Privacy Policy — VroomVest

Last updated: 24/12/2025

 1.⁠ ⁠Who We Are

VroomVest is operated by AA (Holdings) Limited, trading as VroomVest

Company number: 57866

VroomVest provides editorial content and digital guides relating to performance and collectible cars.

For the purposes of data protection law, we are the Controller of the personal data you provide to us.

We comply with The Data Protection (Bailiwick of Guernsey) Law, 2017, which incorporates principles equivalent to the EU GDPR.

Use of this website is also governed by our Terms and Conditions.

 2.⁠ ⁠Your Privacy

This policy explains:

• What personal data we collect

• Why we collect it

• How we use it

• When we may share it

• Your rights under Guernsey data protection law

We will only process your personal data where we have a lawful basis to do so under Guernsey data protection law — for example, where processing is necessary to perform a contract with you, to comply with a legal obligation, where you have given consent, or where we have a legitimate interest that is not overridden by your rights.

We only collect personal data that is necessary to operate the website, deliver digital content, and communicate appropriately with users.

 3.⁠ ⁠Personal Data We Collect

We collect personal data directly from you when you:

• Use our website

• Purchase a guide

• Complete a contact form

• Subscribe to updates or communications

• Correspond with us

We may also receive limited data from third-party service providers such as payment processors, analytics tools, or email platforms.

Categories of data

a) Website & Contact Data

Name, email address, message content, and related correspondence.

Retention: As long as necessary to respond or manage the relationship.

Lawful basis: Legitimate interests or consent.

b) Purchases & Transactions

Name, email address, billing information, transaction records (we do not store full card details).

Retention: Transaction duration plus up to 7 years for legal and accounting purposes.

Lawful basis: Contract and legal obligation.

c) Marketing Communications

Name, email address, communication preferences, and interaction history (such as email opens or clicks, where used).

Retention: Until you unsubscribe or withdraw consent.

Lawful basis: Consent or legitimate interests.

d) Website Analytics & Technical Data

IP address, device type, browser data, and aggregated usage information collected via cookies or similar technologies.

Retention: Varies by tool.

Lawful basis: Consent, where required.

We will not keep personal data for longer than is necessary for the purposes for which it was collected, or as required by law.

We do not intentionally collect sensitive personal data.

 4.⁠ ⁠Cookies and Analytics

VroomVest uses cookies and similar technologies to:

• Enable essential website functionality

• Understand how the site is used in aggregate

• Improve performance and user experience

Some cookies are essential for the operation of the website. Non-essential cookies (such as analytics cookies) will only be used where consent is required and has been provided.

Further details about how we use cookies may be provided in a separate cookie notice or banner.

 5.⁠ ⁠Sharing Your Data

We do not sell personal data.

We may share personal data only where necessary, including with:

• Website hosting and IT service providers

• Payment processors

• Email and communication platforms

• Analytics providers

Where personal data is transferred outside the Bailiwick of Guernsey or the EEA, we ensure an adequate level of protection using mechanisms recognised under Guernsey data protection law, such as adequacy decisions or appropriate contractual safeguards.

 6.⁠ ⁠How We Protect Your Data

We use appropriate technical and organisational measures to protect personal data, including:

• Secure hosting

• Access controls

• Encryption where appropriate

• Confidentiality procedures

If a personal data breach occurs that may pose a risk to your rights or freedoms, we will notify you and the relevant supervisory authority where required by law.

 7.⁠ ⁠Your Rights

Under Guernsey data protection law, you have the right to:

• Access your personal data

• Request correction of inaccurate or incomplete data

• Request erasure in certain circumstances

• Restrict processing

• Object to certain processing, including marketing

• Request data portability

Where processing is based on consent, you may withdraw that consent at any time (for example, by using the “unsubscribe” link in marketing emails). Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

 8.⁠ ⁠Age and Intended Audience

This website is intended for users aged 18 and over.

We do not knowingly collect personal data from children.

 9.⁠ ⁠Territorial Note

Content on VroomVest is not directed at any person in a jurisdiction where accessing such content would be unlawful.

10.⁠ ⁠How to Contact Us

For privacy-related queries, please contact us via the VroomVest website contact form.

If you are not satisfied with how your personal data has been handled, you have the right to raise a concern with the relevant data protection authority.

11.⁠ ⁠Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements.

The most current version will always be available on the VroomVest website.

Registered Office:

AA (Holdings) Limited

5 Cedar Drive

St Peter Port

Guernsey

GY1 1SS

Company No. 57866