Welcome to AutoFinder.je. This Privacy Policy explains how Granite Digital ("we", "us", or "our") collects, uses, and protects your personal information when you use our website autofinder.je (the "Website") and our related services.
Granite Digital is the data controller responsible for your personal data. We are committed to protecting your privacy and ensuring compliance with the Data Protection (Jersey) Law 2018 (the "DPJL") and the Data Protection Authority (Jersey) Law 2018.
By using our Website, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Who We Are
Granite Digital
Jersey company registration number: 36294
Email: info@autofinder.je
For all data protection enquiries, please contact us at info@autofinder.je.
2. Information We Collect
2.1 Personal information you provide
When you register for an account, list a vehicle, or use our communication features, we may collect:
- Contact information: name, email address, telephone number
- Account information: username, encrypted password, account preferences
- Vehicle information: vehicle details, descriptions, photographs, pricing
- Communication data: messages sent through our contact system
- Location information: parish or location data associated with vehicle listings
2.2 Technical information we collect automatically
- Device information: IP address, browser type, operating system, device identifiers
- Usage data: pages visited, time spent on the site, click patterns, referring URLs
- Cookies and similar technologies: as described in our Cookie Policy
3. Lawful Basis for Processing
We process your personal data under the following lawful bases set out in Article 8 of the DPJL:
- Performance of a contract (Article 8(b)): processing necessary to provide the services you have signed up for, including account creation, listing management, and communication facilitation.
- Legitimate interests (Article 8(f)): processing necessary for our legitimate interests in operating, securing, and improving the Website, including fraud prevention, analytics, and platform security. Our legitimate interests do not override your rights and freedoms.
- Consent (Article 8(a)): where you have given us specific consent, for example for non-essential cookies or marketing communications. You may withdraw consent at any time.
- Legal obligation (Article 8(c)): where we are required to process data to comply with applicable law.
4. How We Use Your Information
We use your personal information for the following purposes:
- To provide vehicle listing, search, and communication services
- To create and maintain your account
- To facilitate contact between buyers and sellers
- To respond to your enquiries and provide customer support
- To analyse usage patterns and improve our services
- To send service-related notifications (such as account updates or important changes)
- To send marketing communications, where you have consented
- To detect, prevent, and address fraud, security issues, and misuse of the Website
- To comply with applicable laws and respond to lawful requests from authorities
5. Information Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
We may share your information in the following circumstances:
5.1 Public listings
Vehicle details, photographs, parish location, and the contact methods you choose to display will be visible publicly on the Website.
5.2 Buyer and seller communications
When you respond to a listing or are contacted about a listing you have posted, your relevant contact details may be shared through our platform to facilitate the transaction.
5.3 Service providers
We use trusted third-party providers to operate the Website, including:
- Cloud hosting and storage providers
- Email and communication service providers
- Analytics providers
- IT support and security providers
These providers act as processors on our behalf and are bound by contractual obligations to protect your data and use it only for the purposes we specify.
5.4 Legal disclosures
We may disclose your information where required by law, court order, or to protect our rights, property, or the safety of our users or the public.
5.5 Business transfers
If Granite Digital undergoes a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you in advance of any such change affecting your data.
6. International Data Transfers
Your information may be transferred to and processed in countries outside Jersey, including within the United Kingdom, the European Economic Area, and other jurisdictions where our service providers operate.
Where data is transferred to a country that does not benefit from an adequacy decision recognised under Jersey law, we put in place appropriate safeguards, such as standard contractual clauses, to ensure your data receives an equivalent level of protection. You may contact us at info@autofinder.je for details of the safeguards applicable to a specific transfer.
7. Data Retention and Account Deletion
7.1 General principle
We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by law.
7.2 Specific retention periods
- Active account data: retained for the lifetime of your account
- Vehicle listings: retained while active and for a reasonable period after removal for audit and dispute purposes
- Communication logs: retained for up to 12 months
- Technical logs and analytics data: retained for up to 24 months
7.3 Inactive accounts
If your account remains inactive (no login activity) for a continuous period of 24 months, we will send a reminder email to the registered address. If you do not log in or respond within 30 days of that notice, we will delete your account and associated personal data.
7.4 Data backups
Deleted data may remain in our backup systems for up to 30 days before permanent deletion. During this period it is not accessible for active use and is held solely for disaster recovery purposes.
7.5 Closing your account
You may close your account at any time by contacting us at info@autofinder.je.
8. Your Rights
Under the DPJL, you have the following rights in relation to your personal data:
- Right of access: to obtain confirmation that we process your data and to request a copy of that data.
- Right of rectification: to request correction of inaccurate or incomplete data.
- Right of erasure (also known as the right to be forgotten): to request deletion of your personal data, subject to legal obligations that may require us to retain it.
- Right to restrict processing: to request that we limit our processing of your data in certain circumstances.
- Right to data portability: to request a copy of your data in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible.
- Right to object: to object to processing based on legitimate interests, and to object to direct marketing at any time.
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
- Rights related to automated decision-making: we do not use your personal data for solely automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any of these rights, please contact us at info@autofinder.je. We will respond to your request within one month. We may extend this period by up to two further months for complex or numerous requests, in which case we will inform you of the extension and the reasons within the original one-month period.
Right to complain
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Jersey Office of the Information Commissioner:
Jersey Office of the Information Commissioner
2nd Floor, 5 Castle Street
St Helier, Jersey JE2 3BT
Telephone: +44 (0) 1534 716530
Email: enquiries@jerseyoic.org
Website: jerseyoic.org
We would, however, appreciate the chance to address your concerns directly before you approach the Commissioner, so please consider contacting us first.
9. Data Security
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures, including:
- Encryption of data in transit (TLS) and at rest where appropriate
- Access controls limiting personal data access to authorised personnel on a need-to-know basis
- Regular review and updating of our security systems
- Secure storage on reputable cloud platforms with industry-standard certifications
- Routine monitoring for security incidents and unauthorised access
- Staff training on data protection obligations
While we use commercially reasonable measures to protect your information, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security.
Breach notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Jersey Office of the Information Commissioner within 72 hours where required by law. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify affected users without undue delay.
10. Cookies and Tracking Technologies
We use cookies and similar technologies to operate and improve the Website. For full details of the types of cookies we use, their purposes, and how to manage them, please see our Cookie Policy.
11. Third-Party Services and Links
Our Website may contain links to third-party websites or integrate with third-party services such as analytics providers and social media platforms. These third parties have their own privacy policies, and we are not responsible for their practices. We encourage you to review their policies before providing personal information.
12. Marketing Communications
Where you have given consent, we may send you marketing communications about our services or relevant offers. You may opt out of marketing communications at any time by:
- Clicking the unsubscribe link in any marketing email
- Updating your account preferences
- Contacting us at info@autofinder.je
Opting out of marketing communications will not affect service-related communications necessary for the operation of your account, such as transactional emails, security notices, or important account updates.
13. Children's Privacy
Our services are not intended for children under the age of 17, and we do not knowingly collect personal information from children under 17. If you believe we have collected information from a child under 17, please contact us at info@autofinder.je and we will take steps to delete it promptly.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make changes, we will post the updated policy on the Website and update the "Last Updated" date at the top.
For material changes, we will notify you by email or through a prominent notice on the Website before the changes take effect. Your continued use of the Website following the effective date constitutes acceptance of the revised policy.
15. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Granite Digital
Email: info@autofinder.je (please use the subject line "Privacy Policy Inquiry")
We will respond to your enquiry within 30 days.