Privacy Policy Statement

1. Who We Are

FG Barnes Group (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy.

Contact details:
FG Barnes Group, Moorfield Road, Slyfield Estate, Guildford Surrey, GU1 1RT

Email: gdpr@barnes-group.co.uk

We do not currently appoint a Data Protection Officer

2. The Data We Collect

We may collect and process the following categories of personal data:

• Identity data (name, title)
• Contact data (address, email, telephone number)
• Transaction data (vehicle purchases, servicing history, payments)
• Profile data (preferences, interests)
• Technical data (IP address, browser type, device information)
• Usage data (how you use our website and services)

3. How We Collect Your Data

We collect data when you:

• Visit our showroom or service centre
• Use our website
• Register for services or accounts
• Make a purchase or booking
• Contact us or sign up for marketing communications

4. How We Use Your Data (and Legal Basis)

Under UK GDPR, we must have a legal basis for processing your data. We use your data for the following purposes:

Where we rely on legitimate interests, these include improving our services, customer experience, and business operations, and we ensure these do not override your rights.

5. Sharing Your Data

We may share your data with:

• Service providers (IT systems, payment processors, delivery providers)
• Manufacturers or partners (e.g. vehicle brands including Stellantis, OMODA UK and Nissan) Read Stellantis’ privacy policy here
• Professional advisers (legal, accounting)
• Regulators or authorities where required by law

All third parties are required to respect the security and confidentiality of your data.

6. International Transfers

Your personal data may be transferred outside the UK.

Where this happens, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses
• Transfers to countries deemed adequate by the UK

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including legal, tax, and accounting requirements.

For example:

• Transaction data: typically retained for up to 6 years
• Marketing data: retained until you withdraw consent

8. Your Data Protection Rights

Under data protection law, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure of your data
• Restrict processing
• Request transfer of your data (data portability)
• Object to processing (including marketing)
• Withdraw consent at any time (where applicable)

You can exercise these rights by contacting us using the details above.

We will respond within one month. You also have the right to lodge a complaint with the
Information Commissioner's Office: https://ico.org.uk/

9. Marketing Communications

We may send you information about products and services where:

• You have consented, or
• We have a legitimate interest (and you have not opted out)

You can opt out at any time by:

• Clicking “unsubscribe” in emails
• Contacting us directly

10. Cookies

Our website uses cookies to improve your experience and analyse website traffic.

You can control cookies through your browser settings. For more information, please see our separate Cookie Policy

11. Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, use, or disclosure.

12. Providing Your Data

Where we need to collect personal data by law or under a contract, and you fail to provide that data, we may not be able to provide our services.

13. Automated Decision-Making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

14. Changes to This Privacy Notice

We may update this privacy notice from time to time. The latest version will always be available on our website.