Privacy Policy.

Overview

Longbow Motorcar Company Ltd ("Longbow", "we", "us") is the data controller for personal data collected via longbowmotors.com, our reservation system, and The Guild community. This policy explains what we collect, why, and what you can ask us to do about it. It complies with the UK GDPR and the Data Protection Act 2018.

What we collect

You give us

• Identity & contact - name, email, phone, postal address.
• Reservation & configuration - model, deposit, build preferences, VIN once allocated.
• Account credentials - hashed password, two-factor secrets where enabled.
• Correspondence - messages between you and our team.

We collect automatically, without asking

This is limited to what is needed to understand how the site is used as a whole. It is pseudonymous: it sits under a random identifier we generate, it is never linked to you by name unless you consent and identify yourself, and it never leaves our own systems.

• Pages viewed, in what order, and how long each was open.
• How far down a page you scrolled, and which sections came into view.
• Links and buttons clicked, and the page you arrived from.
• Campaign tags in the address, where you followed a campaign link.
• Your country, taken from the network as a two-letter code. Not your town, and not your address.

We collect only if you accept analytics cookies

If you accept analytics in the banner, we also record the following, so we can tell which parts of the site work and which frustrate people. You can withdraw at any time from the footer, and we stop.

• Device and browser - browser and version, operating system, whether it is a phone or a computer, screen and window size, processor cores and memory, and connection quality.
• Preferences your browser reports - language, time zone, whether you use dark mode, and whether you have asked for reduced motion.
• How you interact - repeated clicks in one spot, clicks on things that are not buttons, how long you spend in each form field and which one you leave without finishing, and whether you copied text. We never record what you type or what you copy, only that it happened and how long it took.
• Your IP address, once per visit. Used for approximate location beyond country, to recognise a returning device, and to investigate abuse of our forms. Deleted after 90 days, while the visit itself is kept.

• Newsletter engagement - open and click events, only where you've subscribed.

How we use it

• To process your reservation and build a car for you.
• To operate The Guild community and send briefings.
• To respond to enquiries, comply with the law, and prevent fraud.
• To improve the site: which pages lead to a reservation, where people lose their way, which devices and screen sizes we must design for, and which campaigns bring people who stay.
• To recognise a returning visitor, so we can tell a first visit from a fifth and measure what actually persuades someone over weeks.
• To protect the site, by detecting automated abuse of our forms.

We do not sell personal data, we do not use it to make automated decisions about you, and we do not try to infer anything about your health, beliefs, politics or anything else the law treats as special category data.

Lawful basis

We rely on contract (your reservation and ownership agreement), legitimate interests (running our business, securing our systems), consent (marketing emails, analytics and marketing cookies, and everything in the consent-only list above - withdrawable at any time from the footer), and legal obligation (tax, homologation, type-approval records).

Sharing

We share data only with processors who help us run the business - payment providers, hosting, email delivery, shipping - and with regulators when legally required. We do not sell personal data. A current list of processors is available on request.

Retention

Reservation and owner records are retained for the lifetime of your car plus 10 years for warranty, type-approval, and parts traceability. Marketing data is held until you withdraw consent. Logs are kept for 90 days.

Website visit data. The record of a visit is kept for 25 months and then deleted. Your IP address is removed from it after 90 days, and the rest of the visit is kept without it. If you withdraw consent we stop collecting the consent-only items from that moment; ask us and we will delete what was already collected.

Your rights

You may request access to your data, correction, deletion, restriction or portability, and you may object to processing based on legitimate interests. Write to privacy@longbowmotors.com. You can complain to the UK Information Commissioner at ico.org.uk.

Contact

Longbow Motorcar Company Ltd · 71-75 Shelton Street · Covent Garden · London WC2H 9JQ · United Kingdom · privacy@longbowmotors.com