LDT Motor Company
01704 336002Enquire

Privacy notice

Last updated: 5 November 2026

1. Who we are (data controller)

The data controller is LDT Motor Company Ltd, company number 17358555, registered office / trading address: 78A Upper Aughton Road, Southport, Merseyside PR8 5NJ.

Privacy contact: info@ldtmotorcompany.co.uk · Phone: 01704 336002.

ICO registration number: ZC223038 (UK data protection fee / register of fee payers).

2. What personal data we collect

  • Enquiries & leads — name, email, phone, message, vehicle of interest, part-exchange details and any photos you upload.
  • Reservations and deposits — name, email, phone, any message you add, the car reserved, the date you accepted our deposit terms, your reservation reference, how and when the deposit was paid (for example the bank transfer, including the payer name and reference shown on our bank statement), any refund, and the deposit receipt (reservation invoice) we issue to you.
  • Sales & invoices — buyer details, address, payment method, part-exchange registration and allowance, handover notes.
  • Vehicle purchases / part-exchange into stock — if you sell or part-exchange a vehicle to us: your name, address, phone, email, ID check type and a short reference (for example last 4 characters), vehicle details, purchase price and payment notes. We keep this for stock and accounting.
  • Aftersales / complaints — details you give us so we can handle Consumer Rights Act or warranty issues.
  • Website technical data — your IP address, used briefly for rate-limiting and spam protection; basic page-view statistics recorded on our own system (page, referring website, device type and a visitor code made by hashing your browser details with a key that changes daily, without storing your IP address); and, only if you accept optional cookies, Google Analytics data (see our cookie policy).
  • CCTV images — video of people and vehicles on and immediately around our showroom premises (see section 10).

We get this information from you, from our own records of your dealings with us, and (for deposits and payments) from our bank.

3. Why we use your data (purposes & lawful bases)

  • Contract / steps prior to a contract — answering enquiries, arranging viewings, holding deposits, completing a sale, part-exchange and handover.
  • Legal obligation — keeping sales, invoice, vehicle purchase and accounting records for HMRC and related legal duties (typically 6 years).
  • Legitimate interests — running a used-car dealership securely (fraud/spam prevention, stock administration, handling complaints, improving the website with privacy-friendly first-party stats), and operating CCTV for crime prevention and safety (see section 10).
  • Consent — optional marketing emails/messages (separate unticked opt-in), and optional cookies such as Google Analytics.

4. Who we share data with (processors / recipients)

  • Cloudflare — hosts the website, dealer dashboard and database, stores uploaded photos, and provides security services including the Turnstile anti-spam check on our forms.
  • Our business email provider — stores emails you send us and emails we send you.
  • Resend — an email delivery service we use to send us an email alert when someone submits a form on our website (the alert contains the details you entered). These alerts are being set up; until they are switched on, form submissions are only stored in our dealer system.
  • Our bank — processes bank transfers you send us, such as reservation deposits.
  • Google — our Google reviews are fetched by our server (this does not share your details with Google); the Find us map loads from Google Maps only when you choose to show it; and Google Analytics runs only if you accept optional cookies.
  • WhatsApp (Meta) — only if you choose to contact us on WhatsApp.
  • Professional advisers (for example our accountant), insurers, and the police or other authorities where the law requires or allows it.

We do not currently take card payments through the website.

We do not sell your personal data.

5. International transfers

Some providers (for example Cloudflare, Resend and Google) may process data outside the UK, including in the United States. Where that happens, they rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or adequacy regulations. Ask us if you want more detail for a specific service.

6. How long we keep data

  • Unconverted enquiries / leads — normally up to 24 months, then anonymised or deleted (configurable in the dealer system).
  • Reservations that do not go ahead (cancelled, refunded, expired or never paid) — normally up to 12 months, then personal details anonymised.
  • Deposit receipts (reservation invoices) and paid deposits — 6 years, as part of our accounting records.
  • Sales, invoices and accounting records — 6 years (legal / HMRC). After that they are flagged for review before deletion.
  • Vehicle purchase agreements (people who sell or part-exchange vehicles to us) — 6 years, same as sales files; seller contact can be anonymised on a valid erasure request while keeping accounting totals.
  • Marketing consent records — while consent is active, and a short period afterwards to demonstrate compliance.
  • Rate-limit records — short-lived (minutes to hours), not used for marketing.
  • Page-view statistics — deleted after 13 months.
  • CCTV footage — kept for a limited period and then deleted or recorded over, unless needed for an incident, investigation or insurance claim (then kept only as long as necessary for that purpose).

7. Your rights

Under UK GDPR you can ask to: access your data; correct it; erase it (where applicable); restrict or object to certain processing; and receive a portable copy of data you provided. Marketing consent can be withdrawn at any time. We do not make decisions about you based solely on automated processing.

Giving us your contact details is needed for us to answer an enquiry, hold a car or complete a sale. If you do not provide them, we may not be able to do those things.

Contact info@ldtmotorcompany.co.uk. We may need to verify your identity. You can also complain to the Information Commissioner’s Office (ICO).

8. Cookies

See our cookie policy. You can change cookie preferences at any time from that page.

9. Security

We use access controls, encrypted connections (HTTPS), protected staff logins and spam-protected forms. No method of transmission is 100% secure.

10. CCTV at our showroom

We operate CCTV at our showroom premises at 78A Upper Aughton Road, Southport, Merseyside PR8 5NJ.

  • Purpose — crime prevention; security of the premises and vehicles; and the safety of staff and customers.
  • Lawful basis — legitimate interests (UK GDPR Article 6(1)(f)): protecting our business, stock, staff and visitors. We aim to keep cameras focused on our own premises.
  • Who sees footage — LDT Motor Company. Relevant footage may be shared with the police or insurers when needed for an incident, investigation or claim.
  • Retention — recordings are kept for a limited period and then deleted or recorded over, unless retained longer because they are needed for an incident, investigation or insurance claim.
  • How to request footage — you can make a subject access request for CCTV that may show you by emailing info@ldtmotorcompany.co.uk. We may ask for enough detail (approximate date, time and location) to find any relevant footage, and we may need to verify your identity. Footage that also shows other people may be edited or limited where necessary to protect their rights.