We, Porsche Cars Great Britain Limited (hereinafter referred to as “our”, “us”, "we" or "PCGB") appreciate your interest in Porsche products and services. With this Privacy Notice, we inform customers, website visitors, and other people who engage with us (collectively “you” or “your”) about the processing of your personal data in relation to such products and services, as well as online via Porsche United Kingdom | Official Website (collectively, the "Products and Services"). This Privacy Notice will also inform you about your rights as a data subject, as affected in connection with the Products and Services.

We take the protection of your personal data seriously. Your personal data will be processed in accordance with the applicable statutory provisions of data protection law (the "Data Protection Laws").

For information on the processing of personal data in other areas, please refer to the respective specific privacy policy.

1. Controller and Data Protection Officer

In relation to this Privacy Notice, the Data Controller responsible for data processing within the meaning of the Data Protection Laws is: Porsche Cars Great Britain Limited.

PCGB is a member of the Dr Ing.h.c.F.Porsche AG group of companies (collectively "Porsche Group", each a "Group Company"). 

PCGB is the exclusive UK importer of new Porsche Vehicles and Porsche Genuine Parts, and distributes these products via a selective distribution system implemented through a network of UK Porsche Centres and Porsche Service Centres which are owned and operated by separate companies, the majority of which are not Group Companies (“Porsche Centres” and “Porsche Service Centres” respectively). 

Unless stated otherwise, each Group Company, Porsche Centre and Porsche Service Centre is a separate data controller and have their own privacy policy/notice(s) which apply to their data processing activities. 

For a common awareness, Volkswagen Financial Services (UK) Limited (“VWFS”), who is a member of the Volkswagen Group of Companies, is also a separate data controller when trading under the business name Porsche Financial Services pursuant to a benefiting trademark licence.

You can find the relevant privacy policy/notice on the website of each Group Company, Porsche Centre, Porsche Service Centre or VWFS.

For certain data processing purposes, such as internal administration and joint procedures through centralised systems, PCGB and other Group Companies and/or Porsche Centres/Porsche Service Centres act as joint controllers, sharing responsibility for personal data processed through jointly used databases, platforms and IT systems. In such circumstances, we, our Group Companies and/or Porsche Centres/Porsche Service Centres jointly decide how data is handled, ensure security is maintained, and coordinate to fulfil our legal obligations, including responding to data protection requests and incidents. To the extent applicable, you can assert your rights with regards to the processing of personal data with any Group Company or Porsche Centre/Porsche Service Centre in their capacity as joint controller. If you contact PCGB, we will coordinate with all joint controller Group Companies and Porsche Centres/Porsche Service Centre to address your request and protect your rights as required by Data Protection Laws.

If you have any questions regarding data protection for which PCGB is the data controller, please do not hesitate to contact us and our Data Protection Officer as follows:

Data Protection Officer
Porsche Cars Great Britain Limited
Bath Road
Reading, Berkshire
United Kingdom
RG31 7SE
E-mail: customer.assistance@porsche.co.uk

2. Personal data collected

When we say "personal data" we mean any information relating to an identified or identifiable natural person (so-called "data subject"). This includes details such as name, postal address, e-mail address or telephone number, but also other information about data subjects that arises in the course of our interaction with you, in particular:

(a) Information you give to us

We may collect personal data from you when you buy or use our Products and Services, when your vehicle is connected to our IT systems or you use the car configurator, when you book or attend Porsche events or visit a Porsche Centre/Porsche Service Centre, a Porsche Design Store or Porsche Experience Centre, when you sign up to Porsche newsletters or other subscription services, register or participant in Porsche challenges, enter into offers or promotions, interact with us on social media platforms, when you subscribe to the classic register, contact us, make a complaint or use our websites.

The categories of personal data we may request include your name, occupation, contact information (email, postal address and phone/mobile number), credit card/payment details, driving licence details, vehicle and driving data, and general information about you, such as your experience with Porsche Products and Services. We may also keep copies of any correspondence you send us which may include personal data.

You should only give us personal data on behalf of someone else if you have their permission to do so or you know that they would not have any objection to us processing their information in accordance with this Privacy Notice.

We refer you to Purposes and legal basis of data processing below for more detailed information regarding the data that we collect.

