Chiltern Aston Centre
Website: https://chilternastoncentre.co.uk

Last updated: 2 July 2026

Chiltern Aston Centre (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data in a lawful, fair and transparent way. This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website or contact us.

1. Who we are

Chiltern Aston Centre is an Aston Martin dealership operating in the United Kingdom.

If you have any questions about this Privacy Policy or how we use your personal data, please contact us using the details published on our website.

2. What personal data we collect

We only collect personal data that you choose to provide to us, or that is provided to us in the course of our business relationship with you.

This may include:

  • Name
  • Email address
  • Telephone number
  • Company name
  • Job title
  • Postal address
  • Vehicle and service-related information
  • Enquiry details
  • Any other information you include when you contact us or complete our optional sign-up form

We do not intentionally collect special category data unless you choose to provide it to us.

3. How we collect your data

We may collect personal data when you:

  • Complete our optional sign-up form
  • Contact us by email, telephone or other means
  • Enquire about our vehicles, services or offers
  • Become a customer or prospective customer
  • Interact with us in the course of our legitimate business activities

4. Why we use your personal data

We use personal data only where we have a lawful basis to do so. In most cases, we process personal data because it is necessary for our legitimate interest as a dealership.

We may use your personal data to:

  • Respond to enquiries and provide information you request
  • Manage our relationship with customers and contacts
  • Maintain internal records and customer support history
  • Provide aftersales, servicing, sales and related dealership services
  • Send relevant business communications where appropriate
  • Improve our services and maintain accurate records
  • Comply with legal and regulatory obligations

5. Our lawful basis for processing

Under UK GDPR, we rely primarily on the following lawful basis:

Legitimate interests

We process personal data because it is necessary for our legitimate business interests, including but not limited to, operating and managing our dealership, maintaining customer, responding to enquiries, and providing sales and aftersales services.

Where we rely on legitimate interests, we ensure that we consider and balance our interests against your rights and freedoms.

Legal obligation

In some circumstances, we may need to process or retain personal data to comply with legal, accounting, tax, warranty, consumer protection, or regulatory requirements.

Consent

If we ever rely on consent for a specific activity, you will be told clearly at the time, and you may withdraw that consent at any time.

6. Cookies and tracking

We do not use cookies or similar tracking technologies on our website, other than any strictly necessary technical functionality required for the site to operate.

If this changes in the future, we will update this Privacy Policy and, where required, provide appropriate notice or consent options.

7. Who we share your data with

We do not sell your personal data.

We may share personal data with trusted third parties where necessary for legitimate business purposes, including:

  • IT and website service providers
  • Email and communications providers
  • CRM or database providers
  • Suppliers, subcontractors and other car sales operations where relevant
  • Professional advisers such as accountants, auditors or legal advisers
  • Regulators, law enforcement, or other authorities where required by law
  • Manufacturers, finance providers, or other partners where needed to handle your enquiry or provide a service you have requested

Where we share data with third parties, we take reasonable steps to ensure it is handled securely and in accordance with applicable data protection law.

8. International transfers

If any of our service providers store or process personal data outside the UK, we will ensure that appropriate safeguards are in place to protect your information in accordance with UK GDPR.

9. How long we keep your data

We keep personal data only for as long as necessary for the purposes for which it was collected, including for legal, regulatory, tax, accounting or record-keeping requirements.

The exact retention period may depend on:

  • The nature of your relationship with us
  • The type of data involved
  • Any legal obligations that apply
  • Whether we still have a legitimate business need to keep it

When personal data is no longer needed, we will delete it or anonymise it securely.

10. How we protect your data

We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration or destruction.

These measures may include access controls, secure storage, staff training, and restricted use of personal data to those who need it for legitimate business purposes.

11. Your rights

Under UK GDPR, you have rights in relation to your personal data, including the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data in certain circumstances
  • Object to processing based on legitimate interests
  • Request restriction of processing in certain circumstances
  • Request data portability where applicable
  • Withdraw consent where processing is based on consent

If you wish to exercise any of these rights, please contact us using the details on our website.

12. Right to object

Where we process your personal data on the basis of legitimate interests, you have the right to object to that processing. We will consider your request and stop processing unless we have compelling legitimate grounds to continue, or we need to retain the data for legal reasons.

13. Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, legal requirements or how we process personal data. Any updated version will be posted on this website with a revised “Last updated” date.