Privacy Policy
How we handle your personal data
Last updated: 7 May 2026
1. Who we are
WBAuto is a trading name of WhiteBirch Group Ltd, a company registered in England and Wales (company number 12598211). Our registered office is 3rd Floor, 86-90 Paul Street, London, EC2A 4NE.
We are registered with the Information Commissioner's Office (ICO) under registration number ZB121159.
For any data protection queries, contact us at hello@wbauto.co.uk.
2. What data we collect
We collect and process the following categories of personal data:
| Category | Examples | Basis |
|---|---|---|
| Identity | First name, last name | Contract / Legitimate interest |
| Contact | Email address, phone number, WhatsApp number | Contract / Consent |
| Enquiry | Your message, situation description, session type preference | Contract |
| Vehicle | Vehicle registration, MOT data, mileage (via free vehicle check) | Consent / Legitimate interest |
| Technical | IP address, browser type, pages visited, cookies | Legitimate interest |
| Marketing | Email preferences, guide download history | Consent |
3. How we collect your data
- Directly from you: booking forms, contact forms, free vehicle check tool, guide downloads, email and WhatsApp correspondence.
- Automatically: cookies, analytics, and server logs when you visit our website.
- Third-party APIs: vehicle data from DVSA MOT History API and OneAutoAPI when you use our free vehicle check tool.
4. How we use your data
- To provide the services you've requested (consultancy sessions, car sourcing, vehicle checks)
- To send you transactional emails related to your enquiry or booking
- To send MOT reminders if you have opted in
- To send marketing emails if you have given explicit consent
- To improve our website and services
- To comply with legal obligations
5. Data processors
We share personal data with the following third-party processors, each acting under a data processing agreement:
| Processor | Purpose | Data shared |
|---|---|---|
| HubSpot (portal 148056424) | CRM, form submissions, contact management | Name, email, phone, enquiry details |
| Loops.so | Transactional and marketing emails | Name, email, preferences |
| Supabase | Database for vehicle check results and MOT reminders | Email, vehicle registration, MOT data |
| OneAutoAPI | Vehicle history and valuation data | Vehicle registration number |
| DVSA MOT History API | Official MOT test results | Vehicle registration number |
| Experian (via OneAutoAPI) | Vehicle provenance, finance, write-off and valuation data — used only when a Premium Vehicle Report is purchased | Vehicle registration number |
| Vercel | Website hosting and serverless functions | Technical data (IP, browser) |
| Google Analytics | Website usage analytics | Anonymised usage data, cookies |
| PostHog (EU region) | Privacy-friendly website analytics (cookieless, EU data residency) | Anonymised page views and events, no PII |
We do not sell your personal data to any third party.
6. Data retention
- Contact and enquiry data: retained for 3 years from your last interaction, then deleted.
- Vehicle check data: retained for 12 months, then anonymised.
- MOT reminder data: retained until you unsubscribe or for 2 years, whichever is sooner.
- Marketing consent: retained until you withdraw consent.
- Technical/analytics data: retained for 26 months (Google Analytics default).
7. Your rights
Under UK GDPR, you have the right to:
- Access your personal data (Subject Access Request)
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing
- Data portability — receive your data in a structured format
- Object to processing based on legitimate interest
- Withdraw consent at any time for consent-based processing
To exercise any of these rights, email hello@wbauto.co.uk. We will respond within 30 days.
8. Cookies
Our website uses cookies. For full details, see our Cookie Policy.
9. International transfers
Some of our processors (HubSpot, Loops.so, Supabase, Vercel) process data in the United States. These transfers are protected by Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner, ensuring your data receives an equivalent level of protection.
10. Security
We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), access controls, and regular security reviews of our third-party processors.
11. Children
Our services are not directed at individuals under 18. We do not knowingly collect personal data from children.
12. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of this page will be revised accordingly. We encourage you to review this page periodically.
13. Complaints
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Telephone: 0303 123 1113
WhiteBirch Group Ltd
Company number: 12598211
ICO registration: ZB121159
3rd Floor, 86-90 Paul Street, London, EC2A 4NE