Privacy Policy

Last updated: 2 July 2026

Draft. This page is placeholder text and has not been reviewed by a solicitor. Replace it with your finalised policy before relying on it in production.

This Privacy Policy explains how Dealix ("we", "us", "our") collects, uses and protects personal data when you use our website and CRM platform (the "Service"). We act as the data controller for account and billing data, and as a data processor for the customer, lead and vehicle data our dealership customers store in the Service on their own behalf.

1. Information we collect

Account details: name, email address, phone number, dealership name and role.
Billing information, processed by our payment provider — we do not store full card numbers.
Customer, lead and vehicle data that dealerships enter or import into the Service.
Message content sent or received via SMS and email integrations, stored to power the Inbox.
Usage data such as log-in times, pages visited and device/browser information.

2. How we use information

To provide, maintain and improve the Service.
To send account, billing and service-related communications.
To provide customer support and respond to enquiries.
To detect, prevent and address fraud, abuse and security issues.
To comply with our legal obligations.

3. Sharing your information

We share data with sub-processors who help us run the Service, including our database and authentication provider (Supabase), our email delivery provider (Resend), and our messaging provider (Twilio, for SMS). These providers only process data on our instructions and under contractual confidentiality and security obligations. We do not sell personal data to third parties.

4. Data retention

We retain account and customer data for as long as your account is active, and for a reasonable period afterwards to comply with legal, accounting and support obligations, after which it is deleted or anonymised.

5. Your rights

If you are in the UK or EU, you have the right to access, correct, export or request deletion of your personal data, and to object to or restrict certain processing. See our GDPR page for details on how to exercise these rights.

6. Security

We use industry-standard safeguards, including encryption in transit, role-based access controls and database-level row security, to protect personal data against unauthorised access, loss or misuse.

7. Contact us

Questions about this policy can be sent to privacy@dealix.co.uk.