Legal

Privacy Policy

Last updated: 4 June 2026

1. Who we are

Sinclair Group ("we", "us", "our") is the data controller for personal data collected through the the event booking platform. You can contact our data protection representative at privacy@arriveanddrive.life.

2. What we collect

  • Identity & contact data: full name, email address, telephone number.
  • Driving licence data: licence number, issuing authority, dates of validity, address (collected at the event for vehicle handover).
  • Booking data: chosen vehicle, time slot, accompanying passenger details.
  • Technical data: IP address, browser type, device identifiers, and cookies necessary to operate the site.
  • Marketing preferences: consents you give for follow-up communications.

3. Lawful bases for processing

  • Contract (Art. 6(1)(b) UK/EU GDPR): to manage your booking and provide the test drive.
  • Legal obligation (Art. 6(1)(c)): to verify driving entitlement and meet insurance/road-traffic record-keeping requirements.
  • Legitimate interests (Art. 6(1)(f)): to secure the platform, prevent fraud and improve our service. Balancing tests are available on request.
  • Consent (Art. 6(1)(a)): for optional marketing communications. You can withdraw consent at any time.

4. How we share your data

We share personal data only with:

  • The participating manufacturer/brand whose vehicle you book (e.g. for insurance and warranty purposes).
  • Our IT processors (hosting, email delivery, analytics) under written GDPR-compliant data processing agreements.
  • Regulators, insurers, or law enforcement where legally required.

We do not sell personal data.

5. International transfers

Where personal data is transferred outside the UK/EEA, we rely on UK International Data Transfer Agreements or the EU Standard Contractual Clauses, together with supplementary technical and organisational measures.

6. Retention

  • Booking records: 24 months from the event date.
  • Driving licence verification logs: 7 years (insurance/road-traffic requirements).
  • Marketing data: until you withdraw consent or after 24 months of inactivity.

7. Your rights

Under UK GDPR and EU GDPR you have the right to:

  • Access, rectify or erase your personal data.
  • Restrict or object to processing.
  • Receive your data in a portable format.
  • Withdraw consent at any time without affecting prior lawful processing.
  • Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local EU supervisory authority.

To exercise any of these rights, email privacy@arriveanddrive.life.

8. Cookies

We use strictly necessary cookies for authentication and booking state, and (with your consent) analytics cookies to understand how the platform is used. You can manage cookies via your browser settings.

9. Security

Data is encrypted in transit (TLS) and at rest. Access is restricted on a need-to-know basis and audited. We notify affected individuals and regulators of any qualifying breach within 72 hours.

10. Changes

We may update this policy from time to time. Material changes will be notified by email or via a prominent notice on the platform.

© 2026 Sinclair Group. All rights reserved.