Privacy Notice

Identity of the Data Controller

BMC (Grays) Ltd T/A Target Car Supermarket of Stifford Road, South Ockendon RM15 5NE is the Data Controller. Our ICO registration number is ZA118633.

Contact Details of the Data Protection Officer

Ivor Dalton is the Data Protection Officer and can be contacted at 01708 252 038 or

Purposes and legal basis for processing

Personal information provided by customers for finance applications will be processed on the lawful basis of legitimate interest. The legitimate interest being pursued is that in order to assist customers to secure finance their information must be processed and shared with third party finance lenders and brokers. We process only relevant information and information which you have provided us, which may include:

  • Personal and family details
  • Financial details
  • Employment details
  • Goods/Services provided

Customer details on invoices will be processed on the lawful basis of contract.

CCTV footage will be processed on the lawful basis of legitimate interests. The legitimate interest being that of keeping the property, employees and visitors safe and secure.

Calls may be recorded for the purposes of training and monitoring which is a legitimate interest.

Third party recipients of your data

In the course of business, we may pass your details on to third parties. To ensure that your data is processed in accordance with legislation we have undertaken due diligence vetting on third party recipients of your data. We will never sell your information to other organisations.

Information collected from you in finance applications will be passed onto finance lenders and brokers, who will conduct credit searches with various credit reference agencies, to secure finance approval on your behalf. Copies of documents provided by you may also be shared with these companies. Before passing your information onto these companies we will contact you to gain consent for your information to be shared. We will only pass on information which you have provided to us. These companies are:

  1. Castle Credit Finance - Privacy Policy
  2. Go Car Credit - Privacy Policy
  3. Rate Setter - Privacy Policy
  4. First Response - Privacy Policy
  5. Blue Motor Finance - Privacy Policy
  6. Mota Finance - Privacy Policy

Customer details and purchase information will be shared with a third party warranty company to register warranties. Autoprotect provides our third party warranty, click to see their privacy policy.

Customer details on invoices will be shared with third party accountants, Stephen Rosser & Co, to comply with HMRC financial. A copy of their Privacy Policy can be accessed at Stephen Rosser & Co.

Customer and potential customers details will be shared with our CRM system companies who provide secure services to store and process this information.

  1. FLG 360 - Privacy Policy
  2. Dragon 2000 - Privacy Policy

Customer and potential customer details will be shared with with our compliance company, Automotive Compliance, who oversee our compliance with financial regulations. Click to see their Privacy Policy.

Customer information may be shared with relevant council and police authorities on the basis of legal obligation when information is requested from these authorities.

Customer details provided in the online application form may be shared with our website provider as they capture customer details' on their server.

  1. - Privacy Policy
  2. Click Dealer- Privacy Policy

Retention periods

Unless otherwise advised, your personal data will be kept for a period of 7 years in order to comply with HMRC requirements.

CCTV footage will be kept for a period of 6 months.

Recordings of phone calls will be kept for 3 months.

Information gathered during your finance application will be stored for 6 months. You can write to us at and request this information be removed from our systems.

Your rights in regard to your personal data

As a Data Subject you have a number of rights in regard to your personal data and these include the right to request from BMC (Grays) Ltd access to and rectification or erasure of personal data or restriction of processing concerning your data or to object to processing as well as the right of data portability. More information on these rights can found on the website of Information Commissioner's Office at


Where we have processed personal data on the lawful basis of consent, you have the right to withdraw this consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Right to Complain

You have the right to complain to the Information Commissioner's Office at about any breach in regard to your data.

Provision of data

In most cases, the provision of your personal data is necessary to enter into a contract with us.

Changes to this policy

We reserve the right to amend or update this policy at any time. The latest version will be available on our website at and in our reception area.