This guide is for the United Kingdom. It covers UK GDPR and the Data Protection Act 2018.
[SOLICITOR REVIEW: personal data the desk collects — account, offers, and the documents a car is presented with.] [SOLICITOR REVIEW: lawful bases and the purpose of each processing activity.] [SOLICITOR REVIEW: transfers outside the UK and the safeguards used.] [SOLICITOR REVIEW: retention periods and deletion.] [SOLICITOR REVIEW: individual rights and how a request is handled.] [SOLICITOR REVIEW: contact details and the data-protection contact, once the company record exists.]