GDPR

Dealix is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains your rights and how we support compliance for our dealership customers.

1. Our role

For account and billing data, Dealix is the data controller. For customer, lead and vehicle data that dealerships upload or collect through the Service, Dealix acts as a data processor, and the dealership is the data controller responsible for the lawful basis for that processing.

2. Your rights

Under UK GDPR, individuals have the right to:

• Access the personal data we hold about them
• Request correction of inaccurate data
• Request erasure of their data, subject to legal or contractual exceptions
• Request a copy of their data in a portable format
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

To exercise any of these rights in relation to a Dealix account, contact privacy@dealix.co.uk. If your enquiry relates to a specific dealership's customer records, we may direct you to that dealership as the data controller.

3. Data processing agreement

Dealership customers who need a Data Processing Agreement (DPA) covering our processing of their customer data can request one from privacy@dealix.co.uk.

4. International transfers

Where any of our sub-processors store or process data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses, in line with UK GDPR requirements.

5. Complaints

If you believe your data has been mishandled, you can raise this with us directly, or lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.