This is the website of Whichdeal Limited, operating under the trading name of Dealerplus. Whichdeal Ltd is authorised and regulated by the Financial Conduct Authority under Registration number 456327. We are registered with the UK Information Commissioner’s Office (ICO) as a data controller under registration number Z8890305.
If you have any questions about how we collect, store or use your personal data, our contact details can be found under the ‘How to contact us’ section of this notice.
This section explains what personal data we may collect when you use our services. Personal Information is any information which we would reasonably expect to identify you as an individual. The application form highlights which information is mandatory for you to enter into a contract with us and failure to provide such information may result in your application being declined.
Data is also collected to reduce and identify fraud and protect your identification.
We collect information about you for several different activities as described below:
As part of assessing your application for credit, to confirm your identity, to prevent fraud and to prevent money laundering, we may;
If your application is declined by all of our available lenders, your personal data and information may be passed to a 3rd party lender for consideration for alternative financial products.
acknowledge your complaint with a copy of our complaints procedure and keep you updated as to the
progression of our investigation. We may, if appropriate and necessary, consult with third parties such as
dealerships, expert engineers or relevant lenders to collate correct information and obtain advice to enable us
to make informed decisions and to respond appropriately. Please see the list of third parties at the end of
this policy for further information.
When we share your personal data, we require those parties to keep it safe and they must not use your personal data for their own marketing purposes. We do not accept liability for the failure of data protection practices carried out by third parties of which we have no control. However, we shall inform you if we believe that a security breach may have occurred and if your data has been in anyway compromised
We will share your data with our affiliates for administering our business and maintaining our business relationships. These may include our advisors who provide compliance and legal advice and support our legal function.
We use service providers to enable us to carry out certain duties within the business such as email distribution companies, electronic signature processing, data storage and IT services.
Due to the nature of our comparison business, your details may be shared with third parties on applying for finance with us, as per our terms and conditions. Should you wish for your personal data to be removed, we will contact all third parties to also require that they also remove their data.
Upon making an application with us, we will assess whether we can assist. Should we be unable to provide our services, your data will be provided to a third party who will contact you to offer their services. Information as to the contact details are provided at the end of this policy.
prospective transaction to undertake identification checks on our behalf. The dealership may be required to utilise
video conferencing to confirm that you are the applicant of the agreement and to carry out enhanced money
laundering checks by way of obtaining and providing to us verification of your ID.
Following the completion of the soft search (see section 6.7). If your application is declined by all of our available
lenders, you may be considered for alternative loan options taking into consideration your circumstances. Those
third-party lenders may carry out further searches against you to access your credit score and to establish whether
they may be able to assist further. Details of the prospective lenders are available to you by contacting us by email
the business), the successor of the title of the business may use your personal data in the same way as adopted under the terms of this privacy notice.
information with third parties such our lawyers, enquiry agents, High Court Enforcement Agents and any other
relevant organisation including other lenders. We reserve the right to sell aged debts to debt recovery agencies.
Dealerplus is based in the UK, however information shared by us, may include third parties who are located within the UK or within the European Economic Area. Any information transferred to these locations are protected by the General Data Protection Regulation. Companies operating outside of the European Economic Area may not be protected by the same quality of legal protection. However, we will only transfer data if we are satisfied that compliance is met with applicable privacy laws and appropriate contracts are put in place and adhered to.
We use computer safeguards such as firewalls and data encryption, and we enforce physical access controls to our buildings and files to keep this data safe. We only authorise access to employees who need it to carry out their job responsibilities and we continuously screen employees after their appointment for any undisclosed criminal or financial implications.
We enforce physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personal data.
We carry out enhanced data protection procedures to verify your identity, before we share your personal data with you. This includes obtaining your consent to share the information with another person, whom you have previously given authorisation to speak on your behalf.
We will not reveal over the telephone or by email any banking or financial information when confirming an order or providing a refund.
Whilst we take appropriate technical and organisational measures to safeguard your personal data, we cannot guarantee the security of any personal data that you transfer over the internet to us.
In the unlikelihood that we become aware of a security breach involving your personal data, our dedicated Data Protection Team will be responsible for informing the Information Commissioner’s Office (ICO) and you as to the details of the breach. You will be notified of any breach which may give rise to any detriment to you and/or your personal data.
Upon making an application to us, you will have a choice to opt in to general marketing and market research (please see section 5.0). Your information will only be used upon receiving your explicit consent to use your information. You may receive this information by telephone, SMS, letter or email. All communications sent to you will give you information as to how you can unsubscribe from the marketing communications and electronic communications will include a link to enable you to opt out.
We will refer your personal information to third party companies, if we consider that there is a legitimate interest in doing so. Details of those companies are noted at the end of this policy. Marketing by third parties will be limited to activities specific to your needs.
10.1 Notwithstanding our investment into security and firewalls to protect your data and our website, it is still nevertheless not 100% guaranteed that any communication via email cannot be intercepted. On this basis, we cannot accept liability for any unauthorised or unintended access that is beyond our control.
Due to the nature of our business, our policy is not to actively market our products or services or encourage interaction with minors (i.e. with anyone under the age of 16). Anyone under this age may only use their site with parental consent. We do not knowingly collect data from anyone under the age of 16.
Parents/ Guardians should monitor and supervise their children’s internet usage and ensure parental controls and tools are in place.
