Xpeng (UK) Limited Privacy Notice

Xpeng (UK) Limited is dedicated to protecting the confidentiality and privacy of information entrusted to us in accordance with the UK General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. Please read this Privacy Notice to learn about your rights, what information we collect, how we use and protect it.

Who controls the use of my personal data?

Xpeng (UK) Limited acts as a data controller and will be responsible for compliance with the law and protecting your privacy and personal data.

Xpeng (UK) Limited has designated a Data Protection Officer who acts on Xpeng (UK) Limited’s behalf, who will ensure that your data protection rights and freedoms are protected in all our entities.

Who can you contact for privacy questions or concerns?

If you have questions or comments about this Privacy Notice or how we handle your personal data, please direct your correspondence to our designated responsible person:

Data Protection Officer, The Gate, International Drive, Solihull, West Midlands, B90 4WA Telephone: 0121 747 4000

Email: dataprotectionofficer@imgroup.co.uk

How do we collect Personal Data?

Directly

We obtain personal data directly from individuals in a variety of ways, including obtaining personal data from individuals who provide us with their business card(s), complete our online forms, engage in webchats, subscribe to further information, attend marketing events we host, or visit our offices We may also obtain personal data directly when, for example, we are establishing a business relationship.

Indirectly

We obtain personal data indirectly about individuals from a variety of sources. We may attach personal data to our customer relationship management system to better understand and serve our customers, subscribers, and individuals, satisfy a legal obligation, or pursue our legitimate interests.

Online

We collect information about you that you give to us via our websites or our social media pages or by contacting us by phone, email or otherwise.

We may automatically collect personal data our web servers store as details of your browser and operating system, the website from which you visit our websites, the pages that you visit on our websites, the date of your visit, and, for security reasons the Internet protocol (IP) address assigned to you by your internet service. We collect some of this information using cookies, please see our Cookies Notice for further information.

Social media

We may also collect personal data which you allow to be shared that is part of your public profile on a third-party social network.

Analytical / trend data

We also hold marketing and analytical data relating to our customers including history of those communications, whether our customers open them or click on links, and information about products or services we think our customers may be interested in, and analytical data to help target offers to our customers that we think are of interest or of relevance. This may include insights about customers or potential customers gained from analysis or profiling.

What Information do we collect?

Identity and contact details

We collect contact details including but not limited to name, physical address, company name and contact details, work and personal landline and mobile numbers, email addresses. Identity details including but not limited to date of birth, gender, marital status and contact preferences.

We collect your opinion of our products through surveys we will send you about our vehicles.

Special category data

We do not typically collect sensitive or special categories of personal data about individuals

Children’s data

We do not intentionally collect information from individuals under 13 years of age.

Location-based data

We may process geographical locations you enter when seeking an office near you, including information derived from cookies and internet protocol addresses.

Correspondence

We hold electronic copies of our correspondence sent to or received from our prospect, customers and suppliers who work with us. Correspondence is primarily in email format, but may also be in ‘hard copy’

Profiling

We process marketing and analytical data relating to our customers including history of those communications, whether our customers open them or click on links and the pages/products visited on our websites.

We use this information to inform our sales and marketing processes by identifying your interests and needs.

This information will help to tailor the marketing, advertising, and other correspondence you may receive from us.

You have the right to object to our use of profiling for direct marketing. See our contact details below if you wish to object.

How will your information be used?

Enquiries and sales negotiation

Activity	Personal data category	Lawful basis
Responding to enquiries and fulfilment of solicited requests	Contact data, web profiling data, and chat history data	Legitimate interests, contractual necessity
Responding to enquiries and fulfilment of solicited requests via third parties	Contact Data	Legitimate interests, consent

Business Promotion and Marketing

Activity	Personal data category	Lawful basis
Personalised direct marketing	Contact data, web profiling data, and chat history data, and data derived from cookies	Legitimate interests, consent
Retargeting via social media platforms	Web profiling data, and data derived from cookies	Consent for non-essential cookies
Competitions and prize draws	Contact Data	Consent

Our legal and security obligations

Activity	Personal data category	Lawful basis
Responding to enquiries and fulfilment of solicited requests	Contact data, web profiling data, and chat history data	Legitimate interests, contractual necessity
Responding to enquiries and fulfilment of solicited requests via third parties	Contact Data	Legitimate interests, consent

Who receives your information?

Storing and securing your information

Your information is stored on secure computer systems and paper copies in our secure onsite storage facilities.

Your information will normally remain in the UK or the European Economic Area (‘EEA’).

If we do transfer personal data outside of these territories, we will ensure that safeguards are implemented, including the use of standard contractual clauses and transfer risk assessments.

How long will your information be held?

If we collect your personal information, the length of time we retain it is determined by the purpose for which we use that data and our legal obligations. We do not retain personal data in an identifiable format for longer than is necessary.

We may need your personal data to establish, bring or defend legal claims, in which case we will retain your personal information for 7 years after the last occasion on which we have used your personal information in one of the ways specified above.

If you are concerned about us holding your data, you have a qualified right of erasure, which our DPO will be able to assist you with.

Cookies

‘Cookies’ are small pieces of information stored on and read from your device to allow our websites to recognise you when you visit. These help us understand how you use our websites so that we can customise our marketing for you. It may also save you from having to re-enter information when you return to our websites. We will, however, only ever use non-essential cookies when we have your permission to do so. Our ‘cookie banner’ will help you to manage your choices.

For more information on how Xpeng (UK) Limited use ‘cookies’ see our Cookie Policy.

What are your data protection rights?

Under data protection law, you have important rights including:

Your right of access: You have the right to ask us for copies of your personal information.
Your right to rectification: You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure: You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing: You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing: You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability: You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
If you have given your consent for us to process any of your personal information, you have the right to withdraw that consent at any time.

If you would like to exercise any of your ‘Data Subject Rights’, you can email our Data Protection Officer at dataprotectionofficer@imgroup.co.uk.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information or to exercise any of your other rights. This helps us to ensure that personal data is not disclosed to any person who has no right to receive it. Depending on the circumstances, we may be unable to comply with your request based on other lawful grounds.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

How to make a complaint to us and our supervisory authority.

If you have any concerns about our use of your personal information, you can make a complaint to us at dataprotectionofficer@imgroup.co.uk

You can also complain to the UK Information Commissioner’s Office (ICO)

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

Do we change this Privacy Notice?

We regularly review this Privacy Notice and will post any updates on this webpage. This Privacy Notice was last updated in July 2024