(b) Information collected by automated means

Some of the information that we collect is collected through automated means. This includes information such as vehicle and driving data collected when your vehicle connects to our IT systems which may relate specifically to you. It also may include data collected on our premises through CCTV cameras or call recordings of when you contact our customer relations hub, as well as the information about your devices and IP location when you visit our publicly accessible sources (such as social media platforms and our websites). 

(c) Information collected from third parties

We also process personal data that we receive from third parties or from publicly accessible sources. Below you will find an overview of the corresponding sources and the purposes of processing your data obtained from these sources:

Children's privacy

We will never knowingly collect personal data from individuals under the age of sixteen (16) without first obtaining verifiable parental/guardian consent. For example, children under the age of sixteen (16) are permitted to participate in the Porsche Experience Centre event, or be a passenger, with the permission of their parents/guardian so we may receive personal data about children from them. If you are under the age of sixteen (16) you should not provide information to us. If we become aware that a person under sixteen (16) has provided personal data to us without appropriate consent, we will remove such personal data from our files.

3. Purposes and legal basis of data processing

In the table at Section 3.5 (below), you will find an overview of the purposes for which personal data is processed, the categories of data processed in order to achieve such purpose, and the legal basis which we rely on for our data processing activities in connection with the provision of our Products and Services. In any case, we shall only process personal data in accordance with our legal requirements and if we have identified a valid legal basis (even if, in individual cases, a different legal basis may be relevant than otherwise stated in the table below).

We will let you know if we require your personal data and what possible consequences might arise if you do not share your personal data with us. However, unless otherwise stated, not providing your personal data will not result in legal consequence for you.

3.1 Fulfilment of contractual and pre-contractual obligations

We process your personal data if this is necessary for the performance of a contract to which you are a party or for the performance of pre-contractual measures that take place at your request. The purposes of the processing include enabling the use of our specific Products and Services and in particular the creation and delivery of offers, support and services. In this respect, please also refer to the descriptions of the Products and Services beyond this Privacy Notice.

3.2 Fulfilment of legal obligations

We process your personal data in order to comply with legal obligations to which we are subject. The obligations may arise, for example, from commercial, tax, money laundering, financial or criminal law.

3.3 Safeguarding legitimate interests

We also process your personal data to protect the legitimate interests of us or third parties, unless your interests requiring the protection of your personal data override these interests. The processing for the protection of legitimate interests is carried out for the following purposes or for the protection of the following interests, for example:

3.4 Consent

In some instances, we process your personal data on the basis of explicit consent; for example, to process your sensitive categories of personal data such as your health and medical data. If you give your consent, it is always for a specific purpose; the purposes of the processing are determined by the content of your declaration of consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

You will not be disadvantaged or experience any prejudice as a result of withholding or withdrawing your consent, nor will it affect the Products and Services we provide to you, unless the processing is strictly necessary for those services.

3.5 PCGB Legal Bases

Note that the purposes for which we use your personal data may change from time to time, in which case we will update this privacy notice (see Effective date below).

(a) Change of purpose

If we process your personal data for a purpose other than that for which the data was collected, beyond the scope of a corresponding consent or a mandatory legal basis, we will take into account the compatibility of the original and the now pursued purpose, the nature of the personal data, the possible consequences of further processing for you and the guarantees for the protection of the personal data.

(b) Profiling

We do not carry out automated decision making. Profiling is only carried out to protect our legitimate interests as described above in regards to customer segmentation and profiling. We also refer to Customer and prospect care below which discusses customer and prospect care including personalisation of our offerings.

4. Access authorisations in the end device

To the extent functions of the Products and Services require the granting of authorisation to access your end device (e.g. access to location data or photos), the granting of these authorisations is voluntary. However, if you wish to use the corresponding functions, you must grant the appropriate authorisations, otherwise you will not be able to use these functions. The permissions remain active as long as you have not reset them in your device by deactivating the respective setting.

5. Technical and organisational security measures

We maintain appropriate administrative, technical and physical safeguards to protect the personal data you provide to us against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use and other unlawful forms of processing.

