Part 2 - RAC MOT, Service Plans and Bookings

Purpose and legal basis for using your information

When you purchase a Service Plan from RAC, RAC are the data controller responsible for providing you with the service and administering your claims.

When you use RAC Approved Garage Network to locate and book an MOT or Service the data controller responsible for providing you with the service will be WhoCanFixMyCar and is responsible for your personal information which it collects when you visit https://www.rac.co.uk/car-care/book-an-mot-online.

This privacy notice only covers how RAC handles your information. You can view WhoCanFixMyCar's privacy notice here https://www.whocanfixmycar.com/privacy.

When you purchase RAC Car Warranty, the company Assurant (TWG Services Limited & London General Insurance Company Limited) will act as the policy administrator and insurer. Assurant are joint Data Controllers with the RAC. You can view Assurant’s Privacy Notice here: www.assurant.co.uk/consumer-privacy-policy.

When you use RAC to book an MOT or Service, RAC Motoring Services will also be a data controller for the following purposes:

Our purpose for using your data

Our lawful basis

Marketing: Using your information for the purpose of marketing activities, including the use of determining the marketing communications we send to you (which may include profiling) and analysis of our marketing activities

Consent

Legitimate interest (where soft opt in is applicable)

Service oversight, improvements, and analysis: Overseeing the performance of the RAC branded service, making improvements, reporting and analysis, quality assurance, governance, management and audit practices.

Legitimate interest

Your rights: Complying with your data protection requests under the UK Data Protection regulation and the General Data Protection Regulation.

Legal obligations

Regulatory obligations including fraud detection: We use your personal data to comply with our regulatory obligations including for the prevention, detection and reporting of fraud.

Legal obligations

For each different purpose for which we use your data, we need to have a lawful basis. The different lawful basis are set out in the UK Data Protection regulation and the General Data Protection Regulation. The ones we’re relying on are:

  • Legitimate interest: We rely on this basis when our use of your data is necessary for the purposes of our legitimate interest which does not unduly impact you rights and freedoms. This legal basis is set out in article 6(1)(f) of the UK Data Protection regulation and the General Data Protection Regulation.
  • Contract: We rely on this basis when our use of your data is necessary for the purpose of fulfilling our obligations under a contract which you have with us. This legal basis is set out in article 6(1)(b).
  • Legal obligations: We’re required to comply with legal and regulatory obligations, such as the prevention, detection and reporting of fraud and other financial crime. This legal basis is set in article 6(1)(c) of the UK Data Protection regulation and the General Data Protection Regulation.

You can read more about our use of your information for marketing at https://www.rac.co.uk/legal-information/privacy-policy/part-2/marketing.

The information we collect

The information which we collect about you relating to your use of RAC MOT, Service Plans and Bookings will include:

Category of information

Examples

Key personal details

Name, date of birth, etc

Contact details

Home address, email address, telephone number

Marketing preferences

Your preferences for the marketing you would like to receive from us.

Vehicle information

VRN and make, model of vehicle requiring services.

Details of your use of service

Where you use RAC to book an MOT or Service online, we receive information about the booking.

Payment information

We take your payment information to pay for services that RAC provide such as your Service Plan.

How we get your information

  • From you: We receive information directly from you when you contact us directly
  • WhoCanFixMyCar: We receive information from WhoCanFixMyCar when you have made a booking

How long we keep your information for

The RAC keeps your personal information for as long as the law requires, according to the rules and regulations.

Who we share your information with

We may share your information with third parties such as:

  • RAC group companies: For administration purposes and to help us understand your relationship with RAC.
  • IT providers: providers of IT services for administration and management of our internal systems
  • Regulators: Regulators and governmental bodies, such as the Financial Conduct Authority or Information Commissioner’s Office if necessary to meet our mandatory reporting requirements.
  • Professional advisors and purchasers: Our professional advisors for the purpose of providing us with professional advice. If RAC is sold, we may need to disclose your personal information to our advisers and any prospective purchasers and their advisers.

Automated decision-making

Automated decisions are decisions which are made about you using only technology and which aren’t made with the direct input of an actual person. We do not make automated decisions relating to you when you use RAC MOT, Services and Bookings.

Where your information is held

We are a UK based organisation but we do offer services to our members across Europe, such as our European Breakdown cover. It is possible that we may transfer your personal information outside of Europe, for example, where one of service providers has operations outside of Europe and such transfer is necessary. Where your data is transferred outside of Europe, we will ensure that suitable safeguards are in place to make sure that your data is protected. The safeguard will usually be reliance on standard contractual clauses.