You have downloaded the Lex Autolease app for iOS or Android (the "Lex App"), and by doing so have read and accepted the Lex App Terms.
The information in this Privacy Policy describes how we, Caura Ltd, use your personal data in connection with your use of our services (the "Caura Services") within the Lex App, as defined in the following:
We respect your privacy and protecting your information is paramount. We want you to be informed and empowered in respect to your privacy when you use the Lex App, so please read this Privacy Policy carefully before using any Caura Services.
Together with the Lex App Terms, this Privacy Policy sets out our views and practices regarding your personal data, how we collect, process and treat it, and the rights you have in relation to the protection of your personal data.
We are Caura Ltd (also referred to as "we", "us", "our" and "Caura"). We are registered in England and Wales under company number 11520538 and have our registered office at 1 Horse Guards Avenue, London, England, SW1A 2HU. Our registration number with the Information Commissioner’s Office (ICO) is ZA603130.
Lex Autolease Limited ("Lex") is registered in England under company number 1090741 and has its registered office at 25 Gresham Street, London EC2V 7HN.
Lex is a vehicle leasing and services company that provides vehicle leasing and related products and services to its customers. Lex is authorised and regulated by the Financial Conduct Authority (FCA) under reference number 723570.
"Caura Services" means the services provided by Caura to Lex App users as defined within the Lex App Terms.
"Data Protection Laws" means the UK General Data Protection Regulation, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003, and any other laws, regulations and secondary legislation which apply to the processing of personal data, as amended or updated from time to time.
"Data subjects" are users of Caura Services within the Lex App.
"Lease Information" means information relating to your vehicle lease with Lex that Lex shares with us to display in the Lex App, including your lease agreement details, rentals, payments, term, mileage and any associated charges.
"Lex App Module" means the finance module within the Lex App that surfaces your Lease Information and (where applicable) allows you to link through to Manage My Vehicle, apply for pre-eligibility (Personal Contract Hire customers only), search for available vehicles and offers, and select a vehicle for fulfilment by a broker.
"Lex Services" means vehicle leasing and any other vehicle or finance-related services that Lex may provide to you from time to time.
"IP address" is your Internet Protocol address which is a code that each device connected to the Internet has in order to identify that device.
"Personal data" is information about an identified or identifiable natural person that could allow a living person to be identified.
"Personal information" means any information that we have obtained from you or third parties in connection with a service or product provided to you that is held now or at any time in the future by us.
You may give us information about you when you use the Lex App and when you communicate with us. This includes information you input during registration by answering specific questions, providing us with feedback, participating in surveys, and when you report a problem.
The information you give us may include:
For Lex Services-related functionality we’ll collect and process information about you from a number of sources, including from Lex directly and from you where you provide it.
In order to pair your Lex lease in the Lex App and to enable the Lex App Module and any other Lex Services, we collect information from Lex to verify that you are a Lex customer and to surface data regarding your Lex lease and any associated services. This includes your Lease Information (for example customer identifier, agreement number, term, rental, mileage, excess mileage charges, contract type, contract start and end dates, payment dates and payment history, direct debit/account details, and any fines or penalty data), together with service, maintenance and repair data, and (where you apply for pre-eligibility) information about your employment status, residential status, annual income, rent or mortgage cost and any dependents.
If you choose to provide us with your vehicle registration number, we will use that information to obtain certain information related to you and your vehicle from various sources, such as the Driver and Vehicle Licensing Agency (DVLA), including tax due dates, MOT renewal dates and MOT results.
When you buy car insurance on Caura, MoneySuperMarket will share your personal details (including name and address) with Caura so that we can confirm your eligibility and ensure you receive the Excess Protection Offer. This data will not be used for any other purposes. View our excess protection terms here.
We will collect information during your use of the Lex App, including:
We may monitor or record telephone conversations or other communications between you and us.
We make sure we have appropriate legal bases on which to collect, use and share data about you. Our lawful bases may include:
All the personal data we collect, store, process or share is processed:
What we will never do. Rest assured, we will never sell your information to third parties.
Information we receive from other sources. We may combine this information (including information we receive from the DVLA and from Lex) with information you give to us and use this information and the combined information for the purposes set out above.
Recording telephone calls and other communications. We will use telephone recordings or transcripts of communications to check your instructions to us, analyse, assess and improve our services, for training and quality purposes and for the purposes of investigating any complaint you may make, or as evidence in any dispute between you and us.
We may need to disclose your data to others to facilitate the provision to you of the Lex App, and any additional services you request via the Lex App. Your data may be disclosed to the other entities as described below.
We may share your information with:
Disclosure of your personal information to a third party will only be made where they agree to keep your information confidential and will only be used for the specific purpose for which we provide it to them.
Please note that when you use the Lex App to make payments to third parties, you will be subject to the relevant service provider’s terms of use and privacy policy (which will be different from ours). We will show you these terms at the time of your purchase. The terms of use and privacy notice of Stripe, our payment service provider, may also apply. We encourage you to read these third-party terms of use and privacy policies carefully.
We will only keep your personal data for as long as necessary to carry out the relevant purposes set out in this Privacy Policy and in order to comply with our commercial, legal and regulatory obligations, following which we will securely destroy your personal information. For example, if you transact with us we will keep your information for as long as required to comply with financial reporting requirements (e.g. to HMRC). We may continue to use anonymised data (that does not identify you) which is aggregated with anonymised data of other users.
After termination of your account with us, we may continue to use anonymised data (that does not identify you) which is aggregated with anonymised data of other users. We use this aggregated data for data analysis, profiling and research purposes. We may also keep your email address to ensure that you no longer receive any communications from us. After termination of your account we will still keep financial records of any transactions you have made with us.
Where Caura processes your Lease Information or any personal data we process for Lex, we will only retain that data for as long as necessary to perform our obligations under our agreement with Lex, or for as long as required by applicable law, and we will return or securely destroy that data in accordance with Lex’s instructions at the end of our agreement with Lex.
We are committed to delivering the rights that data protection law provides to individuals. Please be aware that these rights are often not absolute, and exemptions may apply.
To exercise your rights, please contact us at lexsupport@caura.com.
Where Caura processes your Lease Information or any other personal data we process for Lex, requests relating to that data may need to be forwarded to Lex as the Data Controller.
We do our best to protect your personal data, but we cannot guarantee the security of your data transmitted to the Lex App; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access, loss or damage.
The Lex App may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates (including brokers and vehicle suppliers via the Lex App Module). If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies.
We may make changes to this Privacy Policy in future to reflect changes in the functionality of the Lex App or otherwise changes in the way that we process your personal information. Any changes we may make to our Caura Privacy Policy will be posted here and, where the changes are material or we decide it is appropriate, notified to you by push notification or any other manner we deem appropriate. Please check back frequently to see any updates or changes.
If you have a complaint relating to the processing of your personal data, please email dpo@caura.com.
We would appreciate the opportunity to address any concerns or complaints you may have with respect to the Lex App and our data processing practices. However, you are also entitled to lodge a complaint with a supervisory authority at any time. In the UK this would be the Information Commissioner’s Office.