6. Recipients of personal data

We may disclose personal data we process for the following purposes and in the following ways, to the extent permitted by law and depending on such purpose(s) or way(s):

7. Cookies

We use cookies and comparable technologies in connection with the Products and Services which serve to communicate with your end device and exchange stored information (hereinafter collectively referred to as "Cookies"). These Cookies are primarily used to make the functions of the Products and Services usable. General examples in which the use of Cookies is technically required in this sense are the storage of a language selection, login data or a shopping or watch list. Accordingly, technically required Cookies may be used by us to enable the processing described in Purposes and legal basis of data processing above and to ensure the proper and secure operation of the Products and Services. The data processing is then carried out as it is necessary to implement the functions you have selected or to protect our legitimate interest in the functionality of the Products and Services.

Insofar as we should also use Cookies in order to analyse the use of the Products and Services and to be able to target it to your interests and, if necessary, to provide you with interest-based content and advertisements, this is done exclusively on the basis of your voluntary consent. You will then have the opportunity to make the appropriate settings within the Products and Services via the cookie setting tool. You may revoke any consent you have given at any time with effect for the future. Further information on Cookies and their function in detail as well as on setting and revocation options can be found in the Cookies policy on our website, accessible here. 

Under the UK Data Protection Laws specifically, certain cookies that are used solely for statistical purposes - such as measuring website traffic or understanding how our Products and Services are used - do not require your consent. These cookies are designed to help us enhance functionality and user experience and are not used for advertising, profiling, or tracking across sites.

If you do not wish to use Cookies in general, you can also prevent their storage by adjusting the settings of your end device accordingly. Stored Cookies can be deleted at any time in the system settings of your terminal device. Please note that blocking certain types of Cookies can lead to impaired use of the Products and Services.

Furthermore, we use other technologies which, like Cookies, serve to ensure the secure and user-friendly usability of the website (e.g. by protecting against misuse or evaluating usage). Technically, these additional technologies differ from cookies, as they do not store any information on your end device or access information already stored there. Insofar as these additional technologies process data that is subject to data protection law (e.g. IP addresses), we process this data to provide the website, to ensure technical operation and for the purpose of identifying and eliminating faults. In doing so, we also pursue the interest of permanently ensuring the technical functionality of the website, improving its performance and optimising the user experience. When you access our website, this data is automatically processed. Without the provision of this data, you will not be able to use our website. We do not use this data for the purpose of drawing conclusions about your person or identity. 

8. Integrated third-party services

Products and services of other providers which we integrate or to which we refer are provided by the respective third parties. We may also sometimes link to other websites and social media platforms. We have no influence on the content and function of the third-party services and are generally not responsible for the processing of your personal data by their providers, unless the third-party services are completely designed on our behalf and then integrated by us on our own responsibility.

Unless otherwise stated, profiles on social media are generally only included in the Products and Services as a link to the corresponding third-party services. After clicking on the integrated text/image link, you will be redirected to the offer of the respective social media provider. After the redirection, personal data may be collected directly by the third-party provider. If you are logged in to your user account of the respective social media provider, the provider may be able to assign the collected information of the specific visit to your personal user account. If you interact via a "share" button of the respective social media provider, this information can be stored in the personal user account and published if necessary. If you want to prevent the collected information from being assigned directly to your user account, you must log out before clicking the included text/image link.

Insofar as we integrate services of other providers within the scope of the Products and Services in order to provide you with certain content or functions (e.g. playing videos or route planning) and we process personal data in the process, this is done on the basis of the Data Protection Laws. This is because the data processing is then necessary to implement the functions you have selected or to protect our legitimate interest in an optimal range of functions of the Products and Services. Please also refer to the privacy policy of the respective third-party provider with regard to the third-party services.

9. Customer and prospect care

In the following, we would like to provide you with further data protection information on the implementation of customer and prospect care at PCGB. The measures serve to ensure customer and interested party-oriented support.

(a) Joint customer and prospect care at PCGB

The data processing mentioned above under Section 3 in the context of customer and prospect support (in particular customer segmentation and profiling, service and support, implementation of legal requirements, needs analyses, individual support via the desired communication channels) are generally not carried out by the controller alone. Involved in the customer and prospect care are the Porsche Centre and Porsche Service Centre responsible, PCGB as the importer, as part of international support, the respective local importers, Dr. Ing. h.c. F. Porsche AG as manufacturer and its affiliated companies in the areas of financial and mobility services, digital services and lifestyle products. An up-to-date list of the participating companies with their contact details for support in the UK is available upon request.

