Last updated: 17 September 2026
OvonOne takes the privacy and security of personal information seriously. This Privacy Notice explains how we collect, use, store and share personal information when you use our services or when your information is provided to us in connection with products and services offered through the OvonOne platform.
It also explains your rights under UK data protection law.
1. Who we are
OvonOne is operated by Ovon One Limited, a company registered in England and Wales under company number 16842434.
Our registered office is:
Ovon One Limited
C4DI Suite 4, Building 1
31-38 Queen St
Kingston upon Hull
HU1 1UU
United Kingdom
For the purposes of UK data protection law, Ovon One Limited acts as a data controller where we determine how and why your personal information is processed.
In some circumstances, another organisation using the OvonOne platform may be the controller of your personal information and we may process information on its behalf. Where this applies, that organisation's own privacy notice may also apply.
If you have any questions about this Privacy Notice or how we use your personal information, you can contact us at:
Email: privacy@ovon.co.uk
Post:
Ovon One Limited
C4DI Suite 4, Building 1
31-38 Queen St
Kingston upon Hull
HU1 1UU
United Kingdom
2. Information we collect
The information we collect depends on the products or services you use and how you interact with us.
It may include:
- your name, address and contact details, including telephone number and email address;
- date of birth and other information used to identify you;
- vehicle information, including registration number, make, model, mileage and other vehicle details;
- information about the vehicle you are purchasing or own;
- information about a vehicle dealer, broker or other business through which you obtain a product or service;
- details of products and services you purchase, apply for or enquire about;
- payment and transaction information;
- finance application or eligibility information where you choose to access a finance-related service;
- warranty, service plan, breakdown or other automotive product information;
- claims information and supporting documents where applicable;
- communications with us, including emails, messages and telephone calls;
- customer service and complaint information;
- technical information relating to your use of our websites and services, such as IP address, browser information, device information and activity logs;
- information required for fraud prevention, security, identity verification or regulatory purposes; and
- any other information you choose to provide to us.
We will only collect information that is reasonably necessary for the relevant purpose.
3. How we obtain your information
We may obtain personal information:
- directly from you;
- from a vehicle dealer, broker or other business with which you are dealing;
- when you use an OvonOne website, application, form or other service;
- when you apply for or purchase a product or service through our platform;
- from product and service providers where necessary to administer a service;
- from finance providers where necessary in connection with an application or transaction;
- from identity verification, fraud prevention or regulatory services;
- from publicly available sources where appropriate; and
- through communications you have with us.
Where another organisation provides your information to us, that organisation is responsible for ensuring that it has an appropriate lawful basis for doing so.
4. How we use your information
We may use your personal information to:
- provide and administer our services;
- process enquiries, quotations, applications and transactions;
- register and administer warranties, service plans, breakdown products and other automotive products;
- facilitate applications for finance or payment products that you choose to use;
- provide information to relevant product, service or finance providers;
- administer claims;
- verify your identity;
- communicate with you about your products, services, applications or enquiries;
- provide customer support;
- investigate and respond to complaints;
- maintain appropriate business, financial and regulatory records;
- detect and prevent fraud, misuse and security incidents;
- monitor, maintain and improve the security and reliability of our systems;
- comply with our legal and regulatory obligations;
- establish, exercise or defend legal claims;
- analyse and improve our products and services; and
- send marketing communications where permitted by law.
We do not sell your personal information.
5. Our lawful bases for processing
UK data protection law requires us to have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on one or more of the following lawful bases.
Contract
Processing may be necessary to provide a product or service you have requested or to take steps at your request before entering into a contract.
Legal obligation
Processing may be necessary for us to comply with a legal or regulatory obligation.
Legitimate interests
We may process information where it is necessary for our legitimate business interests or those of another organisation, provided those interests are not overridden by your rights and interests.
These interests may include:
- operating and improving our services;
- providing customer support;
- maintaining accurate business records;
- preventing fraud;
- protecting our systems and services;
- managing complaints and disputes; and
- understanding how our products and services are used.
Consent
In some circumstances we may rely on your consent, for example for certain types of marketing.
Where we rely on consent, you can withdraw it at any time.
6. Finance applications and finance providers
Where you choose to apply for or use a finance or payment product through our services, we may provide your information to the relevant finance provider so that it can assess and administer your application.
The finance provider will generally process the information it receives as a separate data controller and will have its own privacy notice explaining how it uses your information.
Depending on the product, a finance provider may carry out identity, affordability, eligibility, fraud prevention or credit-related checks.
We do not make those decisions on behalf of an independent finance provider unless we expressly tell you otherwise.
You should read the privacy information provided by the relevant finance provider before proceeding with an application.
7. Who we share information with
Where necessary and appropriate, we may share personal information with:
- vehicle dealers and brokers;
- warranty, service plan, breakdown and other product providers;
- finance and payment providers;
- repairers and other organisations involved in administering a claim or service;
- identity verification and fraud prevention providers;
- payment processing providers;
- professional advisers, including accountants, auditors, insurers and legal advisers;
- technology and hosting providers that help us operate our services;
- regulators, law enforcement agencies, courts and other public authorities where required or permitted by law; and
- prospective purchasers, investors or advisers in connection with a corporate transaction, subject to appropriate confidentiality and data protection safeguards.
