Last updated: 27 January 2026
1. Who We Are
This website is operated by Cocoon Vehicles.
Website: https://cocoonvehicles.co.uk
Data Controller: Cocoon Vehicles Limited
Contact Email: enquiries@cocoonvehicles.co.uk
Registered Address: Please see Footer
We are responsible for deciding how your personal data is collected, used, and protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
Identity data (such as name and date of birth)
Contact data (such as email address, telephone number, and postal address)
Technical data (such as IP address, browser type, device information)
Usage data (such as pages viewed and interactions with the website)
Application and enquiry data
Financial and credit-related data (where relevant)
Comments and user-generated content
3. How We Collect Personal Data
We collect personal data through:
Website forms and applications
Comments submitted on the site
Cookies and similar technologies
Embedded third-party content
Credit reference and identity verification checks
Direct communication with you
4. Lawful Basis for Processing
We process personal data under one or more of the following lawful bases:
Contractual necessity – to provide services you request
Regulatory obligation – where processing is required to meet financial services or regulatory requirements, including fraud prevention and affordability assessments
Legal obligation – to comply with applicable laws
Legitimate interests – to operate, protect, and improve our business, provided these interests are not overridden by your rights
Consent – where you have explicitly provided it (such as for certain cookies or marketing activities)
You may withdraw consent at any time where consent is the lawful basis.
5. Credit Reference and Affordability Checks
To help assess applications, prevent fraud, and meet legal and regulatory obligations, we may obtain information about you from credit reference agencies (CRAs).
We obtain this information via Creditsafe, which uses its data partner TransUnion to supply consumer credit and identity data.
Creditsafe Business Solutions Limited
Authorised and regulated by the Financial Conduct Authority
FCA Firm Reference Number: 742313
TransUnion International UK Limited
Authorised and regulated by the Financial Conduct Authority
FCA Firm Reference Number: 805757
The information received may include data relating to your identity, credit commitments, payment history, and public record information. This data is used for legitimate business and regulatory purposes, including creditworthiness assessment, identity verification, and fraud prevention, in accordance with applicable data protection laws.
Credit reference information is used as part of our assessment processes. Decisions are not based solely on automated processing unless otherwise stated, and credit reference data does not guarantee approval or refusal of any application.
Further information about how these organisations process personal data can be found in their privacy notices:
Creditsafe Privacy / Transparency Notice:
https://www.creditsafe.com/gb/en/legal/transparency-notice.html
TransUnion Credit Reference Agency Information Notice (CRAIN):
https://www.transunion.co.uk/legal/privacy-centre/pc-credit-reference
TransUnion Bureau Privacy Notice:
https://www.transunion.co.uk/legal/privacy-centre/pc-bureau
6. Cookies
If you leave a comment on our site, you may opt in to saving your name, email address, and website in cookies for convenience. These cookies last for one year.
When you visit our login page, a temporary cookie is set to check whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
Login cookies last for two days, screen preference cookies last for one year, and “Remember Me” login cookies persist for two weeks.
Cookies may also be used for analytics and marketing purposes. You can manage cookie preferences through your browser settings or our cookie banner.
7. Services We Use
We use the following third-party services which may use cookies or collect usage data:
Bing Webmaster Tools (Conversions)
Facebook Pixel
Google Analytics
Google Search Console
Insiteful
Outbrain
Taboola
YouTube embeds
These services are used to support website performance, marketing effectiveness, and compliance monitoring where applicable.
8. Embedded Content from Other Websites
Pages on this site may include embedded content (such as videos or images). Embedded content behaves in the same way as if you visited the third-party website directly and may collect data or use cookies.
9. Comments
When visitors leave comments, we collect the data shown in the comments form, the visitor’s IP address, and browser user agent string to help with spam detection.
An anonymised hash of your email address may be shared with the Gravatar service.
Gravatar privacy policy: https://automattic.com/privacy/
10. Media Uploads
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS), as visitors can download and extract this data.
11. Data Sharing
We may share personal data with:
Service providers acting on our instructions
Credit reference and fraud prevention agencies
Professional advisers, auditors, or regulators
Technology, analytics, and hosting providers
We do not sell personal data.
12. International Data Transfers
We may transfer personal data to recipients or service providers located outside the UK and/or the European Economic Area (EEA).
Where such transfers take place, we ensure appropriate safeguards are in place, including:
UK-approved standard contractual clauses
International data transfer agreements
Transfers to countries recognised as providing an adequate level of data protection
13. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to meet legal or regulatory obligations.
Website and enquiry data is retained for operational and compliance purposes
Credit reference and affordability data is retained only for as long as required and then securely deleted
Comment data is retained unless removal is requested
14. Your Data Protection Rights
You have the right to:
Access your personal data
Request correction of inaccurate data
Request erasure of your data
Restrict or object to processing
Request data portability
Withdraw consent at any time
To exercise your rights, please contact us using the details above.
15. Complaints
If you have concerns about how we handle your personal data, you have the right to complain to the supervisory authority:
Information Commissioner’s Office (ICO)
https://www.ico.org.uk
16. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page.