By using a central platform, we avoid situations where information about your products, contact data and interests would not be available for your respective PCGB contact and where you would therefore have to be referred to another company. This also applies in the event that the operating entity of your Porsche Centre or Porsche Service Centre changes. By exchanging and verifying data, we ensure that you receive the best possible service and advice. Only the companies involved that actually need access to your data for operational purposes have such access.

Joint customer and prospect care can lead to joint control in certain cases. For this reason, the companies involved have set out in an agreement pursuant to the Data Protection Laws how the respective tasks and responsibilities for processing personal data are structured and who fulfils which data protection obligations. In particular, it was determined how an appropriate level of security can be achieved and how data subject rights and data protection information obligations can be guaranteed. PCGB is available to you as a central contact in addition to the other companies involved.

(b) Individual customer and prospect care

Insofar as you have given your voluntary consent contact data, support and contract data (e.g. on purchases, leasing or financing), service information as well as data on interests, vehicles and services or products used will be used by the companies involved in joint customer and prospect care to send you personally tailored information and offers on Porsche vehicles, services and other products, invitations to events and surveys on satisfaction and expectations via the desired communication channels. 

For the individual design of customer and prospective customer support, we will create a customer profile of you.

The specific data used for this purpose depends on the information collected on the basis of orders and consultations or provided by you (e.g. in the consultation at the Porsche Centre or Porsche Service Centre or as part of your activities under your Porsche ID at My Porsche). The data may also originate from orders or purchases that are processed in cooperation with partners (e.g. insurance companies) and from which we then receive the information, if applicable. Insofar as corresponding consents have been granted, other data sources may also be included. This can be data on usage behaviour or vehicle condition in relation to the vehicle data assigned to you (e.g. on your driving behaviour, identification, basic, usage, analysis, environmental and traffic data, as well as location and movement data) or on the use of digital media (e.g. website use). You will receive more information on the merging of the data with the corresponding consent. 

In order to offer an inspiring brand and customer care experience with Porsche and to make communication and interaction as personal and relevant as possible, the aforementioned data is used for needs analyses and customer segmentation. On this basis, for example, affinities, preferences and potentials can be determined by the companies involved as part of individual customer and prospect care. Examples of such measures for individualisation are classification numbers on your likely product interests and on your satisfaction. The corresponding information and analysis results are stored in your customer profile and are then available for the individual configuration of customer and prospect care. The personal analysis and individual allocation in a customer profile will only take place if this serves your individual customer and prospect care. Individual customer and prospect care without these measures for optimisation and personalisation is not offered. 

Beyond the individual measures relating to direct communication with you, we will only use the aforementioned data within the framework of general measures of customer and prospect care to carry out general evaluations based on the aggregated data of customers and prospects in order to optimise our offers and systems and align them with overarching interests. Please note that data on usage behaviour or vehicle condition in relation to the vehicles assigned to you or on the use of digital media may also be used for this purpose if you have given the appropriate consent. Please also note that your data may also be evaluated beyond the scope of customer and prospect support; this will then be done on the basis of your specific consent or another legal basis. 

When we send emails for individual customer and prospect care, we may use market standard technologies such as tracking pixels or click-through links. This allows us to analyse which or how many emails are delivered, rejected and/or opened. The latter is particularly done by means of tracking pixels. Measuring the opening rate of our emails by means of tracking pixels is not fully possible if you have deactivated the display of images in your email program. In this case, the email will not be displayed to you in full. However, it is still possible for us to track whether an email has been opened if you click on text or graphic links in the email. By using click-through links, we can analyse which links in our emails are clicked on and deduce what interest there is in certain topics. When clicking on the corresponding link, you are guided through our separate analysis server before calling up the target page. Based on the results of the analysis, we can make emails more relevant in the context of individual customer and prospect care, send them in a more targeted manner or prevent them from being sent. The sending of emails and the evaluation of their use will only take place if you have given your voluntary consent to individual customer and prospect care. Individual customer and prospect care without the described evaluation for optimisation is not offered.

