Privacy Statement

Version update date: Version effective date:
[ 8th JULY 2026 ] [ 8th JULY 2026 ]

Omoda & Jaecoo UK Limited (“O&J”, “we” or “us”) is committed to protecting your personal information and respecting your privacy. This Privacy Policy gives you information about how O&J collects and uses your personal data through your use of this website, including any data you may provide when you registered with us or sign up to our newsletter or purchase a product or service.

This Privacy Statement applies to Omoda & Jaecoo UK Limited and to all websites, products and services operated by us under our automotive brands in the United Kingdom, unless a separate privacy notice is expressly provided for a particular product or service. References in this Privacy Statement to “O&J”, “we”, “us” or “our” mean Omoda & Jaecoo UK Limited, regardless of the brand through which you interact with us.

Who is responsible for data processing?

Omoda & Jaecoo UK Limited is the data controller and responsible for your personal data described in this Privacy Statement.

Our registered office is:

Omoda & Jaecoo UK Ltd

Building 7 Chiswick Park

566 Chiswick High Road

London

W4 5YG, United Kingdom

We are registered with the UK Information Commissioner’s Office (“ICO”) under Registration number ZB868638.

We have appointed a Data Protection Officer (“DPO”) to oversee compliance with applicable data protection legislation. If you have any questions about this Privacy Statement or wish to exercise your rights in relation to your personal data, please contact our DPO using the contact details set out in Section 9.

Scope of this Privacy Policy

This Privacy Statement applies to the processing of personal data collected by O&J through our websites and customer interactions.

This Privacy Statement does not apply to:

  • The processing of personal data when you use our vehicle;
  • Your use of third-party services in our website. The data processing of these services is subject to their individual privacy policies, which we strongly advise you to read carefully;
  • Your use of mobile apps provided by O&J;
  • Our employee personal data or candidate recruiting practices.

Content

In this Privacy Statement, we will explain to you:

1. What personal data we collect and how do we use it?

Personal data means any information relating to an identified or identifiable natural person (data subject). We may collect, use, store and transfer different kinds of personal data about you during the following circumstances and to make our products and services as effective as possible, and to protect our IT systems from attacks and other illegal activities.

We process your personal data based on one or more of the following legal grounds:

  • your consent;
  • performance of a contract with you;
  • taking steps at your request before entering into a contract;
  • compliance with a legal obligation; or
  • our legitimate interests, provided those interests are not overridden by your rights and freedoms.

We will not store, process, or share your data with parties beyond those specified unless we have a valid legal basis to do so.

O&J has a legitimate interest in processing personal data to provide, maintain and improve our products and services. This includes responding to customer enquiries, handling issues or complaints, and conducting analysis to better tailor our offerings to meet customer needs.

Where you act on behalf of a business, organisation or other corporate entity, we may process your business contact details on the basis of our legitimate interests for the purposes of managing our business relationship, providing information about our products and services, and, where permitted by applicable laws, sending you relevant business-to-business marketing communications. You have the right to object to the processing of your personal data for direct marketing purposes at any time.

To communicate with you:

Data Processing Purpose Type of Personal Data Collected Legal Basis for Processing
To fulfil requests or service appointments you make to us, including test drives, after-sale service and event appointments (via our website appointment page, email or our call centre) Your contact information, including your first name, your last name, phone number, and email address (note: we may contact you to confirm your booking or request)

Recordings and transcripts of calls and communications between us

Performance of a contract with you or necessary in order to take steps at your request prior to entering into a contract

Where you have provided your consent for recordings

[For business-to-business sales and marketing support activities directed at corporate subscribers, recordings and transcripts of calls and communications is carried out on the basis of our legitimate interests, including for quality assurance and training purposes, unless you object to such processing.]

To respond to any feedback, requests, questions, or complaints you may have regarding our products and services (in person, online, telephone, email, our call centre, etc.) Your contact information, including your first name, your last name, your phone number, and your email address.

Communication and interactions information, including your request details.

Recordings and transcripts of calls and communications between us.

