Privacy
policy.

The controller responsible for the processing described in this policy is:

Legal name

Jordan Jackson trading as 4x4 House

Trading name

4x4 House

Postal address

Roxbury, Penybont, Llandrindod Wells, Powys LD1 5UA

Privacy email

support@4x4house.co.uk

Telephone

07813 575836

Contact us using these details if you have a privacy question or want to exercise a data-protection right.

This policy covers website visitors, account holders, private sellers, prospective buyers, people making enquiries, customers purchasing paid advertising or managed-selling services, people shown in submitted content, and anybody who contacts or reports an issue to us.

4x4 House services are intended for adults. You must be at least 18 to create an account, advertise a vehicle or purchase a service.

Depending on how you use 4x4 House, we may collect:

• Identity and account data: name, username, account ID, password stored in protected form, profile details and verification status.
• Contact data: email address, telephone number, correspondence address and general vehicle location such as town and county.
• Advert data: vehicle details, price, VAT status, description, history, photographs, video, documents, edits, approval records and publication status.
• Enquiry data: the buyer's name, email, telephone number, message, vehicle of interest and subsequent correspondence with us.
• Service and transaction data: services ordered, quotations, bookings, invoices, amounts, payment status and transaction references. Card information is normally handled directly by the payment provider and is not stored by us.
• Managed-selling data: appointment details, access instructions, photography location, seller-supplied records, created media and communications about the vehicle.
• Moderation and verification data: reports, evidence of identity, ownership or authority, fraud indicators, complaints and records of decisions. We will ask only for information reasonably needed and may request redacted copies.
• Usage and technical data: IP address, device and browser information, approximate location derived from IP, pages viewed, searches, saved vehicles, referring page, date and time, error logs and cookie choices.
• Marketing data: subscription status, communication preferences and interaction with permitted marketing messages.

We do not intentionally request special-category information such as health, religion or political beliefs. Please do not send it unless genuinely necessary. Reports may occasionally contain allegations of criminal conduct, which we process only where necessary and lawful to protect users, establish legal claims or cooperate with authorities.

• directly from you when you browse, register, advertise, enquire, purchase or contact us;
• from another user, such as a seller receiving an enquiry or somebody reporting an advert;
• from devices, cookies, server logs and analytics tools;
• from payment, hosting, email, security and marketplace service providers;
• from public sources such as vehicle records, public adverts, business records and social media where relevant to moderation or verification; and
• from police, regulators, insurers, professional advisers or fraud-prevention bodies where lawful.

If somebody gives us your information, they must have a lawful reason to do so. Where UK GDPR requires it, we will provide privacy information within the applicable period.

Where we rely on legitimate interests, we consider the purpose, necessity and effect on your rights. You can ask for more information about that assessment. Where we rely on consent, you may withdraw it at any time without affecting earlier lawful processing.

We do not use personal information to make solely automated decisions that produce legal or similarly significant effects.

Vehicle adverts are public. They may appear in search engines, social posts, emails and third-party platforms where a seller has ordered or agreed to distribution. Public information may be copied or cached by others beyond our control.

The seller chooses the public contact method. We recommend displaying only the minimum needed and giving a town and county rather than a precise address. Where our enquiry form is used, the buyer's submitted contact details and message are passed to the relevant seller so they can respond. Buyers must use that information only for a genuine enquiry.

Removing an advert prevents future display under our control, but does not guarantee immediate deletion from search-engine caches, social reposts, recipient inboxes or third-party websites.

We share information only where needed for the purposes above, including with:

• the seller receiving a genuine buyer enquiry, or the buyer receiving information chosen by the seller;
• WordPress.com and Automattic for hosting, infrastructure, security and site statistics;
• website, marketplace and form software used to operate 4x4 House, including Motors, Elementor and Contact Form 7 where applicable;
• Google Analytics where analytics consent has been given;
• email, file-storage, backup, security and technical-support providers;
• payment providers, banks, accountants and professional advisers for paid services;
• photographers or other approved contractors delivering a managed service;
• social networks and third-party advertising platforms where publication or promotion has been agreed;
• insurers, rights holders, police, courts, regulators and public authorities where disclosure is lawful and necessary; and
• a buyer or successor if the business is genuinely sold or reorganised, subject to confidentiality and applicable law.

Service providers acting for us may use the information only under appropriate instructions and safeguards. Some named providers also process information for their own purposes under their own privacy notices.

We do not sell personal information.

Some technology providers may process information outside the United Kingdom, including in the United States. Where UK law requires a safeguard, we use providers relying on an applicable UK adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses or another lawful safeguard. You may ask us for further information about the relevant protection.

We keep information only for as long as needed for its purpose, including legal, accounting, fraud-prevention and dispute requirements. Our normal starting points are:

We may anonymise information so it can no longer identify anybody and use that anonymous information for statistics and service improvement.

We use proportionate organisational and technical measures designed to protect personal information, including access controls, password protection, software updates, backups, secure connections and limited access according to role. No internet service can guarantee absolute security.

You are responsible for using a strong, unique password and keeping it confidential. Tell us promptly if you suspect unauthorised access, a fraudulent enquiry or accidental disclosure.

Account notices, enquiry notifications, advert-expiry reminders, moderation messages and information needed to deliver a service are service communications, not optional marketing.

We send promotional email only where we have consent or another permission recognised by electronic-marketing law. Every promotional email will provide a simple way to unsubscribe. You can also contact us. Unsubscribing from marketing does not stop essential messages about your account, advert or purchased service.

We do not provide your contact details to unrelated businesses for their own marketing.

Depending on the circumstances, you may have the following rights. They are not absolute and lawful exemptions can apply.

To exercise a right, contact the privacy email in section 1. We may need proportionate information to confirm your identity. We normally respond within one month and do not charge unless a request is manifestly unfounded or excessive.

You can make a data-protection complaint electronically through our contact page or privacy email. We will acknowledge it within 30 days, make appropriate enquiries, keep you informed where necessary and communicate the outcome without undue delay.

You may also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint/. We would appreciate the opportunity to address the issue first.

4x4 House is not directed at children and does not knowingly permit anybody under 18 to advertise, enquire as a contracting buyer or purchase a service. Contact us if you believe a child's information has been submitted improperly.

We may update this policy when our services, providers or legal duties change. The date at the top identifies the current version. We will give appropriate notice if a material change affects how existing information is used.

Questions, complaints and rights requests should be sent to the privacy contact in section 1 or through our contact page.