We only provide organisations with the personal information reasonably required for the relevant purpose.
Where a third party processes personal information on our behalf, we require appropriate contractual and security protections to be in place.
Where we share information with another organisation acting as an independent controller, that organisation is responsible for its own use of the information.
8. How long we keep your information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, regulatory, accounting, audit and dispute-resolution requirements.
For records relating to customer products, transactions and associated services, we will generally retain relevant information for up to seven years following the end of the relevant customer relationship, product or transaction.
Some information may be retained for a shorter or longer period where this is necessary because of a legal or regulatory requirement, an ongoing complaint, claim or investigation, or another legitimate reason.
Our systems apply retention and deletion controls designed to ensure that information is removed or anonymised when it is no longer required.
9. Where your information is stored
Our primary production systems and customer data are hosted in the United Kingdom.
Some organisations we work with may operate internationally. If personal information is transferred outside the UK, we will ensure that appropriate protections are in place as required by UK data protection law.
These may include an adequacy decision recognised by the UK Government or appropriate contractual safeguards.
10. How we protect your information
We use appropriate technical and organisational measures to protect personal information against accidental or unlawful loss, alteration, disclosure, access or destruction.
These measures include controls relating to:
- access to systems and information;
- authentication and user permissions;
- encryption;
- secure hosting and infrastructure;
- system monitoring and logging;
- backups and resilience;
- software development and change management;
- staff confidentiality;
- staff data protection and information security training;
- incident management; and
- appropriate supplier and third-party controls.
Our staff receive data protection and information security training based on guidance from the Information Commissioner's Office (ICO), supplemented with training relevant to our business, systems and activities.
No system can guarantee absolute security, but we regularly review our controls and take appropriate measures to manage information security risks.
11. Telephone calls and communications
Telephone calls and other communications with us may be recorded or retained where appropriate for purposes including:
- customer service;
- training and quality assurance;
- maintaining an accurate record of communications;
- resolving disputes and complaints;
- preventing fraud; and
- meeting legal or regulatory requirements.
Where calls are recorded, we will provide appropriate notification.
Recordings are retained in accordance with our retention requirements and access is restricted to authorised personnel.
12. Marketing
We may contact you about products or services where you have asked us to do so or where we are otherwise permitted to contact you under applicable law.
Where consent is required, we will ask for it.
You can opt out of marketing communications at any time by using the unsubscribe option included in the communication or by contacting us at privacy@ovon.co.uk.
Opting out of marketing will not prevent us from sending important service communications relating to a product, application or service you use.
13. Cookies and website analytics
Our websites may use cookies and similar technologies to operate correctly, remember preferences, maintain security and understand how our services are used.
Where required, we will ask for your consent before placing non-essential cookies.
Further information about the cookies we use will be provided through our website and cookie consent controls.
14. Your data protection rights
Depending on the circumstances, UK data protection law gives you rights in relation to your personal information.
These may include the right to:
- ask us for a copy of the personal information we hold about you;
- ask us to correct inaccurate or incomplete information;
- ask us to delete your information in certain circumstances;
- ask us to restrict how your information is processed;
- object to certain types of processing;
- receive certain information in a portable format;
- withdraw consent where processing is based on consent; and
- raise concerns about decisions made solely through automated processing where applicable.
These rights are not absolute and may not apply in every circumstance.
To exercise your rights, contact us at privacy@ovon.co.uk.
We may need to verify your identity before responding to a request.
We aim to respond to data protection requests promptly and will respond within the timescales required by applicable data protection law.
You will not normally have to pay a fee to exercise your data protection rights.
15. Automated decision-making
Some services available through our platform may involve automated processes.
Where an independent finance provider uses automated decision-making to assess an application, the finance provider is responsible for that decision and its privacy notice will explain how the process works and what rights you have.
Where Ovon One Limited carries out automated decision-making that produces legal or similarly significant effects, we will provide any additional information required by data protection law.
16. Children's information
Our services are not generally intended to be used directly by children.
We do not knowingly collect personal information directly from children unless this is necessary for a particular service and there is an appropriate lawful basis for doing so.
17. Personal data breaches
We maintain processes for identifying, investigating and managing personal data breaches and security incidents.
Where a personal data breach occurs, we will assess its impact and notify the Information Commissioner's Office and affected individuals where required by law.
We maintain appropriate records of personal data breaches and relevant investigations.
18. Complaints and concerns
If you have concerns about how we have handled your personal information, please contact us first so that we can investigate.
Email: privacy@ovon.co.uk
Post:
Ovon One Limited
C4DI Suite 4, Building 1
31-38 Queen St
Kingston upon Hull
HU1 1UU
United Kingdom
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).
You can find information about your rights and how to make a complaint on the ICO's website.
19. Changes to this Privacy Notice
We may update this Privacy Notice from time to time to reflect changes to our services, legal requirements or how we process personal information.
The latest version will be published on our website. The date at the top of this Privacy Notice shows when it was last updated.