Privacy Policy

1. Introduction

Welcome to Paper Thatch. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, which focuses on identifying common mistakes in car credit purchases and strategies for reducing transport-related expenditures.

This policy is drafted in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the Privacy and Electronic Communications Regulations (PECR).

2. Data Controller

For the purpose of the UK GDPR, the data controller is Paper Thatch. We are responsible for deciding how we hold and use personal information about you.

If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact us using the details provided in the "Contact Us" section.

3. Information We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data: includes first name, last name, or similar identifier.
• Contact Data: includes email address and telephone numbers.
• Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
• Usage Data: includes information about how you use our website, products, and services, particularly your interaction with our car finance calculators and educational content.
• Marketing and Communications Data: includes your preferences in receiving marketing from us and our third parties and your communication preferences.

4. Legal Basis for Processing

Under the UK GDPR, we must have a valid legal basis to process your personal data. We rely on the following:

• Consent: Where you have given us clear consent for us to process your personal data for a specific purpose (e.g., subscribing to our newsletter).
• Contract: Where processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
• Legal Obligation: Where processing is necessary for us to comply with the law (not including contractual obligations).
• Legitimate Interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those interests (e.g., improving our car finance advice tools).

5. How We Use Your Data

We use your data to provide you with the best possible experience and information regarding automotive financial literacy. Specifically:

• To provide information on avoiding car credit traps and optimizing transport costs.
• To manage our relationship with you, including notifying you about changes to our terms or privacy policy.
• To use data analytics to improve our website, services, marketing, and customer experiences.
• To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.

6. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, and the applicable legal requirements.

7. International Transfers

Paper Thatch is based in London, UK. However, we may share your personal data within our group or with external third parties who may be based outside the UK. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• Transferring data to countries that have been deemed to provide an adequate level of protection for personal data.
• Using specific contracts approved for use in the UK which give personal data the same protection it has in the UK (Standard Contractual Clauses).

8. Your Statutory Rights

Under UK data protection laws, you have rights including:

• Right of access: You have the right to ask us for copies of your personal information.
• Right to rectification: You have the right to ask us to rectify personal information you think is inaccurate.
• Right to erasure: You have the right to ask us to erase your personal information in certain circumstances.
• Right to restriction of processing: You have the right to ask us to restrict the processing of your personal information.
• Right to object to processing: You have the right to object to the processing of your personal information.
• Right to data portability: You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.

If you wish to exercise any of these rights, please contact us. You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

9. Cookies & Tracking

Our website uses cookies to distinguish you from other users. This helps us to provide you with a good experience when you browse our site and also allows us to improve our site. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. For more details, please see our Cookie Policy.

10. Contact Us