Performance of a contract with you or necessary in order to take steps at your request prior to entering into a contract

 

Necessary for our legitimate interests: to administer customers inquiries and requests, to improve customer service quality and customer satisfaction

Where you have provided your consent for recordings

To participate in surveys or our offline event about your experience with our products and services Account information

Your contact information, including your name, email address

Survey or feedback details

Necessary for our legitimate interests: to understand, analyse and improve customer experience
Sign up for marketing communications or stay informed with our lasted news Your basic information, including your first name, your last name, phone number, email address Where you have provided your consent.
To record the call made by you to

O&J ‘s official call centre

service, or the conversation held

through the chat service between

O&J ‘s and you, for the purpose

of assessing and improving the

quality of the services we offer to

our customers, as well as

addressing your requests,

training our employees to provide

optimal service, and having a means of evidencing customers

All information discussed during

the call, including:

-Voice

– First and last name

-Email address

– Phone number

– Vehicle chassis

-number (VIN)

-Vehicle registration/licence number

Legitimate interest of OMODA in recording the call and everything

discussed therein.

To realize our product functions and services, and to understand and improve our products and services:

Data Processing Purpose Type of Personal Data Collected Legal Basis for Processing
To find a dealer near you Your contact information, including your postal code and precise location. Where you have provided your consent.
To understand and analyse website UI behaviour and usage, so as to improve our services Analytics data (aggregated data on UI behaviour, usage and analytics of website. Necessary for our legitimate interests: to understand, analyse and improve customer experience

Where you have provided your consent (website cookies)

To ensure information security:

Data Processing Purpose Type of Personal Data Collected Legal Basis for Processing
To detect and defend against unauthorized access to data, and to enhance information security Device information

Network activity information

Necessary for our legitimate interests: to protect the confidentiality, integrity, and availability of IT systems
To upload crash logs for troubleshooting Relevant crash logs Where you have provided your consent

Other circumstances

Data Processing Purpose Type of Personal Data Collected Legal Basis for Processing
To demonstrate compliance with regulatory requirements Contact information

Order information

Vehicle information

Necessary to comply with a legal obligation

O&J has a legitimate interest in processing personal data to provide products or services to our customers which include responding to queries, issues or complaints as well as conducting analysis to tailor our products and offering to our customers.

2. What third-party services do we use?

To provide and improve our websites and services, we use a number of trusted third-party service providers. These providers may process personal data on our behalf in accordance with their own privacy notices and, where applicable, under contracts require them to process personal data only on our instructions and in accordance with applicable data protection laws.

Where these services use cookies or similar technologies, they will only be activated where you have provided your consent where required by applicable law.

We are not responsible for the collection or use of personal data by third party services, and we recommend that you read the applicable terms and conditions (and any relevant privacy statements/policy/notice) carefully before using such services and make your own choice after ensuring that you fully understand the rules governing process of your personal data.

If you have any questions about the process of your personal data by a specific third party, please contact that third party directly.

The table below provides information on the third parties we might engage for the processing of your personal data, if any:

Third-Party Service Purpose and Use Link to Third-Party’s Privacy Policy
Cookie Bot by usercentrics Purpose: Cookiebot is used to manage cookie consent and compliance with data protection regulations, including GDPR. It collects data on user preferences and consents related to cookies and tracking technologies.

 

Data Collected: Cookiebot may collect information such as the user’s consent status, cookie preferences, and interactions with consent banners or pop-ups.

 

Usage: This data helps us ensure that we only place cookies on your device that you have explicitly consented to. Cookiebot’s compliance tools help us provide transparency about the cookies we use and enable you to manage your cookie preferences.

Privacy Policy (Cookiebot)
Google Analytics Purpose: Google Analytics is used to track and analyse user behaviour on our website. This includes collecting data on page views, session duration, bounce rates, traffic sources, and user interactions.

Data Collected: Google Analytics collects information such as IP addresses, device information, browser type, location data, and usage patterns.

Usage: The data collected helps us understand how users interact with our website, assess the performance of our content and features, and make improvements to enhance the user experience. The data may also be used for reporting and analysis.

Google Privacy Policy

Marketing Platform Privacy Policy

Mapbox Purpose: Mapbox is used to provide interactive maps and location services on our website. It may collect data on user interactions with the maps and location-based features.

Data Collected: Mapbox may collect data such as IP addresses, location data, device information, and interactions with maps.

Usage: This data helps us offer accurate and relevant location-based content and features.

