How Podium Uses Your Information

1. Who Controls Your Information

Data controller: Laurus Group Limited (trading as Podium Vehicle Solutions).

Contact email: [email protected].

Service area: Based near Banbury, Oxfordshire, with mobile services across surrounding counties.

2. Information We Collect Through Forms

Depending on the form, we collect:

• Identity and contact details, such as name, email address and phone number.
• Vehicle details, such as registration, make, model, mileage and service needs.
• Address information for visit planning and service delivery.
• Booking preferences and enquiry notes.
• Your privacy acknowledgement and any optional marketing preference you provide.

3. Why We Use Your Information

• To respond to requests and take steps before providing services.
• To book and deliver diagnostics, servicing, inspections and related support.
• To communicate about your enquiry, appointment and recommended next steps.
• To keep records, manage quality and meet legal or regulatory duties.
• To send occasional Podium email updates only where you have opted in.

4. Lawful Bases Under UK GDPR

We rely on one or more of the following lawful bases, depending on context:

• Taking steps at your request before entering into a contract.
• Performance of a contract where you ask us to provide services.
• Legal obligations, where processing is required by law.
• Legitimate interests, such as operating and improving our services, handling customer communications and keeping business records in a proportionate way.
• Consent for optional marketing emails where you have actively opted in.

Your privacy acknowledgement checkbox is used as confirmation that you have read this notice and that the details provided are accurate. It is not used as the legal basis for ordinary service processing.

5. Service Providers and Processors

We use service providers to run the website and handle customer communications, including:

• Website and technical infrastructure providers (hosting, security and performance services).
• Form submission processing through FormSubmit (formsubmit.co).
• Email and communication service providers used to receive and respond to enquiries.

We require processors to handle personal data only on our instructions and to apply appropriate safeguards.

6. International Transfers

Where a provider processes personal data outside the UK, we use appropriate safeguards, such as UK-approved transfer mechanisms and contractual protections, where required.

7. How Long We Keep Information

We keep personal information only for as long as needed for the purposes above. Retention periods depend on factors such as service history, legal duties, complaint handling, and tax or accounting requirements.

When information is no longer needed, we securely delete it or anonymise it.

8. Security

We use appropriate technical and organisational measures to protect personal information, including access controls, secure communication practices and provider-level safeguards.

9. Your UK GDPR Rights

You may have rights to:

• Request access to your personal data.
• Request correction of inaccurate data.
• Request erasure in certain situations.
• Request restriction of processing in certain situations.
• Object to processing based on legitimate interests.
• Request data portability where applicable.
• Withdraw marketing consent at any time.

To exercise your rights, contact [email protected].

10. Complaints

If you have concerns about how we handle personal data, please contact us first so we can try to resolve them.

You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk.