Privacy Policy

This privacy notice explains how we, EVOGO Ltd (trading as Mike Brewer Motors), handle your information and how we process this.

When we say 'information', we mean any data we process that relates to you. This includes your personal data (like your name and contact details, and where applicable, sensitive information such as special category data and data relating to criminal convictions), company data (related to your business), and financial data (like your income and credit history).

By 'process', we mean any action we take with your information, including collecting, using, sharing, storing and deleting it.

We may update this privacy notice periodically to reflect changes in our data processing practices or legal requirements. We encourage you to review this page regularly to stay informed about how we manage your data.

Who We Are

Mike Brewer Motors is a trading style of EVOGO Ltd. We provide services to individuals, Limited Companies, Limited Liability Companies, Sole Traders and Partnerships in respect of vehicle leasing and vehicle sales.

Our Contact Details:

  • Head Office Address: 201 Upwell Street, Sheffield, S4 8AL
  • Telephone Number: 0114 250 6080
  • Email: [email protected]
  • ICO Registration Number: Z8096631 (You can verify our registration on the ICO website.)
  • Company Number: 4609642
  • FCA Number: 669005

Our Roles in Processing Your Data

Data Controller

EVOGO Ltd acts as the data controller for the personal data we collect directly from you for our own purposes. This includes:

  • Processing your application to intermediate finance for vehicle purchases.
  • Communicating with you about our services, including new products, safety and service-maintenance alerts and special offers (where you've consented).

Data Processor

We also act as a data processor when we handle your personal data on behalf of other organisations that determine the purposes and means of processing. This primarily includes:

  • Finance Providers (Lenders): We collect your data to facilitate their assessment and approval of your finance application. They will then act as data controllers for their own processing of your data.
  • Signable Ltd: We use Signable to securely send and receive documents, including proofs of identity and contracts for electronic signature, to facilitate finance intermediation. Signable processes this data on our behalf to provide this secure document transfer service.
  • Click Dealer: We use a Customer Relationship Management package (CRM) within Click Dealer Limited to manage all customer enquiries into the dealership. They handle data including personal identification (e.g. name, phone number and email address). Vehicle of interest information. Finance information including finance quotes. Interaction date (e.g. website enquiries, chat logs and form submissions). Marketing Preferences (e.g. customer consent).
  • Navigator (Dealer Management Services Ltd):  The Navigator system handles customer data such as Personal identifiers (e.g. name, address, phone number and email). All dealership vehicles including Registration, model, mileage and history. Finance information (e.g. Application details, customer finance settlements, payment records). Marketing Preferences and consents.
  • RAC Warranties (RAC Brand c/o Assurant General Insurance Limited): We use RAC Warranties to provide an extended guarantee on the eligible vehicles we sell. The RAC will process customer data such as name, address and contact information as well as vehicle information for the processing of a customer warranty plan document.
  • GardX (GardX Protection Ltd): If you choose to add GardX paint and interior protection to your new vehicle, your data will be processed to enable GardX to create a certificate for your vehicle. The data will consist of your name, address and contact information along with the vehicle details and their communications regarding customer support.
  • Nextbase Dash Cams (Portable Multimedia Ltd): If you choose to add a front and/or rear dash cam to your new vehicle, your information will be processed by Nextbase in order to facilitate the purchase and fitting of the unit(s). They will handle data including your Name, address and contact information. They will also process the dash cam details and arrange for an engineer to visit your home/work address for the fitting of the unit(s). If you use ""MyNextbase' Connect App, this will store location, vehicle, medical and emergency contact information (only shared to emergency services - not stored by Nextbase).
  • Feefo (Feefo Holdings Ltd): We will add your email address and details of the vehicle you have chosen to purchase into our review's platform Feefo. Feefo will send you a request by email for feedback relating to the service we have provided. You can choose to redact your name from the published review.
  • Mailchimp (The Rocket Science Group LLC): We use Mailchimp to send you information regarding new products, services, safety and service maintenance alerts and special offers where you have provided your consent. Mailchimp processes your email address and marketing preferences on our behalf to deliver these communications.

The data processed by these providers on our behalf may be in various formats, including audio (live calls, recordings), text (emails, live chat), and electronic or paper images (identity documents, financial statements). Where we use third-party Data Processors, we ensure that they are contractually obliged to protect your data to the same standards as we do and that they do not engage sub-processors without our prior written consent or a general authorisation.

Data That We Collect

We need your personal and business data to provide you with the goods/services you are requesting and applying for. If you do not provide this information, we may be unable to offer these goods/services advertised. We adhere to the principle of data minimisation, ensuring we only collect personal data that is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed. We will only collect information that's necessary for the provision and oversight of these services.

Data We Collect Directly from You

  • Personal Details: Name, address, telephone number, email address, date of birth.
  • Employment Details: Information about your current employment.
  • Proof of Identity Documentation: Copies of your passport, driving license or other identification documents.
  • Financial Information: Bank account details, income, expenditure, creditworthiness information you provide.
  • Call Recordings: Recordings of phone conversations for training, quality control, fraud prevention and to ensure we meet regulatory obligations.
  • Marketing Preferences: Information about your preferences for receiving marketing communications, where these rely on your consent.
  • Details of Family Members: if required, as part of a vehicle finance agreement.
  • Details of Fellow Directors: Information about other company directors, if required as part of your finance application.
  • CCTV Footage: Images of you captured by our CCTV system if you visit our premises.

Data We May Collect from Third Parties

  • Settlement information for a part exchange vehicle: With your permission we are able to request an up-to-date settlement amount for your current vehicle from Alphera Financial Services or Black Horse.
  • Limited Company Information: Details about your company from sources like Companies House and Creditsafe.
  • DVLA (Driver and Vehicle Licensing Agency): We obtain information about your identity, driving convictions, and disqualifications where relevant to your application (e.g., for vehicle finance).
  • Fraud Prevention Agencies: If we suspect fraud, we may receive information from fraud prevention agencies.

Our Legal Basis for Processing Your Information

We will only collect and process information about you when we have a lawful basis for doing so under Data Protection Law. These bases include:

  • Necessity for a Contract: We process your personal data when it's necessary to enter into a contract with you to provide our finance intermediation services and to fulfil our obligations under that contract. This includes carrying out identity and suitability checks before providing the services you've requested.
  • Consent: We rely on your explicit consent to process your personal data for specific purposes, such as sending you marketing communications about our new products, services, safety and service-maintenance alerts and special offers. You have the right to withdraw your consent at any time by contacting us using the details provided in this policy, or by using any unsubscribe options in our communications.
  • Legitimate Interests: We may process your personal data when it's in our legitimate business interests to do so, provided that your rights and freedoms don't override these interests. Our legitimate interests include:
    • Conducting checks to prevent fraud and money laundering or to defend against complaints for negligence.
    • Determining appropriate retention periods for records to protect our commercial interests, such as defending against legal claims or investigating suspected fraud. We conduct a balancing test to ensure our interests don't unduly impact your rights by considering factors like the nature of the data, the impact on you and the safeguards we have in place.
    • Monitoring and recording calls, emails, SMS messages for quality control, training, ensuring effective operation of systems, meeting regulatory obligations and preventing or detecting crime.
    • Conducting after-transaction surveys to improve our products and services and/or requesting feedback via Feefo or B2C Review Video.
    • Handling enquiries and complaints to ensure a high standard of customer service and prevent future issues.
    • Transferring your information in the event of a business restructure, sale, or takeover of EVOGO Ltd or its trading styles.
  • Legal Obligation: We may need to process your personal data to comply with legal obligations, such as providing information to regulatory authorities like the Financial Conduct Authority (FCA) or law enforcement agencies.
  • Processing of Special Category Data and Data Relating to Criminal Convictions: We will only process this type of sensitive data when we have a specific lawful basis under Articles 9 and 10 of the GDPR. This may include:
    • Legal Obligations: Where processing is necessary to comply with legal obligations, such as for anti-money laundering (AML) checks or fraud prevention.
    • Substantial Public Interest: Where processing is necessary for reasons of substantial public interest, such as preventing or detecting unlawful acts (including financial crime) under Article 9(2)(g) of GDPR combined with Schedule 1, Part 2, para 10 of the Data Protection Act 2018, or for regulatory purposes related to lending, subject to appropriate safeguards.
    • We will ensure that the processing of this data is always necessary and proportionate for the specific purpose.

