GDPR & Privacy Policy

KS Supplied is an independent vehicle sourcing brokerage based in the United Kingdom. We help private clients locate, negotiate and import bespoke vehicles into the UK, handling VAT, duty and delivery where applicable. For any privacy question, contact us at cars@kssupplied.co.uk. For the purposes of UK GDPR, KS Supplied is the data controller of the personal data you provide.

When you submit a sourcing brief or contact us, we may collect:

• Identity and contact details — name, email, phone number.
• Vehicle preferences — make, model, year, colour, interior, mileage, budget and any notes.
• Reference material — images you upload or links to visual references you select.
• Delivery and compliance details where relevant to a UK import (address, ID for HMRC/DVLA where required).
• Correspondence you exchange with us by email or messaging.

We do not knowingly collect special category data and we ask that you do not send it to us.

• Contract & pre-contract steps — to respond to your brief, source vehicles, negotiate with sellers and arrange UK delivery.
• Legitimate interests — to operate, secure and improve our service, and to keep records of enquiries.
• Legal obligation — to comply with HMRC, VAT, import, anti-money-laundering and DVLA requirements linked to importing and registering vehicles in the UK.
• Consent — for optional marketing follow-ups, which you can withdraw at any time.

We only share what is necessary to complete your sourcing instruction. Recipients may include franchised and independent dealers, private sellers, auction houses, inspection agents, shipping and logistics providers, customs brokers, HMRC, DVLA, insurers, finance providers you nominate, and our professional advisers. We do not sell your data.

Because vehicles are frequently sourced from the EU, EEA, Japan, the US and the Middle East, your data may be transferred outside the UK to sellers, transporters and inspection agents in those regions. Where we do so, we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

Enquiries that do not lead to a sourcing instruction are kept for up to 24 months. Records tied to a completed sourcing and import are kept for at least 6 years to satisfy HMRC/VAT and other legal record-keeping obligations, then deleted or anonymised.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data or complete incomplete data.
• Ask us to delete your data where there is no ongoing lawful reason to keep it.
• Object to, or ask us to restrict, certain processing.
• Request a portable copy of data you provided to us.
• Withdraw consent at any time for anything processed on that basis.

To exercise any of these, email cars@kssupplied.co.uk. We aim to respond within one month.

We use reasonable technical and organisational measures to protect your data, including encrypted transport, access controls and vetted third-party processors. No transmission is entirely secure, so please avoid sending sensitive documents (passports, bank details) by unsecured email — we will request them via a secure channel when needed.

Our website uses only the strictly necessary storage required to run features you interact with (for example, saving your draft sourcing brief in your browser). We do not use advertising or cross-site tracking cookies.

If you are unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

We may update this policy from time to time. Material changes will be reflected on this page with an updated date at the top.