This policy explains how Sandhurst Associates Limited uses personal information when you visit We Do Car Finance, make an enquiry or ask us to introduce you to a finance provider. We are the data controller for information we determine how and why to use.
Last updated: 26 July 2026.
Who we are
Sandhurst Associates Limited, company number 06958589, of Richard House, 9 Winckley Square, Preston, Lancashire, PR1 3HP. FCA reference 723591. ICO registration Z2032925. Contact support@sandhurstassociates.zendesk.com or 0800 808 5541.
Information we may collect
This can include identity and contact details; address history; date of birth; driving-licence information; employment, income and expenditure; bank and finance information; vehicle preferences; application and credit information; communications; device, cookie and website-use data; and support or accessibility needs you choose to share.
How we collect it
We collect information directly from you, from an authorised introducer, from lenders and brokers involved in your application, from credit reference and fraud prevention agencies, and from technical services used to operate the website.
Why we use it
- To respond to enquiries and provide the credit-broking service you request.
- To assess which panel provider may be relevant and pass an application for consideration.
- To verify identity, prevent fraud and meet legal or regulatory duties.
- To administer service, complaints, records and quality monitoring.
- To improve website security, performance and user experience.
- To send marketing where permitted, with a clear opt-out.
Our lawful bases
Depending on the activity, we rely on steps requested before a contract, performance of a contract, legal obligations, legitimate interests such as operating and improving our regulated service, and consent where required. Special-category information is only used where an additional lawful condition applies.
Who we share it with
With your agreement, we may share relevant data with selected lenders and credit brokers so they can assess your enquiry. We may also share data with credit reference and fraud prevention agencies; identity, affordability and vehicle-check providers; IT, hosting, communications and professional advisers; regulators, ombudsman services, law-enforcement bodies or courts where required; and another organisation if our business is lawfully reorganised. Each lender or broker is responsible for its own privacy information.
Credit searches and automated assessment
Eligibility may involve an automated or partly automated assessment. A soft search does not appear to other lenders as a credit application. A provider may perform a hard search before a final decision. Ask us for more information about a decision or the providers involved.
International transfers and security
Where a service provider processes data outside the UK, we use an approved transfer mechanism or other lawful safeguard where required. We use measures designed to protect information, but no internet transmission can be guaranteed completely secure.
How long we keep data
We keep personal information only for as long as needed for its purpose, regulatory and legal obligations, complaints or legal claims, and fraud prevention. Different records can have different periods. We may keep anonymised statistics.
Your rights
Depending on the circumstances, you may ask for access, correction, erasure, restriction, portability or objection, and may withdraw consent. Some rights are limited where law requires us to keep or use information. We may need to verify identity.
Marketing, the application form and cookies
Use our opt-out page or an unsubscribe control to stop marketing. Essential storage supports site operation. The application form is supplied by Enquiry Labs. Its scripts, storage and analytics technologies are not loaded until you choose to continue to the secure form after reading the information shown. You can contact us by phone or email without loading that form.
Complaints about data
Please contact us first so we can investigate. You may also complain to the Information Commissioner's Office at ico.org.uk.