← Back to VAGCLUB
LEGAL

Privacy Policy

How we collect, use, and protect your information.

VAG CLUB LTD  |  Company No. 10522010  |  Registered office: 167-169 Great Portland Street, Fifth Floor, London, W1W 5PF
Last updated: 24 July 2026

At VAG CLUB LTD, your privacy and data security are central to our operations. This policy explains how we collect, handle, store, and look after your personal information when you browse our website (www.vagclub.co.uk), contact us on our digital messaging channels or official social media platforms, or book a service with us.

1. Statutory Compliance & The Data Controller

VAG CLUB LTD acts as the “Data Controller” for your personal information under UK data protection laws (including the UK GDPR and the Data Protection Act 2018). This means we independently determine why and how your personal data is processed to deliver our services. We are registered with the Information Commissioner's Office (ICO) under registration number ZA794316. If you have any questions regarding your data rights, you can reach our compliance team at privacy@vagclub.co.uk.

2. The Data We Collect About You

To deliver our automotive services across our mobile, remote, and workshop channels, we only collect information that is strictly necessary for the job:

  • Contact Profiles: Your name, billing address, installation address, telephone numbers, email address, and digital user profiles (if you contact us via our official social media channels).
  • Vehicle Telemetry: Your Vehicle Registration Mark (VRM), Vehicle Identification Number (VIN), make, model, and factory electrical options.
  • Technical Software Backups: Original electronic configuration readings and adaptation backups taken from your vehicle's control modules, stored securely and indexed against your VRM.
  • Fitment Records: Digital photographs or brief video clips of your dashboard or vehicle interior taken by our engineers to confirm correct asset placement and verify working order.
  • Certification Data: Details required to complete security registration forms, including your customer signature, to activate anti-theft warranties, extended tracking configurations, and subscription accounts.

3. Valet Mode & PIN Privacy

To guarantee total asset protection for your vehicle, VAG CLUB LTD explicitly states that we do not collect, view, or store your personal immobiliser PIN codes, emergency override codes, or custom access configurations.

You create and control your own secret immobiliser PIN, and you can change it at any time. Where your security system uses a valet mode, it cannot be engaged without your private PIN being entered first. Your emergency information is provided to you anonymously. We encourage you never to share your PIN or emergency information with any third party, including us.

For fob-based immobilisers and trackers, we programme fobs specifically to your vehicle and do not retain a copy. For tracking systems, you hold your own login for your tracking app and services, with support and monitoring provided directly by the relevant tracking company. VAG CLUB LTD provides ongoing technical support but does not actively monitor your vehicle's live tracking. Your security codes and access credentials remain entirely your own responsibility.

4. Our Secure Digital Ecosystem

We protect our customer records against cyber-threats by minimising loose physical paperwork and utilising secure, enterprise-grade cloud systems. Where a signed authorisation or sign-off is required (such as our Technical Disclaimer & Sign-Off Form), it is captured and stored securely and digitally:

  • Communication: Enquiries are handled via encrypted business messaging applications and secure corporate email. If an enquiry does not result in a booking, the communication history is routinely archived or deleted (see Section 6).
  • Central Management: All confirmed customer profiles, vehicle records, and job schedules are centralised inside a secure, encrypted Customer Relationship Management (CRM) platform.
  • Invoicing and Finance: Financial records, bookkeeping, and invoices are processed through secure, authorised accounting software.
  • Technical Secure Storage: Software configuration files and diagnostic backups are stored safely on encrypted, restricted cloud-storage infrastructure.

5. Why We Use Your Data (Lawful Bases)

Under the UK GDPR, we only process your information for clear, valid legal reasons:

  • Contract Execution (To Do the Job): We use your contact and vehicle info to dispatch our mobile team, coordinate remote digital sessions, manage workshop arrivals, fit your devices, and complete your custom activations or tuning.
  • Legal and Tax Compliance: We retain basic financial records and invoices for seven (7) years to meet UK HMRC tax reporting requirements.
  • Insurance Activation & Product Warranties: We process your registration data to pass installation certificates to security hardware manufacturers, warranty providers, and industry compliance bodies (such as the Tracking and Aftermarket Security Systems Association – TASSA) so you can secure your official anti-theft certificates for your car insurance provider.
  • Legitimate Interests: We may process limited data to keep our records accurate, prevent fraud, recover debts, and improve our services, where doing so does not override your rights.

6. How Long We Keep Your Data

We do not keep your personal information for longer than necessary. Our standard retention periods are:

  • Enquiries that do not become bookings: Archived or deleted within 6 months.
  • Customer and vehicle records: Kept for the duration of your warranty and our ongoing relationship, and thereafter only as required for tax and legal purposes.
  • Financial records and invoices: 7 years, to meet statutory HMRC requirements and the Limitation Act 1980.
  • Technical vehicle configuration backups (ECU/module backups): Retained for 7 years so we can support, restore, or re-programme your vehicle if needed, after which they are securely deleted.
  • Marketing contact data: Kept until you withdraw your consent or opt out (see Section 9).

7. Personnel & Installer Controls

All personnel deployed by VAG CLUB LTD to install regulated anti-theft security tracking or vehicle immobilisation systems hold the relevant industry certifications (such as TASSA registration) and undergo appropriate background checks and vetting. Any secondary upgrades, retrofits, or general software configurations are executed by fully trained, insured, and approved automotive technicians using professional diagnostic infrastructure.

When we deploy an approved subcontractor or technician to handle your booking, we pass them only the minimal information needed for the job via secure, restricted digital calendar invites. Under formal agreements complying with Article 28 of the UK GDPR, they are contractually forbidden from downloading your information, copying your software files, or using your data for any personal business activity.

8. Where Your Data is Stored (International Transfers)

Some of the secure cloud tools we use (such as our CRM, messaging, or storage providers) may store or process data on servers located outside the United Kingdom. Where this happens, we ensure your data is protected by appropriate safeguards recognised under UK data protection law (such as UK adequacy regulations or International Data Transfer Agreements), so your information receives the same level of protection as it would in the UK.

9. Staying in Touch

As an existing customer, we may contact you from time to time about our own similar services, updates, and offers, and we may invite you to leave a review. We make it easy to opt out of promotional messages whenever you wish — just reply “STOP” or let us know — and we will always respect that. If you are not yet a customer, we will only contact you with your explicit opt-in consent. Opting out will never affect any service you have booked with us.

10. Your Comprehensive Legal Rights

Under the UK GDPR, you have the right to request a free copy of all personal information we hold about you, request the correction of inaccurate details, ask us to erase your data where our statutory retention periods have expired, restrict or object to certain processing, and withdraw consent at any time. To exercise any of your rights, simply message us at privacy@vagclub.co.uk.

If you believe we have handled your data incorrectly, you have the right to file a complaint with the UK Information Commissioner's Office (ICO) at www.ico.org.uk. We would welcome the opportunity to resolve any concerns with you directly first, so please contact us in the first instance.