more section below.
TELL ME MORE about the personal data Jaguar Land Rover may receive direct ...
For websites…
We receive information you provide to us in your use of our websites, for example, when you add information to online forms or to data fields on our websites. We may also receive information from you by other online means, for example, if you comment on our social media pages. This will be the information that is visible to you, and may include your name, occupation, contact information (e.g. email, postal address and phone/mobile number), credit card/payment details, driving licence details, vehicle data and general information you decide to share such as your experience with Jaguar Land Rover products and services.
For data recorded on public roads…
JLR may record, log and store information captured in public areas (i.e. driving on public roads) in the form of video data for the following purposes:
To facilitate the research and development of advanced driver‑assistance systems (ADAS).
To benefit from a large and diverse data set which is representative of real‑world scenarios.
To test and validate technology on production features where we required for by law and for New Car Approval (NCAP) safety features.
For details on our NVIDIA test drive actIvity click HERE
The data recorded on public roads during logging runs consists of multi‑modal sensory data, such as data from Camera, RAdio Detection And Ranging (RADAR), Light Detection And Ranging (LiDAR) and Global Positioning System (GPS) sensors. Whilst the purpose of the data collection is not to process or analyse the personal data of individuals, we acknowledge that its collection may be incidental in the following scenarios:
‑ Likeness of individuals who are within the camera field of view during operation.
‑ Vehicle license plates that are within the camera field of view during operation.
All our vehicles equipped to record this data are identified with a sticker/sign on sides. (example pic). Due to scheduling of work on a day to day basis and the specification of the equipment we use, a vehicle may have a sticker/sign on it but there may not be a camera fitted that day or the camera is not recording. No external indication of data recording is displayed as it could cause individuals to change how they behave on the public roads, negating the purposes of the data collection. Data gathered in logging activities is unreadable without specialist knowledge at point of collection and stored on secure servers.
3. HOW WE USE YOUR PERSONAL DATA.
We use personal data to manage and meet service and information requests, to understand service, vehicle and website use, and to make our products and services (including our web services) as effective as possible. For more information on our processing, and the legal grounds that are relevant, please see the “Tell me more” box below.
TELL ME MORE ...
The main uses of your personal data and the legal grounds we rely on for these are:
Activity:
Applicable Legal grounds:
Maintaining and supporting website use
Where you use an online service governed by our provided online Terms and Conditions (for example, purchases from the online stores, or entering into prize draws and competitions), we and our permitted third parties will process data in a number of ways that support our website services. For example, this may include the following activities: identity confirmation, any fraud and authentication checks, service delivery, administration of prize draws, competitions, membership offers, surveys and other promotional activities, any applicable payment processes and collections activities, customer support and any ongoing service communications. We may also seek to improve our services, using user experiences to strengthen our internal processes, and our Retail Network interactions. For example, we send customer satisfaction surveys (or use third parties to send these on our behalf). We will also let you know when you call us (our Customer Relationship Centre numbers are available from our websites) that our calls may be recorded to support training, audit and quality purposes).
Necessary for contract
Legitimate Interests in running effective website services, and use of customer satisfaction surveys to support and improve our services.
Where personal data is required for entering into a contract, we will identify to you where information is mandatory. The consequences of not providing this information may include being unable to proceed with the requested service.
Managing your requests
We will process data in managing your requests made on or via our websites (e.g. where you request a brochure, sign up to ‘keep me informed’ or add your details into any other website data form or data field). We will also process data in providing and maintaining personalised website experiences.
Legitimate Interests in running effective website services.
Enhancing website experience
Where we pre‑fill website data fields to enhance and streamline your online experience.
Legitimate Interests in enhancing, simplifying and streamlining website experiences.
Internal research and development
We will process data, including data recorded on public roads, for internal research, development, analytics, analysis and reporting purposes, e.g. to monitor current vehicle performance, predict trends or performance, develop new functions, products and services, or to evidence compliance with regulatory requirements.
Legitimate Interests in assessing and improving performance, managing compliance, monitoring trends and developing new products.
Marketing activities and research and analytics
We will obtain your consent where required for marketing communications to be sent to you using electronic means (e.g. email, text etc.), and may share your details for electronic marketing communications with our network of independent third parties, where you give consent for this to happen. We will also comply with cookie obligations where we use cookies on our website.
Other marketing activities will happen assessed on the Legitimate Interests ground. e.g. where we tailor marketing communications or send targeted marketing messages via post, phone or social media and other third party platforms; and in providing existing customers with information (via email or other channels) about similar products and services. In order to improve the services we offer via our websites, we may ask you to participate in research from time to time. It is entirely up to you whether you choose to do so.
