GB Auto is an affiliate comparison and content website for UK motorists. We do not sell car parts, insurance, leasing, hire or transfer services directly. When you click a partner link, you may leave our site and the partner merchant will control its own checkout, account, delivery, warranty and privacy process.
1. Who we are
The data controller for this website is GB Auto, United Kingdom. For privacy questions, email privacy@gbauto.co.uk.
2. Personal data we may collect
| Data type | Examples | Why we use it |
|---|---|---|
| Contact data | Name, email address, message content. | To answer contact forms, privacy requests and support messages. |
| Technical data | IP address, browser, device type, approximate location, logs, timestamps. | Security, fraud prevention, debugging, traffic analysis and site reliability. |
| Usage data | Pages visited, searches, filters, categories, product clicks, affiliate redirects. | To improve categories, show relevant deals and measure partner performance. |
| Marketing preference data | Cookie choices, newsletter preferences, consent records. | To respect your choices and prove consent where required. |
| Affiliate click data | Clicked product, merchant, network, click time, referral parameters. | To redirect you to partners and measure commission attribution. |
3. How we collect data
- Directly from you when you submit a contact, newsletter or data request form.
- Automatically through server logs, cookies, similar technologies and affiliate redirect logs.
- From affiliate networks or merchants when they provide reporting about clicks, sales or commissions.
4. Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Operate the website, show pages, protect security and prevent abuse. | Legitimate interests and, where required, compliance with legal obligations. |
| Answer contact forms and data protection requests. | Legitimate interests and legal obligation. |
| Store essential cookies and consent preferences. | Legitimate interests and legal obligation. |
| Use optional analytics cookies or tracking technologies. | Consent. |
| Use affiliate attribution, advertising tags or remarketing pixels where enabled. | Consent where PECR/UK GDPR requires it; legitimate interests for non-cookie click accounting where appropriate. |
| Send newsletters or marketing emails if enabled. | Consent, or soft opt-in where legally available and appropriate. |
5. Cookies and similar technologies
We use strictly necessary cookies to make the website work. Optional analytics, affiliate and advertising technologies are only activated when you accept the relevant category in the cookie banner. You can change your choice using the Privacy settings link in the footer.
Read the Cookie policy for categories, examples and how to change your settings.
6. Affiliate links and partner websites
GB Auto may earn commission when you click or buy through partner links. Affiliate partners may receive technical and click information when you follow a link. These partners operate their own websites and privacy notices.
Read our Affiliate disclosure.
7. Who we share data with
- Hosting, security, email and IT service providers.
- Analytics providers if you accept analytics cookies.
- Affiliate networks and merchants when you click a partner link.
- Professional advisers, regulators or authorities where legally required.
9. International transfers
Some service providers, affiliate networks or analytics providers may process data outside the UK. Where this happens, we expect appropriate safeguards such as adequacy regulations, standard contractual clauses, international data transfer agreements, or equivalent protections where required by law.
10. How long we keep data
| Data | Typical retention |
|---|---|
| Contact messages | Up to 24 months after the last interaction, unless needed longer for disputes or legal obligations. |
| Server/security logs | Usually up to 12 months, unless needed for security investigation. |
| Affiliate click logs | Usually up to 24 months for reporting, fraud checks and commission reconciliation. |
| Cookie consent records | Usually up to 6 months, then refreshed or replaced by a new consent choice. |
| Privacy request records | Usually up to 6 years to show how we handled the request. |
11. Your UK GDPR rights
Depending on the situation, you may have the right to:
- Access your personal data.
- Correct inaccurate data.
- Request erasure.
- Restrict processing.
- Object to processing based on legitimate interests or direct marketing.
- Request data portability.
- Withdraw consent at any time where processing is based on consent.
- Complain to the UK Information Commissioner's Office.
To exercise your rights, use the data request form or email privacy@gbauto.co.uk.
12. Security
We use reasonable technical and organisational measures to protect personal data, including access controls, HTTPS where available, database permissions, logging and minimisation. No website can guarantee absolute security, but we work to keep data protected and proportionate.
13. Children
GB Auto is not aimed at children. We do not knowingly collect personal data from children for marketing or affiliate profiling.
14. Changes to this notice
We may update this notice when the website, affiliate partners, cookies or legal requirements change. The latest version will always be published on this page.
15. Complaints
Please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.