Privacy Policy
How we handle your data and cookies under UK GDPR and PECR.
We collect as little data as possible: our calculators run entirely in your browser, so the figures you enter never reach us. This policy explains what we do collect, why, your rights, and how to complain — in plain English, under the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations 2003 (PECR).
We are not a lender, broker, or data broker. We don't collect your income, address, or finance details, we don't build a profile of you to sell, and we don't pass your information to lenders or claims firms. The whole site is designed so the only thing that leaves your device is what's needed to load the page and (with your consent) measure how it's used.
What we collect — and what we don't
We collect anonymous analytics and, with your consent, advertising data — nothing you type into a calculator.
The numbers you enter into our tools — car price, deposit, APR, term — are processed entirely in your browser. They are not sent to our servers, not stored by us, and not passed to any third party. You can close the page and your figures are gone. This is a deliberate design choice: finance figures are sensitive, and the cleanest way to protect them is never to have them.
What we do collect is the minimum needed to run and improve the site: anonymous analytics about which pages are visited and for how long, and — only if you consent via our banner — the advertising cookies that fund the site. None of this identifies the figures you've calculated or the cars you've priced.
The legal bases we rely on
We rely on consent for analytics and advertising cookies, and on legitimate interests for the essential running of the site.
We don't process any special category data (Article 9) and we don't do solely automated decision-making with legal effects. Because we don't collect personal finance details, there's very little personal data about you on our systems at all.
- Consent (UK GDPR Article 6(1)(a) and PECR regulation 6): for analytics and advertising cookies that are not strictly necessary. You grant this via our consent banner and can withdraw it at any time.
- Legitimate interests (UK GDPR Article 6(1)(f)): for essential technical processing — serving pages, security, and remembering your cookie choice. These don't need consent because the site can't function without them.
Cookies and consent
Non-essential cookies for analytics and ads only load after you accept them in our consent banner.
When you first visit, our banner asks you to accept all cookies or choose 'Essential only', which blocks analytics and advertising cookies. We don't use cookie walls, we don't refuse access if you decline, and we don't rely on 'continued browsing equals consent' — PECR requires a positive, informed opt-in for non-essential cookies, and that's what the banner captures.
You can revisit your choice at any time via the cookie controls linked in the footer. See our cookie policy for the specific cookies, their purposes, and their lifespans. We operate under UK GDPR and PECR, and our consent mechanism follows the Information Commissioner's Office (ICO) guidance.
How long we keep data
We keep anonymous analytics for long enough to spot trends, and any consented advertising data is governed by our ad partner's retention rules — we don't keep personal data about you beyond what's needed to remember your cookie choice.
Because we don't collect personal finance details or build user profiles, retention is minimal. Analytics data is aggregated and anonymous, the cookie that remembers your consent choice persists until you clear it, and any advertising data sits with our ad partner under their published retention policy. If you email us, we keep your message only as long as needed to resolve your query.
Your rights
You have the right to access, correct or delete the limited data we hold, to object to processing, and to withdraw consent at any time.
To exercise any right, email hello@carfinancecalculator.uk. Because we collect so little, most requests take moments — there's no vast profile to export or delete. If you're unhappy with our response, you can complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
- Access: ask what data we hold about you (very little, by design).
- Correction: put right anything inaccurate.
- Erasure: ask us to delete the personal data we hold.
- Object: object to processing based on legitimate interests.
- Withdraw consent: turn off analytics and advertising cookies at any time, without giving a reason.
- Portability: receive any personal data you provided in a structured format.
How to exercise your rights — and how long it takes
Email hello@carfinancecalculator.uk with your request and we'll respond within one calendar month, as the UK GDPR requires — there's no form to fill in and no fee in almost all cases.
You don't have to use a particular form of words or cite the Act. A plain email saying 'please send me the personal data you hold about me' is a valid subject access request, and a request to delete, correct, or stop processing is handled the same way. We may ask for enough information to confirm who you are — usually an email reply from the address you contacted us from — but we won't ask for excessive identity documents.
The default deadline is one calendar month from the day we receive your request, and that can be extended by two further months where a request is complex or you've made several at once — in which case we'll tell you within the first month and explain why. Because we hold so little personal data by design, most requests are answered well inside the deadline, often within a few days. There's no fee, unless a request is manifestly unfounded or excessive (for example, repeated identical requests), in which case we may charge a reasonable fee or decline, and we'll explain our reasoning.
