Privacy policy

Brasenoze collects your name, phone number, email, vehicle registration, and postcode when you request a scrap car quote or part enquiry. We use this data to provide quotes, arrange collection, and fulfil part requests. We do not sell your data. You can request deletion at any time by emailing info@brasenoze.co.uk.

Last updated: September 2026

1. Data controller

The data controller is Brasenoze, located at 14 Brasenose Road, Bootle, Liverpool, L20 8HG. You can contact us at info@brasenoze.co.uk or by phone at 07722 935042.

2. Data we collect

When you use our website, we collect the following personal data:

• Name — when you provide it with a quote or enquiry (optional)
• Phone number — required to contact you about your quote or enquiry
• Email address — when you provide it (optional)
• Vehicle registration number (VRM) — required to look up your vehicle and provide a quote
• Postcode — required to confirm we cover your area and arrange collection
• Vehicle details — make, model, year, weight, fuel type (returned by our VRM lookup provider)
• Source page — which page on our site you submitted the form from (for analytics)

We do not collect: payment card details (all payments are made offline on collection), date of birth, national insurance number, or any special category data.

3. How we use your data

We use your personal data to:

• Provide an instant scrap car quote based on your vehicle's weight and condition
• Contact you to arrange free vehicle collection
• Process your part enquiry and source requested parts
• Issue a DVLA Certificate of Destruction (requires your name and address, collected separately at booking)
• Improve our services and website content

4. Legal basis for processing

Under the UK GDPR, we process your data on the following legal bases:

• Legitimate interests (Art. 6(1)(f)) — to provide quotes and respond to enquiries you initiate
• Contract performance (Art. 6(1)(b)) — to arrange collection and complete the scrapping transaction
• Legal obligation (Art. 6(1)(c)) — to issue Certificates of Destruction as required by the ELV Regulations 2003

5. Data sharing

We share your vehicle registration with our VRM lookup provider (Vehicle Data Global) to retrieve vehicle specifications needed for pricing. This provider acts as a data processor under our instructions.

When you submit a quote request, we also send your vehicle registration, with a representative postcode for your area (not your own postcode), to another vehicle recycler's public quote service so we can compare our price with the market and keep it competitive. We never send your name, phone number, email or your own postcode. Our basis is legitimate interests.

We do not sell, rent, or trade your personal data to any third party. We do not share your data with marketing companies or lead-reselling aggregators.

We may disclose data to law enforcement or regulatory authorities if legally required to do so.

6. Data retention

We retain lead data (quotes and enquiries) for 2 years from the date of submission, after which it is automatically deleted. If you complete a transaction with us, we retain records for 7 years for tax and DVLA compliance purposes.

7. Your rights

Under the UK GDPR, you have the following rights:

• Right of access — request a copy of the data we hold about you
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data (the “right to be forgotten”)
• Right to restrict processing — limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, email info@brasenoze.co.uk. We respond within 30 days.

8. Cookies

We use Google Analytics 4 (Google Ireland Ltd / Google LLC) to understand which pages are useful and how people reach our quote and parts forms. It sets the cookies _ga and _ga_* and collects anonymised usage data such as pages viewed, approximate location and device type.

These are analytics cookies and are off by default. Nothing is requested from Google and no analytics cookies are set unless you choose Accept all (or enable analytics under Manage preferences) in the cookie banner. Our legal basis is your consent. You can change or withdraw it at any time using the Cookie settings link in the site footer; withdrawing stops collection and removes the cookies. Your choice is stored in your browser for 12 months. We do not use advertising cookies or Meta Pixel.

Our admin panel (staff-only, password-protected) uses essential session cookies for authentication. These are strictly necessary and are not set for public visitors.

9. Security

We protect your data with: HTTPS encryption in transit, Row Level Security in our database (leads are only accessible to authenticated staff), strict Content Security Policy headers, and input validation on all form submissions. Lead data is never exposed to the public internet.

10. Complaints

If you have a concern about how we handle your data, contact us first at info@brasenoze.co.uk. If you are not satisfied, you can complain to the Information Commissioner's Office (ICO).