Leasing Gorilla

Privacy Policy

Who we are and how to contact us

Leasing Gorilla is a trading style of CBVC Vehicle Management Ltd.

CBVC Vehicle Management Ltd (CBVC), incorporated and registered in England and Wales with company number 06750312 whose registered office is at c/o Johnson Tidsall Ltd, 81 Burton Road, Derby DE1 1TJ. CBVC is authorised and regulated by the Financial Conduct Authority register number 688562.

The data controller of any personal information can be contacted in writing to: Managing Director, CBVC Vehicle Management Ltd, 2 Faraday Court, 1st Avenue, Centrum 100, Burton on Trent, DE14 2WX, or via email at dataprotection@cbvc.co.uk

We are dedicated to the protection of your privacy, this policy is meant to help you understand what data we collect, why we collect it and what we do with it.

Personal data is any piece of information that can be used to identify a person (whether directly or indirectly). CBVC processes the personal data of persons if a (potential) customer relationship exists, and of persons who, for example, are employees of (potential) corporate clients.

These statements generally apply to your relationship with CBVC in conjunction with your use of our services and products and forms the basis of our commitment to openness and transparency with your data.

(1) Collecting your Personal Information

  • We will obtain personal data about you, including but not limited to:
    • your name, email, postal address, telephone number(s) i.e. your contact details, whenever you complete an online form or make a telephone enquiry;
    • in general, all data required by CBVC to offer you its products or services within the scope of and on the basis of the agreement concluded between CBVC and you/your employer.
  • We collect and store information when you visit our website and, this may include using cookies and similar technologies to monitor site performance and build a profile of our users. When you interact with our services we may identify, for example:
    • how many times you visit;
    • what pages you go to within our website(s);
    • your IP address;
    • the originating domain name of your internet provider;
    • identity your browser or device.
  • Cookies do lots of different jobs, like helping us understand how our website is being used, letting you navigate between pages efficiently, remembering your preferences, and generally improving your browsing experience. Cookies can also help ensure marketing you see online is more relevant to you and your interests.
  • You can set your browser to block or disable cookies (see the 'Help' menu of your browser to see how), but doing this will mean certain personalised features of our websites can't be provided to you and other parts may also not work properly.

To find out more about cookies in use on this site click here.

(2) Use of your Personal Information

We use your personal information for the following purposes:

  • to facilitate the provision of products and services you or your employer have requested;
  • to help us identify you and any accounts you or your employer hold with us;
  • undertaking credit checks (with your specific permission on each occasion);
  • administration;
  • research, statistical analysis and behavioural analysis;
  • customer profiling and analysing your preferences;
  • marketing;
  • fraud prevention and detection;
  • billing and order fulfilment;
  • improving our services.

(3) Disclosure of your Personal Information

CBVC does not and will not sell, rent or trade your personal information. We only forward your personal data to third parties; (i) in cases specified in these conditions, (ii) in accordance with the agreement concluded with you or your employer, and (iii) in the cases specified below:

  • to third parties that process your personal data on our behalf (e.g., hosting partners);
  • to third parties that supply products or services to you on our behalf within the context of your use of agreement with CBVC, e.g., bodyshops, garages, tyre centres, fuel card suppliers, insurance providers, electric vehicle charging companies, suppliers of replacement transport options;
  • to third parties that perform credit worthiness checks or record payment behaviour on our behalf (with your specific permission on each occasion);
  • to public authorities, courts, police authorities and judicial services that request the data from us or when we are required to do so by law;
  • to your employer – as the lessee of the vehicle that you are using;
  • to any third party to which we assign our rights and obligations.

(4) Access to your Personal Information

You have the right to request access to any personal data we may hold about you and, to ascertain the accuracy of that information. To apply for a ‘Subject Access Request’, an individual must:

  • make the request in writing to: Managing Director, CBVC Vehicle Management Ltd, 2 Faraday Court, 1st Avenue, Centrum 100, Burton on Trent, DE14 2WX, or via email at dataprotection@cbvc.co.uk
  • supply information to prove who they are to eliminate risk of unauthorised disclosure;
  • supply appropriate information to help us locate the required information.

We allow you to challenge the data that we hold about you and, where appropriate, you may have the data; erased or rectified/amended. If your employer has an agreement who CBVC has a responsibility to process your data, we request that you first discuss this with your employer.

We may reject requests that are unreasonably repetitive, require disproportionate technical effort (for example, developing a new system or fundamentally changing an existing practice), risk the privacy of others, or would be extremely impractical (for instance, requests concerning information residing on backup systems).

If you have any questions about how we process personal information, please get in touch with us by writing to: Managing Director, CBVC Vehicle Management Ltd, 2 Faraday Court, 1st Avenue, Centrum 100, Burton on Trent, DE14 2WX, or via email at dataprotection@cbvc.co.uk

(5) Security of your Personal Information

CBVC strictly protects the security of your personal information and honors choices for its intended use. We carefully protect your data from loss, misuse, unauthorised access or disclosure, alteration, or destruction. Your personal information is never shared outside the company without your permission, except under conditions explained above. Inside the company, data is stored on secure servers that are housed in controlled environments to protect against loss, misuse or alteration of your information.

