Privacy Policy

Privacy Policy

Last updated: 1 December 2025

This Privacy Policy explains how Giant Automotive Group (including GA Derby Ltd, Giant Automotive Ltd, and GAFFA Ltd) collects, uses, and protects personal information.

1. Who We Are

Giant Automotive Group is a group brand representing several operating companies. Each company acts as a separate data controller when interacting with customers.

Operating companies:

GA Derby Ltd – used car supply

Giant Automotive Ltd – public car‑buying service

GAFFA Ltd – private network operations (non‑public)

2. Information We Collect

We may collect the following information when you contact us, use our sites, or complete a valuation:

Name and contact details

Vehicle information (registration, mileage, condition, photos)

Communications you send us

Basic website analytics and cookies

3. How We Use Your Information

We use your information to:

Provide valuations and respond to enquiries

Arrange vehicle purchases or sales

Maintain internal records and compliance

Improve our services and website experience

4. Sharing Your Information

We only share information with:

The relevant operating company handling your enquiry

Professional service providers (e.g., IT, legal, accounting), where required

Law enforcement where legally required

We never sell your data.

5. Data Retention

We keep information only for as long as necessary for legal, operational, and accounting purposes.

6. Your Rights

You may request:

Access to your data

Correction of errors

Deletion where applicable

Restriction or objection to processing

To exercise your rights, contact: info@giantautomotivegroup.com.

7. Security

We use appropriate technical and organisational measures to safeguard personal information.

8. Contact

For privacy queries: info@giantautomotivegroup.com.