Privacy Policy

1. Controller and contact details

Silverbrook Atelier Ltd is the controller of personal information collected through this website and through vehicle-rental enquiries. This notice explains how we handle personal information under the UK General Data Protection Regulation, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003, and relevant amendments introduced by the Data (Use and Access) Act 2025.

2. Scope of this notice

This notice applies when you browse the website, contact us, submit a vehicle-rental enquiry, ask for a quotation, communicate with our team, exercise a data protection right, or otherwise provide personal information in connection with our services. A separate rental agreement may contain additional privacy information where further processing is required to assess eligibility, arrange insurance, verify identity or manage an active hire.

This website is intended for people in the United Kingdom. It is not directed at children, and we do not knowingly collect information from anyone under 16 through the enquiry form.

3. Information we may collect

• Identity and contact information, including your name, email address, telephone number and correspondence address.
• Enquiry information, including preferred dates, requested vehicle category, collection requirements and the content of your message.
• Eligibility information supplied later in the rental process, such as age, driving-licence details, driving history, proof of address and identity verification information.
• Transaction and contractual information, including quotations, deposits, payments, refunds, rental dates, mileage, fuel records and vehicle condition reports.
• Technical and usage information, including browser type, device type, approximate location derived from an IP address, pages requested, timestamps, security logs and cookie or local-storage choices.
• Communications, complaints and rights requests, including records needed to investigate and respond.

Please do not submit special-category information, payment-card data or copies of identification documents through the general website enquiry form unless we specifically request them using an appropriate secure process.

4. How information is collected

We collect information directly from you when you complete a form, contact us or enter into a rental arrangement. We may also receive information from authorised drivers, corporate account holders, payment providers, identity and licence verification providers, insurers, roadside-assistance providers, fraud-prevention services and public authorities where lawful and necessary.

Limited technical information may be generated automatically when your browser requests website files. Optional storage or analytics technologies will not be activated unless the applicable consent or statutory exception is available.

5. Purposes and lawful bases

Enquiries and pre-contract steps

We use contact and enquiry information to answer questions, assess availability, prepare quotations and take steps at your request before entering into a contract. The lawful basis is that processing is necessary for pre-contractual measures or for the performance of a contract.

Rental administration

We may use identity, eligibility, payment and rental information to create and manage a booking, verify driver requirements, provide the vehicle, administer deposits, arrange support and handle return, damage, insurance or payment matters. The lawful bases are contract, legal obligation and legitimate interests in operating a safe and accountable rental service.

Safety, fraud prevention and legal claims

We may process information to protect vehicles, customers and staff; detect fraud; establish or defend legal claims; cooperate with insurers; and comply with lawful requests. Depending on the circumstances, the lawful bases are legal obligation, legitimate interests or a recognised legitimate interest permitted by applicable UK law.

Website operation and preferences

Essential storage may be used to remember privacy choices and maintain basic website operation. Optional technologies are based on consent unless a specific PECR exception applies. You may withdraw consent for future use at any time.

Service communications

We may send operational messages about an enquiry or rental because they are necessary to take pre-contract steps or perform a contract. We do not treat these necessary service messages as direct marketing.

6. Direct marketing

We will not add you to a general marketing list merely because you submitted a rental enquiry. Where we ask for marketing consent, the request will be separate, specific and optional. Electronic marketing will be managed in accordance with PECR and data protection law. You can withdraw consent or object to direct marketing at any time, without affecting service messages that are necessary for an active enquiry or contract.

7. Sharing and service providers

We may share the minimum necessary information with hosting and IT-support providers, secure communications providers, payment processors, insurers, vehicle suppliers, roadside-assistance services, professional advisers, fraud-prevention and verification providers, and authorities entitled to receive information by law. Providers acting as processors must follow documented instructions, protect information and use it only for the agreed service.

We do not sell personal information. We do not permit an unrelated third party to use enquiry information for its own marketing.

8. International transfers

Our primary operations are in the United Kingdom. If a service provider processes information outside the United Kingdom, we will use a lawful transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another mechanism permitted by law. We will also assess supplementary safeguards where appropriate.

9. Retention

We keep information only for as long as necessary for the purpose collected and to meet legal, accounting, insurance, fraud-prevention and claims requirements. Unsuccessful or incomplete enquiries are generally reviewed for deletion or anonymisation after a reasonable period, normally no longer than 24 months unless a complaint, dispute, legal hold or continuing relationship justifies longer retention. Rental and transaction records may be retained for up to seven years after the relevant accounting period or longer where a claim, regulatory requirement or legal obligation applies. Cookie-consent records are retained only as long as needed to demonstrate and respect the recorded choice.

Retention periods are reviewed and may vary according to the sensitivity of the information, the risk of harm, the purpose of processing and applicable limitation periods.

10. Security

We use proportionate organisational and technical measures intended to protect personal information against accidental loss, unauthorised access, alteration or disclosure. Measures may include access controls, staff confidentiality requirements, secure configuration, patching, backups, data minimisation, supplier review and incident-response procedures. No internet transmission or storage system can be guaranteed to be completely secure, so users should avoid sending unnecessary sensitive information through ordinary website forms.

11. Your rights

Subject to legal conditions and exemptions, you may request access to your personal information, correction of inaccurate information, deletion, restriction, portability, or information about processing. You may object to processing based on legitimate interests and object at any time to direct marketing. Where processing is based on consent, you may withdraw consent for future processing.

You may also ask for safeguards relating to a solely automated decision that has a legal or similarly significant effect. We do not currently use the website enquiry form to make such decisions.

We may need to verify your identity before acting on a request. We will respond within the applicable statutory period and explain any lawful extension, refusal or fee. Exercising a right is normally free of charge.

12. Data protection complaints procedure

You may make a complaint about our handling of personal information by contacting info@silverbrookatelier.com and describing the issue, the relevant dates and the outcome sought. We will acknowledge the complaint, investigate it without undue delay, keep you informed where appropriate and provide a substantive response within the period required by applicable law. We will maintain a record of the complaint and the steps taken.

You also have the right to complain to the Information Commissioner. We encourage you to contact us first so that we have an opportunity to resolve the issue, but this does not limit your right to approach the regulator.

13. Cookies and local storage

The site uses essential local storage to remember the cookie choice made through the banner. Optional analytics and preference storage remains inactive unless enabled in accordance with the Cookie Policy. Browser controls may also be used to remove stored information, although removing the consent record may cause the banner to appear again.

14. Changes to this notice

We may update this notice to reflect changes in our services, suppliers or legal obligations. The revised version will be published on this page with a new effective date. Material changes will be highlighted where reasonably practicable.

Effective date: 20 July 2026.