All countries in the European Economic Area (EEA), which includes the UK, have similar standards of legal protection for your personal information. We may run your accounts and provide other services from centres outside the EEA, such as the United States, that do not have a similar standard of data protection laws to the UK. We shall take all measures that could reasonably be required to ensure that your personal data is processed in accordance with applicable legislation.

CBVC will only store your personal data for as long as is necessary for fulfilling the purpose for which the data was collected and for meeting legal, regulatory and/or internal requirements.

(6) Children’s Personal Information

CBVC do not knowingly collect any personal information from children/minors under the age of 18. If you are under the age of 18, please do not submit any personal information through our Services. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce this Policy by instructing their children never to provide personal information through our Services without their permission. If you have reason to believe that a minor under the age of 18 has provided personal information to us through our Services, please contact us, and we will use commercially reasonable efforts to delete that information. Subscribers are responsible for establishing policies for and compliance with applicable laws for the collection of personal information in connection with the use of our Services.

(7) Your Responsibilities

  • If you give us information about other individuals, you confirm that the other person has appointed you to act on his/her behalf and has agreed that you can:
    • give consent on his/her behalf to the processing of his or her personal or sensitive personal data for the purposes and reasons set out in this Policy; and
    • receive on his/her behalf any data protection notices.
  • You must not use any product, services or systems provided by us for any illegal purpose, or for accessing, receiving or transmitting any material deemed illegal, indecent, offensive or otherwise unacceptable under UK law and/or regulation.
  • All passwords and usernames allocated to you must be kept secret and must not be disclosed to anyone without our prior written authorisation.
  • You must not use any false identity in email or other network communications. You must not attempt or participate in the unauthorised entry or viewing of another user's account or into another system.
  • You must not use the services and/or systems or any part thereof for fraudulent activities, or to breach another organisation's or individual’s security. This is an illegal act and prosecution under criminal law may result.

(8) Legal grounds for processing Personal Information

By law, we must have a legal justification to process your personal information for the purposes described in this privacy notice.

We’ll process personal information for our legitimate interests, when we have a business reason to do so. This includes but is not limited to:

  • if we provide a service to you and need to fulfil a contract agreement e.g. a car lease, developing, improving and personalising our products and services;
  • enhancing our service and relationship (e.g. market research, business analysis, providing relevant service information);
  • developing and improving our administration, security systems and applications;
  • sharing it with third parties in the event of organisational change (e.g. if we bought or merged with another organisation);

If we need consent to process your personal information, we’ll ask you first. You can withdraw this consent any time.

(9) International transfers

In the event that we process personal information outside the UK, the processing in those locations is protected by UK and European data standards.

If the information you provide to us is transferred to countries outside the UK and the European Economic Area (EEA) by us or our suppliers, steps will be taken to make sure appropriate security measures are in place with the aim of ensuring that your privacy rights continue to be protected.

(10) Marketing

We work with selected partners to show you relevant online adverts on third-party websites and social media platforms. We also use personal information to identify the right audiences for our advertisements. The partners we work with don’t use your information for their own reasons, and we make sure they delete it once we’ve identified audiences.

We’ll send you marketing information by email, post, phone and/or SMS about information, products, services and discounts related to the products and services we offer, this includes business updates.

If you don’t want to receive marketing, you can tell us any time by emailing us at dataprotection@cbvc.co.uk

If you opt out of marketing, we’ll still send you important service information. We prepare campaign lists in advance so you may not stop receiving marketing communications immediately after opting out.

(11) Automated decision making and profiling

If you choose to get marketing information from us, we may use profiling and automated decision making to make our marketing more relevant, e.g. personalising the channels, marketing messages and the information you’re sent.

Where we make an automated decision that has a legal or substantially similar effect, you may request a team member to review that decision. We will consider your comments and assess whether the decision was made correctly.

(12) Communications

When you contact us, personal information that you give us will be recorded and stored on our systems.

Calls, SMS and Web Chats (digital communications) will be recorded.  This helps us improve our service, train our staff and to respond to complaints.

All communications will be in English. You can get documents from us in writing by contacting us.

(13) How long we keep Personal Information

When you interact with us via our website or email, we will keep your personal information for up to 6 (six) years. This is so that we can assist you with your query, maintain an audit trail, handle any complaints, for training and monitoring purposes and for business analysis to help us improve our services and tailor the content we present.

If you speak to us on the phone and we record the call, we’ll keep a copy of the recording for up to 6 (six) years to help us handle any complaints and for training and monitoring purposes.

In some cases, we may need to hold your information for longer than this if we have a valid reason to keep the data.

(14) Right to make a complaint

If you have any questions about the way we process personal data please contact us at business-admin@cbvc.co.uk

(15) Changes to this Statement

CBVC Vehicle Management Ltd reserves the right to update this statement.


Read our full data protection & security policy click here


Looking for an Electric vehicle... visit our dedicated EV website!

Visit CBVC Electrix

Talk to our specialists!