Privacy & Cookie Policy
1. Who we are
REIVER LTD (trading as Reiver Cars) (“Reiver”, “we”) is a company registered in England and Wales, number 16734831, with its registered office at Blockley, Gloucestershire, GL56 9RF, United Kingdom. We are the controller of your personal data. Contact for privacy matters: privacy@reivercars.com, or write to the address above.
2. What data we collect
- Enquiry data: name, email, phone, country, preferred contact method, your interest in The Reiver, budget or timing indications, and any information you give about a donor car (model, VIN, registration, history).
- Client data: address, identity documents, date of birth, nationality, company details, beneficial ownership, and source of funds and source of wealth (for anti-money-laundering checks); bank details for payments and refunds; specification choices; signatures.
- Vehicle data: VIN, registration, V5C/title details, service history and photographs of your donor car and your Reiver.
- Communications: emails, call notes and meeting notes.
- Website data: IP address, device and browser information, and pages visited, collected through cookies (section 9).
- We do not seek special-category data. AML screening may reveal politically exposed person status or sanctions information.
3. How and why we use it (lawful bases)
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry and arranging a consultation | Steps at your request before entering a contract; legitimate interests |
| Performing your Commission Agreement, building and delivering your car, warranty and aftercare | Contract |
| Identity, AML, sanctions and fraud checks | Legal obligation (Money Laundering Regulations 2017, sanctions law); legitimate interests |
| Accounting, tax and VAT records | Legal obligation |
| Sending news about Reiver | Consent (you can withdraw it at any time) |
| Website analytics | Consent, given through the cookie banner |
| Defending legal claims | Legitimate interests |
4. Who we share it with
We share your data only with the following, as needed: our IT, email and hosting providers (Microsoft 365, GoDaddy for website hosting, Google for website analytics); our ID-verification and AML screening provider; our bank and payment processors; professional advisers (lawyers, accountants, insurers); couriers and transport agents for delivery or export; DVLA and other registration authorities; HMRC and law enforcement where the law requires it; and named suppliers, but only where they need vehicle details. We never sell your data.
5. International transfers
Some providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum. For export clients, we send data to your country only as needed to deliver and register your car.
6. How long we keep it
| Data | Retention |
|---|---|
| Enquiries that do not become a commission | 24 months from last contact |
| Client and contract records | 6 years after the contract ends (limitation period); warranty records for the warranty period plus 6 years |
| AML / KYC records | 5 years after the business relationship ends (MLR 2017 reg. 40) |
| Build book and vehicle provenance | Kept for the life of the car, as heritage records, with personal identifiers minimised |
| Marketing list | Until you unsubscribe |
7. Your rights
You have the right to access, correct or erase your data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise any of these, contact privacy@reivercars.com. We will respond within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).
8. Security
We protect your data with access controls, encryption in transit, multi-factor authentication on our email and file systems, and confidentiality obligations (including NDAs) with staff and suppliers.
9. Cookie Policy
9.1 Cookies are small files stored on your device. We use:
| Category | Purpose | Examples | Consent needed? |
|---|---|---|---|
| Strictly necessary | Site security, the enquiry form, spam protection, and remembering your cookie choices | Google reCAPTCHA (spam protection), Complianz consent cookies (cmplz_*) | No |
| Analytics | Understanding how visitors use the site | Google Analytics 4 (_ga, _ga_*), via Google Site Kit | Yes |
| Marketing | Measuring adverts and social media | None currently used | Yes |
9.2 Non-essential cookies are set only if you accept them in our cookie banner. You can change your choice at any time through the “Manage consent” link at the foot of every page, or in your browser settings. 9.3 Embedded content (such as videos) may set third-party cookies. These load only after you consent.
10. Changes
We may update this notice. The current version and its date are always on this page. Last updated: 17 October 2026.