You can also contact us directly over the phone on;
Tel: 0333 2224 070
Overseas: 0333 6000 290
When you call, ask to be put through to the Complaints department and a member of our team will connect you. Your complaint will be acknowledged within 5 working days of receipt. We'll then attempt to resolve the complaint as quickly as possible, liaising with you to keep you updated of the process throughout.
If you're still unhappy after we've resolved your complaint, you can then take it to the Financial Ombudsman Service (if 8 weeks has passed since the initial complaint).
The contact details for the Financial Ombudsman Service are as follows:
Tel: 0800 023 4 567
Overseas: 0300 123 9 123
Address: The Financial Ombudsman Service
London E14 9SR
You may also lodge your complaint with the Information Commissioner’s Office (ICO) if we have been unable to resolve the complaint to your satisfaction. The ICO may be contacted on 0303 123 1113 or https://ico.org.uk/concerns/.
Under the new data protection law starting in May 2018 we have several lawful reasons that we can use (or 'process') your personal information. One of the lawful reasons is called 'legitimate interests'. Broadly speaking Legitimate Interests means that we can process your personal information if:
So, what does this mean? When you provide your personal details to us we use your information for our legitimate business interests to provide you with information regarding car finance options in the market place and to sell and deliver vehicles across the UK. Before doing this, though, we will also carefully consider and balance any potential impact on you and your rights. We will process the personal information you have supplied to us to conduct and manage our business to enable us to give you the most appropriate marketing, information, service and products and provide the best and most secure experience. These are what we consider to be our 'Legitimate Interests'. We only use individual’s data in ways you would reasonably expect and will continue to monitor the safeguards that we have put in place to reduce any impact and if circumstances change.
14.1 Legitimate Interest Assessment - We have conducted a Legitimate Interest Assessment (LIA) and identified the
relevant legitimate interests that we rely on. Some typical examples of when we might use the approach are for;
14.2 Your interests - When we process your personal information for our legitimate interests, we will consider and
balance any potential impact on you and your rights under data protection and any other relevant law. Our
legitimate business interests do not automatically override your interests – we will not use your personal data for
activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise
required or permitted to by law).
Remember, you can change the way you hear from us or withdraw your permission for us to process your personal
details at any time by emailing: firstname.lastname@example.org
We are committed to protecting the rights and freedoms of our customers and to ensure that the processing of your data in kept safely and securely in accordance with all our legal obligations. We hold personal data about our employees, clients, suppliers and other individuals for a variety of business purposes.
Circumstances for retaining personal data
Length of time that we retain your data
You apply to us for a finance agreement which does not result in a transaction.
We will retain your data for a period of two years from the date the date that of your application or the cessation of your relationship with us.
General marketing is optional, and you can unsubscribe at any time.
Consent will be required to continue to market to you. You may remain on our marketing list indefinitely and until you unsubscribe.
Marketing in line with our legitimate interest statement.
We will continue to market to you for a period of two years from the date that you no longer are a customer, and/or your finance agreement comes to an end.
If we suspect any instances of fraud or money laundering, then we are obliged under regulation to retain your data.
We will retain your data for a period of 5 years for audit purposes.
If you enter into an agreement, then we will retain your data for a longer period.
Your data will be retained for 6 years from the end of the business relationship unless you do not object or unsubscribe to general marketing. In the latter case your personal data will be stored indefinitely until you unsubscribe or object to marketing.
Under the General Data Protection Regulations 2018 you have the right to
16.1 Be informed - The right to be informed encompasses our obligations to provide ‘fair processing of information’.
This privacy notice provides all information regarding how your data is stored.
16.2 The right of access - You have the right to access your personal data and supplementary information. You have the
right to see the personal data we hold about you. This is called a Subject Access Request.
16.3 The right to rectification - You have the right to have any incorrect or incomplete data to be rectified. Please
contact us should you require any amendments to be made to the data we store.
16.4 The right to erasure - The right to erasure is also known as ‘the right to be forgotten’. The broad principle
underpinning this right is to allow you to request the deletion or removal of personal data where there is no
compelling reason for its continued processing.
16.5 The right to restrict processing - You have a right to ‘block’ or suppress processing of personal data. When
processing is restricted, we are permitted to store the personal data, but not further process it.
16.6 The right to data portability - The right to data portability allows you to obtain and reuse your personal data for
your own purposes across different services. We will provide copies of your personal data in a machine-readable
format, for example, Excel or CSV.
16.7 The right to object - You may object to our processing of your personal data for direct marketing (including
16.8 The right not to be subject to automated decision making (including profiling). - You may opt out of any
automated decision making (including profiling) which we conduct. You can request to obtain human intervention
of any automated decisions, express your point of view or contest the automated decision (e.g. an automated
If you would like a copy of the personal data we hold about you, or would like to exercise your rights as detailed above, please write to:
Whichdeal Ltd t/a Dealerplus
There will be no charge for a copy of the information however we reserve the right to charge a reasonable fee or refuse to respond when a request is manifestly unfounded or excessive, particularly if it is repetitive. We may also charge a reasonable fee to comply with requests for further copies of the same information. Information will be sent to you at the latest and within one month of the date of receipt of the Subject Access Request. We may extend the period of compliance by a further two months where the request is complex or numerous and we shall keep you updated as to why the extension is necessary.
Our postal address is:
Our Freephone telephone number is: 0333 222 4070
Our email address is email@example.com