Where we use your data for secondary purposes, such as developing new and improved products and services, we will either obtain your consent or anonymise the data, so that it can no longer identify you.

What We Will Do with Your Information

All the personal data we hold about you will be processed by our staff and systems within the United Kingdom. Your information may be shared with third parties, where necessary, to provide the goods/services you've applied for or where there's a legal obligation to do so.

We will use your data to process your application for our services, which may include:

  • Finance Intermediation: Facilitating your request for finance.
  • Establishing Your Identity: We collect proof of identity, payment card details and driving license information to verify your identity, as part of our services and for anti-money laundering checks.
  • Facilitating Your Request for Finance Quotations: Sharing your information with potential finance providers (lenders) to obtain quotes.
  • Automated Decision Making:
    • With your permission, we will share your information with a credit brokerage or directly with funders, who may use automated decision-making processes as part of their funding assessment.
    • This may involve automatically requesting information from credit reference agencies (CRAs) and using this data, along with the information you provide, to assess your suitability for the requested goods/services.
    • Your Right to Human Review: You have the right to request a manual review of an automated decision by contacting the relevant funder directly. We can assist you in contacting the funder if you encounter difficulties. Please be aware that the funder's privacy policy will govern their use of your data in automated decision-making. It is crucial that you review their individual privacy policies for full details on how they process your data, particularly regarding automated decision-making, as their policies will govern their use of your data.
  • Customer Services and Administration of Our Services:
    • Call recording and monitoring: We may monitor or record calls, emails and SMS, for the purposes outlined under "Legitimate Interests" (e.g., quality control, training, meeting regulatory obligations and preventing crime).
    • After transaction processing: We may conduct after-transaction surveys through independent third-party companies to improve our products and services. Some of your data may be shared with these providers for this purpose.
    • Marketing communications: We may send you marketing communications if you have consented to receive them. Your email address and marketing preferences may be shared with a third party for this purpose.
    • Handling enquiries and complaints: We will use your information to investigate and resolve any enquiries or complaints you may have, so that our customers receive a high standard of service and we can prevent future complaints.
    • Business transfers: We may transfer or share your information with any organisation your account has been or may be transferred to, following a restructure, sale or takeover of EVOGO Ltd or any of our trading styles.

Who Your Data Will Be Shared With

We may need to share your personal information with other organisations to provide our services effectively. Where this is necessary, we are required to comply with all aspects of the Data Protection Act (2018) and the UK General Data Protection Regulation (together Data Protection Legislation). These include:

  • Other parts of our business: Internal departments within EVOGO Ltd that require access to your data to deliver our services (e.g., compliance, customer service, finance).
  • Finance Providers (Lenders): To obtain finance quotations and facilitate the funding process. This is a crucial part of our service. Below is a list of some of the lenders we may share your data with. Please note that this list is not exhaustive, and we may work with other reputable lenders as required by your specific application.
  • Identity Verification Services: To verify your identity as required by law.
  • Payment Processors: Such as GoCardless, if we process any direct payments related to your vehicle purchase and/or finance agreement.
  • Third-party service providers: Such as those providing IT support, data analytics, marketing services (where you've consented), survey services and document signing services (Signable). We ensure these providers have appropriate data protection measures in place through contractual agreements.
  • Regulatory Authorities: Such as the Financial Conduct Authority (FCA), Financial Ombudsman Service (FOS) or the Information Commissioner's Office (ICO), where we are legally obliged to do so.
  • Law Enforcement Agencies: Such as the police or National Crime Agency, to prevent, detect, investigate and prosecute fraud, money laundering and other crimes, and to confirm your identity.

We will not pass your data to other third parties outside of those mentioned in this Privacy Notice without a lawful basis for doing so.

Website Links

Our website may contain links to other websites operated by organisations we do not control. This privacy policy does not apply to those websites and apps. We provide these links for your information and convenience only and do not endorse, or make any promises about their accuracy, content or completeness. Please be aware that we have no control over the data privacy practices or content of these third-party websites. If you follow a link to any of these websites, their own privacy policies will apply to the collection and use of your personal data, and we do not accept any responsibility or liability for these policies. Your disclosure of personal information to these third-party websites is at your own risk.

