Supercar Switch Limited

Company Number: 16878573

Effective Date: 30/11/2025

Supercar Switch Limited (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you make an enquiry, join one of our tours, use our website, or interact with us.

We act as the Data Controller for the personal data we process.

If you have questions about this policy, please contact us:

 enquiries@supercarswitch.com

1. What Personal Data We Collect

We may collect and process the following categories of personal data:

1.1 Identification & Driving Information

• Full name
• Address
• Email address
• Phone number
• Date of birth
• Driving licence details (number, issue date, expiry date)
• Passport details (for international travel only)
• Emergency contact information

1.2 Booking & Payment Information

• Tour bookings
• Accommodation preferences
• Payment confirmation and transaction details
  Note: We do not store full card numbers. All payments are handled securely by our payment provider.

1.3 Tour Participation Data

• Daily vehicle sign-in/out sheets
• Damage or incident logs
• Insurance confirmations
• Medical or accessibility information provided voluntarily

1.4 Media & Marketing

• Photos and videos captured during the tour
• Marketing preferences
• Website usage (cookies, analytics, IP address)

2. How We Use Your Data (Lawful Basis)

We process your personal data using the following lawful bases under GDPR:

2.1 Contract – to deliver the tour you book

We use your data to:

• Confirm bookings
• Verify your eligibility (age, driving licence, etc.)
• Provide itineraries, updates and essential information
• Communicate during the tour
• Ensure your safety and participation

2.2 Legitimate Interests – to operate safely

We use data to:

• Prevent fraud
• Maintain safety records
• Manage incident reports
• Keep internal administrative records

2.3 Consent – where you have explicitly agreed

We use consent for:

• Marketing communications
• Use of photos and videos for promotional purposes (you may opt out)

2.4 Legal Obligation

We process certain data to comply with:

• Accounting & HMRC requirements
• Insurance and liability documentation
• Local laws and regulatory obligations

3. Sharing Your Personal Data

We only share your data with trusted third parties essential for delivering the tour:

3.1 Vehicle Rental Company

They receive:

• Your name
• Licence details
• ID information
• Security deposit information (they collect and hold the €15,000)

The rental company has its own GDPR responsibilities and acts as an independent Data Controller.

3.2 Accommodation Providers

To book hotels or lodges, we may share:

• Your name
• Room preferences

3.3 Event Partners & Activity Providers

Where an activity or event requires pre-registration, we may share basic contact details.

3.4 Payment Providers

For secure processing of payments (Stripe, etc.).

We do not store full card details.

3.5 Technology Providers

Such as:

• Email service (Mailchimp/Brevo)
• Website hosting
• Cloud storage services
• Booking systems

All providers are GDPR-compliant or use approved safeguards.

We never sell or rent your data to third parties.

4. International Data Transfers

Some third-party service providers may store data outside the UK/EU.

We ensure all transfers are protected by:

• UK adequacy regulations; or
• Standard Contractual Clauses; or
• Other lawful safeguards.

5. How Long We Keep Your Data

We retain data only as long as necessary for the purpose it was collected.

5.1 Retention Schedule

• Booking information: 6 years (legal requirement)
• Driving licence copies: Deleted after tour completion
• Passport copies: Deleted after tour completion
• Incident logs: 3–6 years
• Email marketing (consent): Until you unsubscribe
• Payment records: 6 years
• Media content: Indefinitely or until consent is withdrawn

We securely delete or anonymise data once it is no longer required.

6. Your Rights Under GDPR

You have the right to:

6.1 Access Your Data

Request a copy of the personal data we hold.

6.2 Rectification

Request corrections to inaccurate or incomplete data.

6.3 Erasure (“Right to be Forgotten”)

Request deletion of your data, when lawful.

6.4 Restriction of Processing

Ask us to limit how your data is used.

6.5 Data Portability

Request a copy in a structured format.

6.6 Objection

Object to processing based on legitimate interests or marketing.

6.7 Withdraw Consent

You may withdraw consent at any time for:

• Marketing emails
• Use of photography/video

6.8 Complaint

You may lodge a complaint with the UK Information Commissioner’s Office (ICO):

https://ico.org.uk

7. Cookies & Website Tracking

We use cookies to:

• Improve website performance
• Analyse usage
• Personalise content
• Support marketing campaigns

You can:

• Accept all cookies
• Reject non-essential cookies
• Change cookie preferences at any time

A detailed Cookie Notice is available on our website.

8. Data Security

We use appropriate technical and organisational measures to protect your data including:

• Password protection
• Secure cloud storage
• Access controls
• Staff confidentiality agreements
• Two-factor authentication
• Regular deletion of sensitive ID documents

While no system is 100% secure, we take all reasonable steps to safeguard your information.

9. Data Breach Procedure

If a data breach occurs that risks your rights or freedoms:

• We will notify the ICO within 72 hours
• We will notify affected individuals as required

We keep internal records of all incidents.

10. Media & Content Usage

We may take photos/videos during tours for marketing.

You may opt out at any time by contacting us.

If you do not opt out, you grant us permission to use such content in:

• Social media
• Website
• Advertising
• Printed materials

11. Third-Party Links

Our website may contain links to third-party sites.

We are not responsible for their content or privacy practices.

12. Changes to This Policy

We may update this Privacy Policy periodically.

Changes will appear on this page with an updated “Effective Date”.

13. Contact Us

For questions, data requests, or to exercise your GDPR rights:

Data Protection Contact

 enquiries@supercarswitch.com