Mapbox Privacy Policy
Google Maps API Purpose: Google Maps API is used to integrate Google Maps and related services into our website. It may collect data on user interactions with the maps and location-based services.

Data Collected: Google Maps API may collect data such as IP addresses, location data, and user interactions with maps and other map-related features.

Usage: The data collected is used to provide users with map and location-based services, such as showing their current location or finding nearby places of interest. The data may also be used for reporting and analysis to improve the services.

Google Developer

 

Google Developer (map)

Driftrock Purpose: Driftrock is used to process and manage customer leads and enquiries securely.

Data collected: First Name, Last Name, Email, Phone Number, Postcode, Model of interest, opt-in permissions and test drive interest.

Use: Driftrock validates leads and sends customer leads/enquiries to their nearest OMODA & JAECOO retailer based on the postcode entered on the contact forms, or direct to the brand’s customer service team.

Driftrock Privacy Policy

The categories of personal data processed by these providers vary depending on the service being used and may include contact details, technical information, location information, website usage information and marketing preferences.

3. With whom will we share this data?

3.1 Group Companies

As part of an international automotive group, we may share personal data with our affiliated companies where necessary to support our business operations, provide our products and services, improve customer experience and administer our internal business activities.

Such processing is carried out only where there is an appropriate lawful basis under applicable data protection legislation.

3.2 Services providers and business partners as data processors:

We may share personal data with carefully selected service providers and business partners who support our business operations.

These organisations process personal data on our behalf or, where appropriate, as independent controllers in accordance with applicable data protection legislation.

Categories of providers Legal Basis for Processing
Authorised retailer(s) (and its sub-processors) Personal data is transferred to authorised retailer(s) for the purpose of communication and administration of the handover of cars (if applicable).
Marketing and advertising suppliers To assist, operate and fulfil services with marketing services or with digital advertising.
Cloud service providers To enhance vehicle function and provide cloud service.
Authorised product partners and service providers Personal data is transferred to authorised product partners and service providers for the purpose of communication and administration of supporting products and services (if applicable).

3.3 Law enforcement and government authorities

To fulfil our legal obligations, we may be required to disclose information in response to subpoenas, court orders, or lawful requests from government authorities conducting investigations. This includes compliance with law enforcement requirements, regulatory inquiries, and the verification or enforcement of our policies and procedures. We may also disclose information in emergency situations to prevent or halt potentially illegal, unethical, or legally actionable activities. When we receive a request for personal data from a law enforcement authority, we assess the necessity and proportionality of the requested information.

4. How do we transfer your data outside your region?

In principle, the personal data we collect is stored in the countries of your place of residence or within the UK, your data will be stored at our data centre located in the UK.

We, as an international company, share your personal data with group companies, subcontractors, and business partners worldwide. Specifically, we transfer personal data for IT-support, hosting services, maintenance, and customer service.

Whenever we transfer your personal data out of the UK to countries which have laws that do not provide the same level of data protection as the UK law, we always ensure that a similar degree of protection is afforded to it by ensuring that the following safeguards are implemented:

We use specific standard contractual terms approved for use in the UK which give the transferred personal data the same protection as it has in the UK, namely the International Data Transfer Agreement. To obtain a copy of these contractual safeguards, please contact us at privacy@omodaauto.co.uk

5. What rights do you have in relation to your personal data?

Under applicable data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”), you have a number of rights in relation to your personal data.

These rights are not absolute and may only apply in certain circumstances.

5.2 Right to access your personal data

You have the right to request information about the personal data we hold regarding you. Upon request, we will provide you with a copy of your personal data.

5.3 Right to rectification

You may request from us the rectification of incorrect or incomplete personal data concerning you. We make reasonable efforts to keep personal data in our possession or control, which are used on an ongoing basis, accurate, complete, current and relevant, based on the most recent information available to us.

5.4 Right to restriction

You may request from us the restriction of processing of your personal data, if:

  • You contest the accuracy of your personal data, for the period we need to verify the accuracy;
  • The processing is unlawful, and you request the restriction of processing rather than erasure of your personal data;
  • We no longer need your personal data for the processing purpose, but you require them for the establishment, exercise, or defence of legal claims; or
  • You object to the processing while we verify whether our legitimate grounds override yours.