If you're unhappy with our response, the first step is to reply and ask us to review it — most disputes are resolved at that stage. If we still can't agree, you can complain to the Information Commissioner's Office (ICO) at no cost, and you retain the right to seek a judicial remedy through the courts. We'd always rather fix a problem directly, so please do contact us first.
Who we share data with — and who we don't
We don't share personal data with lenders, brokers, claims firms, or anyone who might use it to market financial products to you. The third parties we do use are limited to hosting, analytics and advertising, under written contracts.
Because the site doesn't collect finance details or build a profile of you, there is nothing to sell or pass on to a lender. We are not a credit broker, we are not a lead generator, and we do not receive commission for introducing you to any finance provider. If you see a lender or broker link on the site, it's an editorial reference to help your research, not a data-passing arrangement — clicking it takes you to their site, and what you do there is governed by their privacy policy, not ours.
The third parties we do rely on are operational: a hosting provider that serves the pages, an analytics provider that aggregates anonymous traffic data, and an advertising partner that serves and measures ads (only when you've consented). Each operates under a written contract that requires UK GDPR-compliant processing, and each is a data processor acting on our instructions rather than deciding how your data is used. We don't transfer personal data outside the UK unless a provider does so under an adequacy regulation or appropriate safeguards such as Standard Contractual Clauses, and we name those arrangements here if and when they apply.
We'll only disclose personal data where we're legally required to — for example, in response to a properly framed request from a law-enforcement or regulatory body. That has never arisen in the ordinary running of the site, and we'd push back on any request that was disproportionate or not properly grounded.
How we keep data secure
We keep what little data we hold to a minimum, store it behind access controls, and use HTTPS encryption for everything that moves between your browser and our servers.
The most meaningful security measure on this site is structural: because calculator inputs never leave your browser, there is no database of finance figures to protect or breach. The personal data we do hold — chiefly your consent choice and, if you email us, your message — sits behind provider access controls, with HTTPS encrypting data in transit between your device and our servers.
If something were to go wrong — a breach of personal data likely to result in a risk to your rights and freedoms — we would notify the ICO within 72 hours of becoming aware of it, as the UK GDPR requires, and we would tell you directly if the risk was high. We've not had such an incident, but the process exists so that, if one ever occurs, the timeline and the disclosure obligations are clear rather than improvised.
Children's privacy
The site is not directed at children under 16, and we don't knowingly collect their data.
Car finance agreements require you to be 18, so the calculators and guides are written for adults. We don't knowingly collect personal data from anyone under 16, and if you believe we have, contact us and we'll delete it. The UK GDPR sets 13 as the default age at which a child can consent to online processing in their own right, but because our content is aimed at adults and our calculators aren't designed for under-18s, we apply a higher threshold of 16 as a matter of good practice.
Changes to this policy and who we are
If we change how we handle data, we'll update this page and the date it was last reviewed — and we're the data controller for this site, so the responsibility for your data sits with us, not a contractor.
Any material change to what we collect or why will appear here, dated. We won't quietly broaden our data collection — and because the calculators process figures in your browser, the core promise (that your numbers never reach us) won't change regardless of how the rest of the policy evolves. For the cookie detail, see the cookie policy.
For the avoidance of doubt: CarFinanceCalculator.uk is the data controller for the personal data described in this policy, which means we decide why and how it's processed. Our hosting, analytics and advertising partners are processors acting on our instructions under contract. If you want to know more about who operates the site, see our about us page, and if you'd like to raise anything in writing, our contact page has the details — including how to reach the ICO if you'd rather go straight to the regulator.
Frequently asked
How long do you take to respond to a data request?
Do you share my data with lenders or brokers?
What happens if there's a data breach?
Do you store the figures I enter into the calculators?
How do I control cookies?
Do you sell my data to lenders?
What are my data rights?
What legal basis do you use for cookies?
Who regulates your data practices?
Sources
We cite regulators and official UK sources only.
- Information Commissioner's Office (ICO)ico.org.uk
Work out your next step
Independent calculators — pick the one that fits your situation.