We will use profiling, including segmentation tools and carry out research and analytics activities to inform our marketing strategies, to create a better understanding of our customers and visitors; and use of our websites, to support our website advertising, and to better improve the website information, functionality and the services we provide.
Consent
Note: Where we collect your personal data with consent, you may withdraw your consent for us to use your information in any of these ways at any time. Please see Withdrawing your consent in Section 7 below for further details. (This right does not effect the lawfulness of processing that was based on that consent before its withdrawal.)
Legitimate Interests for direct marketing purposes
Legitimate Interests for internal analytics and profiling, service awareness and service improvement.
Records maintenance and general administration
To maintain, cleanse and update our records, administer and maintain our websites, support your queries and any other internal operations and administrative purposes (for example, this will include troubleshooting, testing, supporting our audit requirements and in responding to any enquiries you may make, including any data protection rights you raise).
Legitimate Interests in maintaining appropriate websites, records and service administration
Network and information security
To maintain our network and information security in order for us to take steps to protect your information against loss or damage, theft or unauthorised access. And to maintain appropriate server locations (for example, we may work with third parties to support appropriate use of cloud services).
Legitimate Interests as appropriate for ensuring network and information security
Corporate acquisitions and disposals
Any data processed as is necessary in the context of corporate acquisitions or disposals
Legitimate business Interests Legal Obligation
Management of legal and regulatory requirements
To manage legal and regulatory requests and requirements, meet or defend legal rights or for the prevention/detection of crime, (including where required to assist HMRC, law enforcement agencies such as the Police, the Driver and Vehicle Licensing Agency (DVLA) or any other public authority or criminal investigation body, or for the safeguarding of national security).
Legitimate Interests in complying with law and regulation, including responding to regulators Legal Obligation
Service communications
In the event we communicate to you an urgent safety or product recall notices.
Vital interests
Legal Obligation
CCTV
Images are monitored and recorded at our premises for the purposes of employee and public safety; process compliance and for the prevention, detection and investigation of crime and other incidents In the event we communicate to you an urgent safety or product recall notices.
Legitimate Business Interests
Legal Obligation
4. WHO WE SHARE PERSONAL DATA WITH.
We may share your personal data with:
Those third parties who need to process it so we can provide to you the products, services you have signed up to or requested or to further our research and development initiatives, for example, to provide or offer finance or credit, insurance, to provide marketing and advertising support services and for optimised website services and products.
With our network of retailers, authorised repairers and where relevant our importers network (together our “retail network”), so as to be able to fulfil requests for goods, services, etc, and for assessment and training, to be able to enhance the quality of the services you obtain when interacting with our Retail Network.
Jaguar Land Rover group companies in line with the data uses set out in this Privacy Policy.
Third parties in the event we sell or buy any business or assets.
If we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligation or requests, or in order to enforce these terms or to investigate actual or suspected breaches.
We have safeguards in place with our service providers to ensure that your data is kept securely and used in accordance with the purposes set out in this Privacy Policy.
TELL ME MORE about Jaguar Land Rover's network of Independent Third Parties ...
We work with a number of independent third parties to provide services, such as our Retail Network, credit product providers, contract hire products. Personal data may be sent directly to these entities by you (for example if you contact them by phone or email or via their website pages), or we may share personal data with them where appropriate to support with your queries or other service requirements.
Where you use the UK websites to find or make contact with our Retail Network, a credit provider, or a contract hire product provider, these are (unless otherwise stated), independent businesses and not Jaguar Land Rover group companies. Any contact you make to them (for example, to call or send an email) and any data you provide to them in use of their websites, will be controlled by them, not by Jaguar Land Rover. If you have questions regarding a third party’s (such as a retailer, importer, credit provider, contract hire product provider or repairer's) use of your personal data, we recommend you contact those parties directly.
For information on independent third parties we work with:
For Jaguar:
Our Retail Network is generally identifiable from the ‘locate a retailer’ website functionality. They can be searched for by name, location or postcode. A full list of all UK Retailers is accessible by clicking here.
In the UK, credit is provided by Black Horse Limited trading as Jaguar Financial Services, St William House, Tresillian Terrace, Cardiff CF10 5BH.
For Land Rover:
Our Retail Network is generally identifiable from the ‘locate a retailer’ website functionality. They can be searched for by name, location or postcode. A full list of all UK Retailers is accessible by clicking here.
