Privacy Policy

Privacy Notice

Who are we and what personal data do we collect?

The BVRLA is the trade body for the vehicle rental and leasing sector. The BVRLA collects personal data about individuals working for or on behalf of its members.

What personal data is collected?

The data collected includes names, email addresses, telephone numbers and correspondence address.

What is the legal basis for processing?

On the basis that the processing is necessary due to the legitimate interests of ensuring the BVRLA member and its employees, as part of the membership subscription you are provided with industry information, advice, guidance, events and training.

Is the data shared with third parties?

The data will only be shared with third parties for the purposes of processing orders, when a training course or event is booked or where an individual working for or on behalf of a member is a nominated contact for our research providers.

How is the data processed?

The data will be used for the purposes of sharing press releases, processing a complaint, processing orders, booking training courses or events, keeping an employee updated on industry news, survey completion, training and events.

How long will the data be held for?

The data will be stored until we are advised that the individual is no longer working for or on behalf of a member or if the individual advises us that they no longer wish to be contacted by us. All communications from the BVRLA contains an unsubscribe option.

Where is the data stored?

The data is stored within the EU in an encrypted form as part of Dynamics365 which is a cloud-based Microsoft product.

How to complain?

If an individual is not happy with how we have processed their data, a complaint should be sent to

The BVRLA is committed to conducting its business activities with honesty and integrity and to maintain its high standards. Any suspected wrongdoing should be reported as soon as possible. In most cases any suspected wrongdoing can be reported directly to any BVRLA Employee or directly to the BVRLA’s Legal and Membership Director  at  Alternatively, any suspected wrongdoing  can be reported anonymously to a confidential helpline, the contact details are 020 3117 2520 or Disclosures will be treated confidentially and the BVRLA will make every effort to keep identities (where these are provided) secret and only reveal it where necessary to those involved in investigating disclosures. A copy of the BVRLA’s Whistleblowing policy is available on request.

Full Privacy Policy

The British Vehicle Rental and Leasing Association is committed to protecting and respecting your privacy. This policy sets out how we will use any personal data that we hold about you including any emails we may send to you.
The data controller is British Vehicle Rental & Leasing Association Ltd, River Lodge, Badminton Court, Amersham, Bucks, HP7 0DD.
Should you have any queries or concerns about the use of your personal data, please contact our communications team by writing to the address above, calling 01494 434747 or emailing .
The BVRLA is keen to ensure that it complies with its obligations under applicable Data Protection Legislation and that the privacy of visitors to its website is respected. This Privacy Policy describes the BVRLA's current practice with regard to personal data collected by the BVRLA from you directly and/or through the website.
1. 'BVRLA', 'we' or 'us' means the British Vehicle Rental & Leasing Association Limited.
Information you give us
2. Depending on the reason that you have contacted us or we have contacted you we will hold the following information about you:
  • Information you give to us – This is information about you that you give us when you wish to make use of our services by filling in forms on our website,, or by corresponding with us by phone, e-mail or otherwise.
  • It includes information you provide when you register to use our site; subscribe to receive information from us; and when you report a problem with our site. It also includes information you provide when you register a complaint about a member of BVRLA.
  • In addition, if you are acting in a business capacity, it may include information you provide if you apply for membership or continuation of membership of BVRLA.
Information we collect about you
3. When you visit the BVRLA website, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the website, we collect information about the individual web pages that you view, what websites or search terms referred you to the BVRLA website and information about how you interact with the website. We refer to this automatically-collected information as “Device Information.”
We collect Device Information using the following technologies:
  •   “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit
  •   “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
  •   “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.
4. We use Google Analytics to help us understand how our customers use the Site--you can read more about how Google uses your Personal Information here: .  You can also opt-out of Google Analytics here: .
Use of IP Addresses
5. An Internet Protocol (IP) Address is a set of numbers that is automatically assigned to your computer whenever you log onto your internet service provider or through your organisation’s local area network (LAN) or wide are network (WAN). Web servers automatically identify your computer by the IP address assigned to it during your session. We may collect IP addresses for the purposes of systems administration and to audit the use of our site. We do not ordinarily link a user’s IP address to personally identifiable information of that user. Each user’s session will be logged, but the user remains anonymous. However, we may use IP addresses to identify users of our site when we feel it is necessary to enforce compliance with the site’s terms of use, or to protect our service, site or other users.
Registration on the website
6. Registration on the website is only available to BVRLA members. If you have registered on our website we will collect personal data including: email address, telephone number, first name, last name and company name to complete the registration process. As part of the registration process we will add you to the BVRLA membership database.  The data is stored within the EU in an encrypted form as part of Dynamics365 which is a cloud-based Microsoft product.

