Malton Coachworks (“we”, “us”, “our”) is committed to protecting the privacy of everyone who contacts us, visits our website, or entrusts a vehicle to our care. This policy explains what personal information we collect, how we use and protect it, and the rights you have over your information.

Malton Coachworks is part of the Classic & Sportscar Family. In this policy, “the website” refers to maltoncoachworks.com.

For the purposes of UK data protection law, the data controller is Malton Coachworks Ltd, registered in England and Wales under company number
08852418, whose registered office is at Showfield Lane, Malton, YO17 6BT. We are registered with the Information Commissioner’s Office under registration number ZB053265.

We collect personal information in the following ways:

Information you provide to us. When you contact us through our website enquiry form, by email, by telephone, or in person, we may collect your name, contact details (such as your email address, telephone number, and postal address), details of your vehicle, and any other information you choose to share in your enquiry or during the course of work we carry out for you.

Vehicle and project information. Where you engage us to service, restore, repair, or store a vehicle, we keep records relating to that work, which may include vehicle identification details, photographs, condition notes, and related correspondence.

Information we collect automatically. When you visit our website, we may collect limited technical information such as your IP address, browser and device type, and details of how you use the site. This is collected through cookies and similar technologies — see section 6.

We use your personal information to:

• respond to your enquiries and provide quotations;
• carry out and manage work on your vehicle, including servicing, restoration, repair, and storage;
• keep you informed about the progress of work we are undertaking for you;
• maintain our business and customer records;
• send you updates or marketing communications where you have asked us to, or where we are otherwise permitted to do so (see section 4);
• operate, maintain, and improve our website; and
• meet our legal and regulatory obligations.

Our lawful bases. Under UK data protection law, we rely on the following lawful bases for processing your information:

Legal obligation — where we are required to process your information to comply with the law, such as retaining accounting records.

Contract — where we need to process your information to provide the services you have requested, or to take steps at your request before entering into a contract.

Legitimate interests — where processing is necessary for our legitimate interests in running and promoting our business, provided these are not overridden by your rights. This includes responding to enquiries, keeping records, and maintaining the security of our website.

Consent — where you have given us clear consent, for example to receive certain marketing communications or to allow non-essential cookies.

We will only send you marketing communications where you have consented to receive them, or where we are otherwise permitted to contact you under applicable law. You can ask us to stop sending marketing communications at any time by contacting us using the details in section 11, or by using the unsubscribe link included in our emails.

We do not sell your personal information. We may share it in the following limited circumstances:

where we are required to do so by law, or to establish, exercise, or defend our legal rights.

with other companies within the Classic & Sportscar Family, where necessary to provide our services to you;

with trusted service providers who support our business — for example, website hosting, IT services, and email or marketing platforms — who act on our instructions and are required to protect your information;

with specialist suppliers, subcontractors, or trade partners where this is necessary to carry out work on your vehicle;

with our professional advisers, such as accountants and legal advisers; and

Our website uses cookies and similar technologies to help it function correctly and to understand how visitors use the site. Essential cookies are necessary for the website to operate. Non-essential cookies — such as those used for analytics — are only set where you have given your consent.

You can manage your cookie preferences through the cookie banner on our website and through your browser settings. For more detail, please see our separate Cookie Policy.

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. While no method of transmission over the internet is entirely secure, we work to keep your information safe and to limit access to those who need it.

We operate CCTV at our premises for the security of our staff, visitors, and the vehicles in our care. Footage is recorded, held securely for a limited period, and accessed only where necessary — for example, in connection with a security or safety incident.

We keep your personal information only for as long as necessary for the purposes set out in this policy, including to meet any legal, accounting, or reporting requirements. Records relating to work carried out on your vehicle may be kept for a longer period, as they can form part of a vehicle’s history and may be relevant to future work or ownership. When information is no longer needed, we securely delete or dispose of it.

Under UK data protection law, you have rights over your personal information, including the right to:

• request access to the information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your information in certain circumstances;
• ask us to restrict or object to our processing of your information;
• request the transfer of your information in certain circumstances; and
• withdraw your consent at any time, where we rely on consent to process your information.

To exercise any of these rights, please contact us using the details in section 11. We may need to verify your identity before responding.

We may update this policy from time to time. Any changes will be published on this page with a revised “last updated” date.

If you have any questions about this policy, or wish to exercise your rights, please contact us:

Malton Coachworks, Showfield Lane, Malton, YO17 6BT. Telephone: 01653 692090 Email: accounts@maltoncoachworks.com

If you have a concern about how we have handled your personal information, we would ask you to contact us in the first instance so we can try to put things right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection:

Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Telephone: 0303 123 1113 Website: ico.org.uk