Credit products are provided by Black Horse Limited trading as Land Rover Financial Services, St William House, Tresillian Terrace, Cardiff CF10 5BH.
Contract Hire products are provided by Lex Autolease Limited trading as Land Rover Contract Hire, Heathside Park, Heathside Park Road, Stockport SK3 0RB.
For further information on our retailer systems privacy policy, please click here.
We use a number of service suppliers to support our business and these service providers may have access to our systems and data in order to provide services to us and on your behalf, for example payment processors, information technology such as hosting service providers, marketing and digital advertising support services, customer services and relationship handling, service and system specialists, website analytics support, online store shipping, delivery and support for events and experiences.
about Jaguar Land Rover Group companies, and how they may provide service support ...
As a member of the Tata Group of companies, we can benefit from the large IT infrastructure and expertise that exists within our wider corporate structure. This means that the personal data you provide to us may be accessed by members of our group of companies only as necessary for service and system maintenance and support, aggregate analytics, business continuity, IT and administrative purposes. For example where necessary to support particular website enquiries, or to provide technical support that maintains website functionality.
about Public bodies, law enforcement and regulators ...
From time to time, the police, other law enforcement agencies and regulators can request personal data, for example for the purposes of preventing or detecting crime, or apprehending or prosecuting offenders.
5. INFORMATION ABOUT INTERNATIONAL DATA TRANSFERS. The Jaguar Land Rover UK websites use servers which are hosted in the United Kingdom (UK) and the European Economic Area (EEA). However we may share the personal data described in this Privacy Policy with suppliers or group companies located outside of the UK or the EEA where this is necessary for the purposes described above. Where this happens, we apply safeguards to add to the data protections that apply to those data transfers. This includes an assessment of the adequacy of the third country in question, use of European Commission approved model contract terms where appropriate, and assessment of Privacy Shield certification for US located entities (where this is deemed as an adequate method of transfer).
TELL ME MORE about the adequacy checks Jaguar Land Rover puts in place for international data transfers …
Where Jaguar Land Rover chooses to share personal data with a third party located outside the UK or the EEA, the following factors are assessed to support adequate transfer of this data:
Internal checks to identify the existence or absence of any adequacy decision by the European Commission. We have group companies, and use suppliers located in countries that have been approved by the European Commission as having essentially equivalent data protection laws. A full list of these countries as at the date of this Privacy Policy is: Andorra, Argentina, Canada, Faroe Islands, Guernsey, Israel, Switzerland, Japan, Jersey, New Zealand, Uruguay and the Isle of Man. (The EU‑US Privacy Shield programme is described below). This list and information about the protections the European Commission has considered is available via this link.
Use of measures like European Commission approved measures to support adequate transfers of personal data. We also have group companies, and use suppliers located in countries that are elsewhere in the world. To manage data protection compliance with these transfers, we will use European Commission approved (or where applicable, UK approved) data transfer mechanisms such as use of model contractual clauses approved by the Commission. We will also assess where applicable where a supplier is able to demonstrate to us they have Binding Corporate Rules. (Binding Corporate Rules is a GDPR – recognised Data Protection mechanism to ensure adequate personal data transfers). We may work with suppliers who are able to demonstrate to us they are Privacy Shield certified (where this is deemed as an adequate method of transfer).
To understand the protections required in European Commission approved Model Clauses, a template copy of these is accessible from this location.
To see a full list of approved Binding Corporate Rules, please click this link.
A full list of Privacy Shield participants, and their Privacy Shield certification information is available from this website link.
HOW LONG WE HOLD PERSONAL DATA FOR. We will keep your personal data for as long as we need it to provide the products and services you have signed up to. We may also keep it to comply with our legal obligations, respond to queries and resolve any disputes, to meet our legitimate interests, including for our ongoing research and development initiatives, and to enforce our rights. The criteria we use to determine storage periods include the following: Information we have told you about storage periods on our website or in website terms and conditions. We will also use criteria such as applicable contractual provisions that are in force, legal statutory limitation periods, applicable regulatory requirements and industry standards.
YOUR DATA PROTECTION RIGHTS. You have rights in connection with your personal data that, with effect from the 25th May 2018 will include the following: to withdraw consent where you have given it, to be informed and have access to your personal data, to correct or complete inaccurate data, and in certain circumstances to restrict, request erasure, object to processing, or request portability of your personal data to another organisation.
