Privacy notice

Who we are

Direct Vehicle Lease is the data controller for the information described here. If you have a question about this notice, or want to exercise any of the rights below, contact us using the details on the contact page.

What we collect

The information we hold depends on how far you go with us.

• Browsing the site: pages viewed, approximate location from your IP address, and analytics identifiers where you have accepted them.
• Making an enquiry: your name, email, phone number, postcode and the quote you built.
• Creating an account: the above, plus a hashed password and, if you turn it on, a two-factor secret.
• Applying to hire: date of birth, address history, employment and income details, bank account name, and documents you upload as proof.

Why we use it, and our lawful basis

We use enquiry details to answer your enquiry, which is necessary to take steps at your request before entering a contract. We use application details to assess whether the hire is affordable for you and to prepare your hire agreement, on the same basis and to meet our own legal and regulatory obligations.

We use analytics and marketing emails only with your consent, and you can withdraw that at any time without affecting anything else.

Who we share it with

We do not pass your application to third-party lenders or finance providers — we supply the vehicle ourselves, so your details stay with us. We do not carry out a credit search and nothing we do is recorded on your credit file. We may use an identity or fraud-prevention check to confirm you are who you say you are.

We also use service providers who process data on our behalf: hosting, database, file storage, email delivery, payment processing and analytics. They act only on our instructions.

How long we keep it

Enquiries that do not convert are deleted after two years. Application and agreement records are kept for six years after the end of the contract, which is the period we are required to hold financial records for. Uploaded identity documents are deleted once the agreement completes or the application is declined.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of the personal data we hold about you
• correct anything inaccurate
• delete data where we no longer have a reason to keep it
• restrict or object to certain processing
• provide your data in a portable format
• withdraw consent for marketing or analytics at any time

Complaints

If you are unhappy with how we have handled your information, tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.