Swap-a-Lease is a sole trader business operating as a marketing platform for car lease transfers in the United Kingdom. References to "we", "us", or "our" in this policy refer to the sole trader operating Swap-a-Lease.
We are the data controller for the personal information you provide to us through this website, registered with the Information Commissioner's Office (ICO), registration number ZA076400. If you have any questions about how we handle your data, please contact us at privacy@swap-a-lease.co.uk.
We collect the following categories of personal data:
• Identity and business data: your name, company name, company number, job role and fleet size • Contact data: email address and telephone number • Account data: your sign-in details (passwords are stored only as a one-way hash, never in readable form) • Listing data: vehicle and lease details, general location, photographs and descriptions that sellers submit, and any lease documents uploaded (seen only by us, never by other members) • Enquiry and Wanted data: the vehicles you are interested in and messages you send through the platform • Payment data: confirmation that a listing fee has been paid. Payments are made through PayPal and we never see or store your card or bank details • Referral data: which referral code, if any, brought you to the site • Technical data: basic server logs (such as IP address and browser type) kept by our hosting provider for security
If you were a member of the previous Swap-a-Lease website, we also hold the details you gave us then. We use them only to invite you to the new site where you agreed to receive emails, and you can ask us to delete them at any time.
We use your personal data for the following purposes:
• To register and maintain your account • To process listing fees and payments • To display the vehicle listing to prospective buyers • To facilitate contact between businesses on both sides • To send you service-related notifications (e.g. enquiries received) • To send you marketing communications where you have opted in • To improve our website and services • To comply with legal obligations • To detect and prevent fraud or abuse of our platform
Under UK GDPR and the Data Protection Act 2018, we rely on the following lawful bases:
• Contract: processing necessary to perform our contract with you (e.g. managing your account and listing) • Legitimate interests: improving our services, preventing fraud, and direct marketing to existing customers (where not overridden by your interests) • Consent: where you have opted in to marketing communications or non-essential cookies • Legal obligation: where we must process your data to comply with law
We share personal data only in the following circumstances:
• With other members, only as needed for a transfer: adverts show the vehicle, lease details and general location, but a seller's name and contact details are shared only with a business that has registered interest in that advert • With the service providers who run the platform for us: Supabase (database and sign-in), Vercel (website hosting), Resend (sending emails) and PayPal (listing fee payments). Each processes data only on our instructions • With the leasing company (funder) handling a transfer, where you ask us to help with it • With law enforcement or regulatory bodies if required by law
Some of these providers may process data outside the UK. Where they do, they use safeguards approved under UK data protection law, such as the UK International Data Transfer Addendum.
We do not sell your personal data, and we do not use advertising or tracking services.
We retain your personal data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required to retain it by law (e.g. financial records, which we retain for 6 years in line with HMRC requirements).
Inactive accounts with no activity for 3 years will be automatically deleted following 30 days' notice by email.
Under UK data protection law, you have the right to:
• Access your personal data (Subject Access Request) • Correct inaccurate data • Request erasure of your data ("right to be forgotten") • Restrict or object to certain processing • Data portability (receive your data in a structured, machine-readable format) • Withdraw consent at any time where processing is based on consent • Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, contact us at privacy@swap-a-lease.co.uk. We will respond within 30 days.
We do not use advertising, tracking or analytics cookies. The site stores a small amount of information in your browser so it works properly: keeping you signed in, and remembering a referral code for up to 90 days so any free listing you were offered is applied. See our Cookie Policy for details.
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All connections to the site are encrypted. Passwords are stored only as a one-way hash. Uploaded lease documents are private and visible only to us. Listing fees are paid through PayPal, so card and bank details never reach our systems.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice on our website. The date at the top of this page reflects the date of the most recent update.