7. You have a right to ask for a copy of your information and to correct any inaccuracies. Please email if you would like to know what if any personal information we hold about you.

8. This information is processed on the basis that it is in your legitimate interest as you have requested registration on the website.

9. We will retain your personal data until we are advised that you no longer wish to be registered on our website.
10. Depending on the reason for holding your data we will use the information we hold for the following purposes:
  • to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us;
  • to make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them;
  • to notify you about changes to our service;
  • where relevant, to provide customer support and assistance services;
  • to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
  •  as part of our efforts to keep our site safe and secure.
11. We will send members and their employee's industry news, information on training and events by email. These emails can be unsubscribed from at any time by clicking the unsubscribe link on the email or contacting

12. The data is processed on the basis of consent (where you have provided this) or that the processing is necessary due to the legitimate interests of the BVRLA member and its employees for us to provide industry information, advice, events and training.

13. The data will be stored until we are advised that the employee has left the member or the employee advises us that they no longer wish to receive information from us. Complaint data will be stored for a maximum of one year from the date of complaint.

14. The data is stored within the EU in an encrypted form as part of Dynamics365 which is a cloud-based Microsoft product.


15. Incoming and outbound calls are recorded.

When a call is recorded, we collect:

  • a recording of the conversation.
  • your telephone number.

16. Occasionally ‘special category’ personal information may be recorded where an individual voluntarily discloses health, religious, ethnicity or criminal information to support their request for advice and/or services.

Call recordings will be used:

  • to assist in quality monitoring of staff.
  • to investigate and resolve a complaint.

17. We may be required or permitted, under Data Protection legislation, to disclose your personal data without your explicit consent, for example if we have a legal obligation to do so, such as for:

  • law enforcement
  • fraud investigations
  • regulation and licensing
  • criminal prosecutions
  • court proceedings

18. Recordings are kept securely and confidentially, they will be kept for no longer than 24 hours unless required to be retained for an investigation, legal reasons or a potential safeguarding concern.

19. Where necessary or where we receive your explicit consent or where we have the right to do so, we will share your personal information with selected third parties including:
  • business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you for the provision of services that we agree to provide to you;
  • If we exchange email with you our email system is provided by Microsoft Corporation on behalf of BVRLA.
  • If we send you information about industry news, BVRLA training and events, your details are processed by "Mailjet via Pixl8" on behalf of BVRLA. You can view the Pixl8 Privacy Policy on their website.
  • If you register to attend a BVRLA event, your details are processed by Eventbrite Ltd in the United Kingdom on behalf of BVRLA.
  • We do not disclose information about identifiable individuals to our advertisers, but we will provide them with aggregate information about our users (for example, we may inform them that 500 users have clicked on their advertisement on any given day);
20. The BVRLA may disclose your Personal Data if it believes such action is necessary: to conform with a legal requirement or comply with the legal process including civil and criminal proceedings, protect and defend the rights or property of the BVRLA, enforce this Online Agreement, or to protect the interests of its users.
21. Unfortunately, the transmission of data via the internet is not completely secure. Although we will do our best to protect your personal data we cannot guarantee the security of your data transmitted to our site, and transmission is at your own risk. Once we have received your information we will use strict procedures and security features to prevent unauthorised access.
22. You have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.
23. We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
24. The ICO is the government body responsible for enforcing Applicable Data Protection legislation in the UK. Their website is located at
25. For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at or by mail using the details provided below: BVRLA, River Lodge, Badminton Court, Amersham, HP7 0DD, United Kingdom