Faff-free Privacy Notice
We’re removing the faff from changing and managing cars, and we also want to make our legal documents a cinch for anyone to understand. If you have any doubts or suggestions regarding any of them, please contact us and we’ll do our best to help.
If you decide to give us your personal data, including when you create an account and purchase a car from us, then the idea of this Privacy Notice is to help you understand what data we have, how we use it, where it goes, and your rights to decide what happens with it. We will use personal data about you only for the reasons that you provided it, and in line with all applicable laws and what’s explained in this Privacy Notice.
This Privacy Notice may change from time to time, for example because of developments in technology, our business, or the law, so please check back when you visit cinch for the most current information. If we have your e-mail address, we may also notify you of any changes via e-mail.
Last updated: 8 September 2023
1. Who is the data controller of your data?
A “data controller” is the organisation that decides on the purposes and ways that your personal data is processed (or, in other words, used). cinch’s website and services are provided by, and these decisions are made by:
Cinch Cars Limited of
18 Bartley Wood Business Park
When we share personal data with third parties (see Section 5 below), they may become a data controller in respect of their own processing activities. We recommend you read their privacy notices as these will apply to their use of your personal data. We can’t take any responsibility for what’s in those notices though.
2. Why do we process personal data? What data do we process? And what is our lawful basis for that processing?
The types of data we process and the reasons for which we process it depends on how you’re using cinch. We are required to have a ‘lawful basis’ that we rely on to use your data in the ways we describe below, and we’ve stated what this is under each section.
3. How long does cinch keep your data for?
cinch doesn’t keep your personal data for any longer than necessary. If you have signed up for an account with cinch, then you will be able to access it and we will keep your personal data within it until you change it or cancel your account.
If you buy a car from cinch, then we will keep data relating to the sale of a car, including your application for finance if you make one, for as long as it is necessary for us to comply with our legal obligations.
In relation to any promotions, contests or prize draws that you participate in, cinch will not keep your personal data for any longer than necessary to complete the promotion, contest or prize draw and pay and account for payments or distribute prizes, also allowing for a reasonable period for any queries or disputes to be raised and settled.
If we need to keep your data longer for tax, accounting, reporting, regulatory or legal reasons then we will use it only for those purposes and for a period that is reasonably necessary to comply with the laws and policies that apply to us and to be in a position to deal with any legal or regulatory claims.
After these periods we may anonymise data (so it does not contain any personal data and cannot be traced back to you) to use it for research or statistical purposes and improving our website and services.
4. Does cinch receive your personal data from any other third parties?
We also advertise our cars on other websites. Some of these sites allow customers to request contact from cinch, and collect customer details to pass to us for this purpose.
If we receive personal data in this way, we will only use it for the purposes of contacting customers about the car they are interested in, unless the customer agrees to receiving further contact from cinch or creates an account.
We also receive customer data from other affiliates and publishers. This allows us to track transactions to enable cashback to be paid in accordance with the Terms and Conditions of specific promotions, or where a customer referral has been received from a member of our affiliated publishing network.
5. Does cinch provide your personal data to any third parties?
If you would like to purchase a car from cinch using our finance option, we’ll disclose certain information to our third party finance broker, Evolution Funding, and, in some cases, Black Horse (a lender). See Section 2 for full details.
When your order is ready for delivery or collection, we’ll share your name, address and contact details with our third party delivery service provider so that they can get your car to you. Our delivery service provider will carry out the checks explained in our Car Purchase Terms and Conditions on you, your ordered car and your part exchange car (if applicable) on delivery or collection. This information will be shared with us so that we can manage the ongoing relationship with you.
We use a third party warranty provider to provide cinchCare. If you purchase cinchCare we’ll pass your details to the warranty provider to set up the contract between you and them. They will contact you with information in relation to cinchCare including details of the product, relevant documentation and the ongoing performance of the plan.
If you make a claim under our 90-day warranty then we’ll disclose certain information to our Administrator, authorised repairers and/or our breakdown agent, as is necessary. See Section 2 for full details.
From time to time we may provide additional services or products through cinch. Depending on the service or product, we may need to provide your contact details to the service provider, or confirm to the provider that you are a cinch customer.
cinch also works with other organisations that provide services such as IT and data processing or other professional advisors. These include:
providers of IT-related services (e.g. data storage, website development, live chat, hosting, management, security or maintenance);
payment processing services;
other data processing companies that provide us with services such as call and e-mail tracking and recording, management of PR and customer communications, sending e-mails or texts, or processing of information or newsletters;
organisations providing us with services relating to the management of promotions, contests and prize draws and fulfilment of payments and prizes;
companies in our group or affiliated companies that provide us with additional technical infrastructure or services;
data analysis providers (e.g. measuring which webpages or advertisements are of most interest);
advertising affiliates as part of our affiliate publishing network, to track referrals and transactions; and
accounting, legal, insurance or banking service providers.
These organisations process personal data on our behalf, but our contracts with them oblige them to meet data protection standards as strict as the ones that apply to us, and not to use your data for any other purpose.
Where these third parties are not based in the UK or other countries that are officially regarded as having adequate data protection laws, then this will be done only on the basis of legal safeguards aimed at ensuring that your data is kept as secure as under applicable UK laws. Please contact us for more information about the safeguards we have in place.
Other circumstances where cinch may need to disclose your personal data to third parties could be: (i) where permitted or required by law, to any police force, court, regulator or public body; (ii) to enforce or apply the terms of our contracts or to protect the rights, property or safety of our customers; or (iii) in connection with a sale, merger or restructuring of our business or company.
6. What are your rights in relation to your personal data?
cinch is committed to ensuring that you can easily exercise your legal rights over your personal data under the laws that apply to us.
You are entitled to ask at any time:
for access to a copy of the personal data that cinch holds about you;
to have any incorrect personal data about you corrected (remember that you can update some of your data in your account);
for data about you to be erased (also referred to as the “right to be forgotten”) or if that is not possible (e.g. because the law requires us to keep data for longer) to have processing restricted;
to object to particular processing (e.g. for marketing purposes or where we rely on legitimate interests);
to contest a decision made about you based on automated processing (although cinch does not use any automated processing); and
to receive an electronic copy of data you provided to us, for provision to a different service provider (also referred to as “data portability”).
You are also able to withdraw any consent given by you in the past. If you withdraw your consent, any processing of the data that took place before you do so will still be legal.
cinch can always be contacted using the details in Section 1 to resolve any issues or doubts you may have in relation to processing of your data, or exercising your legal rights. If you believe that your rights have not been respected then you are also entitled to complain to the UK Information Commissioner (www.ico.org.uk).
7. Do you have to provide your personal data to cinch?
To search our database of cars you aren’t required to sign up for an account or enter any other data if you don’t want to. If you would like to purchase a car from us, then there’s certain information we need from you to make that happen – if we don’t have this information, we can’t enter into a contract of sale with you.
8. Where does cinch store your data?
We operate within the UK. Some of our third party service providers may process personal data on our behalf in locations outside of the UK. When they do, we will ensure that appropriate safeguards are in place for that transfer and storage as required by applicable law. This is because some countries outside of the UK do not have data protection laws equivalent to those in the UK. If you would like more information about the safeguards we have in place, please contact our Data Protection Office using the details in Section 1.