We try to ensure that we deliver the best levels of customer service. if you do need or want to get in touch with us for any reason regarding your data protection rights, please get in touch, please contact us direct at this email address: DPOffice@jaguarlandrover.com. If you are not satisfied, you also have the right to complain to the Information Commissioner’s Office. To learn more about these data protection rights, see the “Tell me more”box below.
TELL ME MORE about my data subject rights ...
If you have given us consent to process your personal data, including for electronic marketing communications, you have the right to withdraw that consent at any time. Just use the unsubscribe options presented, for example, these are present in the email marketing communications sent by us.
You can ask for access to the personal data we hold about you, object to the processing, request that we correct any mistakes, restrict or stop processing or delete it. If you do ask us to delete or stop processing it, we will not always be required to do so. If this is the case, we will explain why. As explained above, data recorded on public roads is collected to provide a representation of real‑world driving scenarios. This means that in our systems individuals, vehicles and other objects are only identified in the general sense (e.g. as a 'pedestrian') the data is not gathered for, nor does JLR have any means of, identifying any given individual.
In certain circumstances you can ask us to provide you with your personal data in a usable electronic format and transmit it to a third party (right to data portability). This right only applies in certain circumstances. Where it does not apply, we will explain why.
about how I can get in touch with the Information Commissioner’s Office (ICO) …
The Information Commissioner’s Office (the ICO) is the supervisory authority that regulates personal data in the UK. You can get in touch with the ICO in any of the following ways:
By going to their website: www.ico.org.uk
By giving them a call on 0303 123 1113
or by writing to them. Their address is: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow SK9 5AF.
LINKS TO OTHER WEBSITES
Our website may contain links to other websites run by other organisations which we do not control. This policy does not apply to those other websites ‚ so we encourage you to read their privacy statements. We are not responsible for the privacy policies and practices of other websites and apps (even if you access them using links that we provide) and we provide links to those websites solely for your information and convenience. We specifically disclaim responsibility for their content, privacy practices and terms of use, and we make no endorsements, representations or promises about their accuracy, content or thoroughness.
KEEPING YOUR INFORMATION SECURE
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.
We require all of our services providers to have appropriate measures in place to maintain the security of your information.
Where we have given you (or where you have chosen) a password that enables you to access any personalised area in a Jaguar Land Rover website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted over the internet; any transmission is at your own risk. Your information will be kept in a secure environment protected by a combination of physical and technical measures such as encryption technologies or authentication systems to prevent any loss, misuse, alteration, disclosure, destruction, theft or unauthorised access.
Annex ‑ Which Jaguar Land Rover websites are covered under this Privacy Policy
This Privacy Policy covers those websites identified below. These are Jaguar Land Rover websites for which Jaguar Land Rover Automotive PLC is a data controller. Jaguar Land Rover is responsible for the processing any personal data you provide to us through these websites:
http://gear.landrover.com/gb/en/
http://www.usedvehicles.landrover.co.uk/
https://www.jaguarlandroverclassic.com
In this privacy policy we refer to these as ‘the UK Jaguar Land Rover website pages’ or our websites’.
For transparency this Privacy Policy does not cover all Jaguar Land Rover branded websites, and we would always encourage you to click the Privacy Policy link of the website you are visiting to see the privacy information that applies.
In particular, please be aware that the following websites have their own separate website terms and Privacy Policy and are currently not within the scope of this Privacy Policy.
The InControl Websites:
https://incontrol.landrover.com
These are websites for which Jaguar Land Rover Automotive PLC is also data controller, but they are governed by separate and different website terms and privacy policies.
The British Motor Museum Website: https://www.britishmotormuseum.co.uk/
The data controller for this website is not Jaguar Land Rover, but a separate entity in the Jaguar Land Rover group. This site has its own separate and different Privacy Policy.
Independent companies we do not control: Where you go from our websites to a third party, such as a retailer, repairer, importer, credit product provider, or contract hire product provider these are independent parties and not part of the Jaguar Land Rover group. This means Jaguar Land Rover will no longer control (and in some cases will not even see) the data you provide to third parties in these instances. Click on “Tell me more” in Section 4 (Who we share personal data with) above to find out more about this.
Websites we do not control: When you visit the following websites:
https://www.landroverinsurance.com/
https://www.jaguarcarinsurance.co.uk
http://compare.landrover.co.uk
companycartaxcomparator.landrover.co.uk
companycartaxcalculator.landrover.co.uk
please note, these fall outside the scope of this Privacy Policy, and will be covered by their own Privacy Policy terms.
For information about data collection on public roads in Hungarian, please visit ADATVÉDELMI IRÁNYELVEK