5.5 Right to portability

You have the right to receive your personal data provided to us and, where technically feasible, request its transfer to another organization. This right applies if we process your personal data through automated means, based on your consent or for the performance of a contract you are a party to. Your personal data must have been provided by you, and this right should not adversely affect the rights and freedoms of others. You can receive your personal data in a structured, commonly used, and machine-readable format. The transmission of your personal data to another organization is subject to technical feasibility.

5.6 Right to erasure

You may request that we erase your personal data where one of the grounds set out in Article 17 UK GDPR applies.

However, we may retain certain personal data where continued processing is necessary, including for:

  • compliance with legal obligations;
  • the establishment, exercise or defence of legal claims;
  • archiving purposes in the public interest; or
  • scientific, historical or statistical purposes where permitted by law.

5.7 Right to object

You have the right to object, at any time, to the processing of your personal data based on our legitimate interests or the legitimate interests of a third party, provided that the processing is not based on your consent. If you exercise this right, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or if the processing is necessary for legal claims. If you object to the processing, please let us know if you also wish for your personal data to be erased.

5.8 Right to be informed

You have the right to be informed about the collection and use of your personal data. We have prepared this Statement for this purpose, and you will be informed of any changes to this Statement.

5.9 Right to lodge a complaint

You have the right to lodge a complaint with your local data protection supervisory authority. However, we would appreciate it if you could contact us first so we can try to solve your issue – you can find our contact details in Section 9.

6. How long do we retain your data?

We retain your personal data only for as long as is reasonably necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting and reporting obligations.

Where appropriate, we may retain personal data for longer periods where necessary to establish, exercise or defend legal claims, to investigate complaints or where we reasonably believe litigation may arise.

When personal data is no longer required, we will securely delete it or anonymise it so that it can no longer be associated with you.

When determining appropriate retention periods, we take into account:

  • the nature and sensitivity of the personal data;
  • the purposes for which it was collected;
  • the nature of our relationship with you;
  • applicable legal, regulatory and contractual requirements; and
  • the potential risk of harm arising from unauthorised use or disclosure.

O&J maintains an internal Records Retention Policy that sets out the retention periods applicable to different categories of personal data. If you would like further information about how long we retain your personal data, please contact our Data Protection Officer using the contact details set out in Section 13.

7. How do we protect your data?

We maintain appropriate technical and organisational measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

These measures include appropriate physical, technical and organisational safeguards designed to maintain the confidentiality, integrity and availability of personal data.

Although we take reasonable steps to protect personal data, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.

Where we become aware of a personal data breach, we will respond in accordance with applicable data protection legislation and, where required, notify the relevant supervisory authority and affected individuals.

8. Privacy of children

We do not knowingly collect or use any personal data from children (as defined by applicable law) without prior, verifiable consent which is given or authorized by the holder of parental responsibility over the child. We do not knowingly allow children to order our vehicles, communicate with us, or use any of our online services.

If you become aware that a child has provided us with personal data, please contact us (privacy@omodaauto.co.uk). We will take all reasonable measures to delete the information as soon as possible and to not use such information for any purpose, except where necessary to protect the safety of the child or others as required by law.

9. How can you contact us and make a request?

If you have any questions about this Privacy Statement, how we process your personal data or wish to exercise any of your data protection rights, please contact our Data Protection Officer:

Data Protection Officer

Email: dpo@omodaauto.co.uk

We aim to respond to requests without undue delay and, in any event, within one month of verifying your identity, unless a longer period is permitted by applicable law.

We take your privacy seriously and aim to respond to you within one month or within the timeline specified by the relevant local privacy protection law, after confirming your identity. If you believe that we have not adequately addressed your complaints or concerns, you have the right to lodge a complaint with a competent data protection authority.

ICO Contact Details:

Helpline: 0303 123 1113.

Website: https://ico.org.uk/make-a-complaint/

10. How will we update this Privacy Statement?

We may update this Privacy Statement, for example, to reflect changes in our business operations and measures for protecting personal information. If we make changes to this Privacy Statement, we will notify you. Where changes to this Privacy Statement significantly impact the nature of our data processing or have a substantial effect on you, we will provide sufficient advance notice, allowing you the opportunity to exercise any applicable rights.

Any questions 0800 031 8657