Whether the Data Will Be Sent Overseas

EVOGO Ltd will never send your personal data outside the European Economic Area (EEA) for our own processing. All processing of your data by us occurs within the EEA.

Data Retention

 When we collect your personal information, the length of time we retain it is determined by the purpose for which we use that information, and our legal and regulatory obligations.

Once we no longer require the information for the specified purposes, we will either anonymise it (so it can no longer identify you) or securely delete it. We will not keep personal information in an identifiable format for longer than is necessary.

Other factors that influence how long we retain your personal information include:

  • The need to use your personal information to establish, bring or defend legal claims.
  • Legal requirements obligating us to keep your personal information for a longer period or to delete it sooner.
  • Your decision to exercise your right to have the information erased (where this right applies).

General Retention Periods (examples):

  • Successful finance applications and associated data are typically retained for 6 years after the finance agreement has ended to comply with regulatory obligations (e.g., anti-money laundering) and for potential legal claims.
  • Information from unsuccessful applications or initial enquiries will generally be held for 12 months for fraud prevention, to address any potential queries and to comply with regulatory record-keeping requirements.
  • Marketing consent records are retained as long as your consent is active and for a short period thereafter (e.g., 6 months) in case of disputes or for auditing purposes.
  • Call recordings are typically retained for up to 3 years for training, quality and regulatory compliance.

Even if you decide not to proceed with our finance intermediation services or your application is declined, we may still retain your information for a limited period for the purposes outlined above, such as defending against potential claims or complying with legal obligations. Our internal data retention schedule provides more specific timeframes for different categories of data, aligned with our legal and regulatory obligations.

We take reasonable steps to ensure that the personal data we hold about you is accurate and kept up to date.

Your Rights

As a customer of Evogo Ltd and our trading style Mike Brewer Motors, you have the following rights regarding your personal data and how we process it:

  • The right to be informed: You have the right to receive clear and comprehensive information about how we process your personal data, which is the purpose of this privacy notice.
  • The right to access: You have the right to request a copy of the personal information we hold about you, free of charge.
  • The right to rectification: You have the right to ask us to correct any inaccurate or incomplete personal information we hold about you.
  • The right to erasure (the "right to be forgotten"): You have the right to request that we delete your personal data from our records in certain circumstances.
  • The right to restrict processing: You have the right to ask us to limit how we use your personal information in specific situations.
  • The right to data portability: You have the right to receive your personal information in a structured, commonly used and machine-readable format and to transmit that data to another controller.
  • The right to object: You have the right to object to the processing of your personal data in certain circumstances, including for direct marketing purposes and processing based on our legitimate interests (unless we have compelling legitimate grounds for the processing that override your interests, rights and freedoms).
  • Rights related to automated decision-making including profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This right is subject to certain exceptions, such as when the decision is necessary for entering into or performing a contract, is authorised by law or is based on your explicit consent. You have the right to request human intervention, express your point of view and contest the decision.

If you wish to make a Subject Access Request or exercise any of your other data rights, please visit our dedicated Subject Access request page.

How to Make a Complaint

If you have any concerns or wish to make a complaint about how we have handled your personal data, please contact us using the following methods:

  • By Letter: EVOGO Limited, 201 Upwell Street, Sheffield, S4 8AL
  • By Email: [email protected]
  • By Telephone: 0114 250 6080

We will handle your validated request within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. Details of how to contact the ICO are available at this website: ico.org.uk/global/contact-us.

Keeping Your Data Safe

We are committed to ensuring the security of your information. To prevent unauthorised access or disclosure, we have implemented appropriate physical, electronic and managerial procedures to safeguard and secure the information we collect. Our security measures are continuously reviewed and improved in line with technological advancements, including encryption, access controls and regular security audits.

How We Use Cookies

A cookie is a small file that asks permission to be placed on your computer's hard drive. For detailed information on how cookies work and how to manage their use when you visit our websites, please refer to our Cookie Policy.

Updates to This Privacy Notice

This Privacy Notice was last updated on 22/09/2025.

We may update this Privacy Notice from time to time to reflect changes in our business practices or legal requirements. Therefore, we recommend that you review it each time you provide us with any personal information. Any significant changes to this Privacy Notice will be prominently displayed on our website, and where appropriate, notified to you directly via email or other suitable means.