Effective 16 August 2026
Privacy Policy
H Empsall Automotive · United Kingdom1. Who is responsible
Harry Empsall trading as H Empsall Automotive is the data controller for information collected through this website. Privacy requests can be sent to hempsallautomotive@outlook.com.
2. Information collected
Depending on the service used, we may collect contact details, vehicle sourcing or research requirements, advert links, registration or VIN details supplied for research, buyer or representative status, budget and readiness information, seller and vehicle details, provenance material, redacted proof of funds, mandates, letters of intent, communications, follow-up dates, introductions, fee records, invoices and consent records. We do not ask for full bank statements, passports or payment-card information in the initial buyer application.
3. Why information is used
Information is used to respond to enquiries, assess genuine acquisition and sale requirements, verify counterparties, match privately submitted vehicles with active mandates, manage introductions, provide progress updates, administer invoices, protect against fraud and meet legal or accounting obligations. Matching scores are decision-support only: they do not automatically approve buyers or release vehicle information.
4. Lawful bases
We generally process information to take steps at your request or perform an agreed service, for legitimate interests in operating a secure and credible vehicle-sourcing and introduction service, and where necessary to comply with legal obligations. Optional private-market updates rely on consent, which can be withdrawn at any time. Legitimate-interest processing is balanced against your rights and reasonable expectations.
5. Confidentiality and sharing
Buyer identities, mandates, contact details, financial-readiness information and uploads are not published. Information is shared only where needed with authorised service providers for hosting, secure storage, authentication, email delivery and card-payment processing, or with a relevant counterparty after a manually approved introduction. FormSubmit may route a copy of submitted enquiry information to the business inbox; ChatGPT handles account sign-in and Stripe handles card payments. H Empsall Automotive does not receive account passwords or full card details.
6. Security
The site uses encrypted transmission. Buyer records are held behind administrator authentication. Private documents are stored in non-public object storage and delivered only through authorised, no-cache routes. Secure follow-up links are time-limited and single-use. No internet system can be guaranteed completely secure, so please follow every redaction notice and do not send unnecessary sensitive material.
7. Retention
Buyer applications are assigned a retention-review date, normally two years after registration or the most recent relevant interaction. Active mandates, live deals, contractual, tax and dispute records may be retained longer where necessary. Outdated verification documents should be removed once no longer needed. Rejected, inactive and expired records can be reviewed, anonymised or deleted through the administrator controls, subject to lawful record-keeping requirements.
8. Your rights
You may request access to your personal information, correction of inaccurate information, deletion where applicable, restriction or objection to certain processing, and withdrawal of marketing consent. You may also complain to the UK Information Commissioner’s Office. We may need to verify your identity before fulfilling a request.
9. International processing
Some technical service providers may process data outside the United Kingdom. Where this occurs, appropriate contractual or statutory safeguards are expected from the relevant provider. Vehicle introductions themselves may be international, but confidential buyer information is not released automatically.
10. Changes
This policy may be updated as the service or legal requirements change. The effective date above identifies the current version.