10. Data Processing in third countries

If a data transfer takes place to entities whose registered office is based outside of the United Kingdom or whose data processing takes place outside of the United Kingdom, or another jurisdiction for which an adequate level of data protection has not been determined by a decision of the European Commission, we will ensure prior to the transfer that either the data transfer is covered by statutory permit/legal authorisation, that guarantees for an adequate level of data protection with regard to the data transfer is in place (e.g. through the agreement in the form of the standard contractual clauses (and UK addendum, as appropriate) with the recipient), or that you have given your consent to the data transfer.

If the data is transferred, you can obtain from us a copy or reference to the availability of the guarantees for an adequate level of data protection in relation to the data transfer. If you would like to request this, please contact us as set out in How to contact us section below.

11. Storage duration, erasure of data

We recognise the importance you place on how your personal data is handled and shared, and we are committed to earning your trust by protecting your information. We implement appropriate technical and organisational security measures, including physical, administrative and technical safeguards to protect your personal data from unauthorised access, use and disclosure.

We store your personal data, if there is legal permission to do so, only as long as necessary to achieve the intended purposes or as long as you have not revoked your consent. In the event of an objection to processing, we will delete your personal data unless further processing is still permitted by law. We will also delete your personal data if we are obliged to do so for other legal reasons. Applying these general principles, we will usually delete your personal data immediately:

We implement safeguard measures tailored to the risks associated with processing your personal data and will only store your personal data insofar as is necessary to achieve our purposes (explained in the table above).

12. Rights of data subjects

You may have certain rights under Data Protection Laws. However, there may be lawful reasons for us to object to, or partially respond to, your requests for exercising such rights. These rights are as follows:

Right to be informed: You have the right to know how we collect, use, and store your personal data. This includes clear information about the data we collect, the purposes of processing, and the legal basis for doing so in accordance with applicable Data Protection Laws. This is why we will share a privacy notice (such as this one) prior to you disclosing personal data to us. Please read these carefully.

Right to access: You may have the right to receive information about your personal data stored by us and we have the obligation to carry out reasonable and proportionate searches to identify your relevant data. For your own privacy and security, in our discretion we may require you to prove your identity before providing the requested information. If you require multiple copies of your personal data, we may charge a reasonable administration fee where we are permitted to do so in accordance with the Data Protection Laws.

Right to rectification and erasure: You may have the right to ask us to correct incorrect personal data and, if the legal requirements are met, delete your personal data. Please note that we also conduct periodic data cleansing in order to remove errors in postal addresses or telephone numbers.

Restriction of processing: In limited circumstances, you may have the right to ask us that we restrict the processing of your personal data, provided that the legal requirements are met and unless we think we have a legitimate interest for processing your data which overrides your request.

Data portability: If you have provided us with personal data on the basis of a contract or consent you may have the right to ask us that the data you have provided us with is handed over in a structured, common and machine-readable format or that we transfer it, to another controller.

Objection: You may have the right to object at any time to data processing by us based on the safeguarding of legitimate interests for reasons arising from your particular situation. If you make use of your right to object, we will stop processing the data unless we can prove compelling reasons for further processing worthy of protection which outweigh your rights and interests.

Revocation of consent: If you have given us your consent to process of your personal data, you can revoke it at any time with effect for the future. The legality of the processing of your personal data until revocation remains unaffected.

Right to lodge a complaint with a supervisory authority: You can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. You can contact the supervisory authority responsible for your place of residence or your country or the supervisory authority responsible for us.

If you are based in, or the issue relates to, the UK, the Information Commission can be contacted as follows:

If you are based in or the issue you would like to complain about took place outside of the United Kingdom but within the European Economic Area (EEA), you can contact the data protection authority in your place of residence or your country. Please click here for a list of local data protection authorities in the other EEA countries.

13. How to contact us

You can contact us free of charge if you have questions regarding the processing of your personal data and your rights as a data subject. Please contact us by either:

Alternatively, you can contact our Data Protection Officer as indicated at the top of this Privacy Notice under Controller and Data Protection Officer.

Please make sure that we can definitely identify you. If you revoke your consent, you can alternatively choose the contact method that you used when you gave your consent.

14. Effective date

As our business changes from time to time, we sometimes need to make changes to the way we collect and use your personal information. Therefore, this Privacy Notice may be updated from time to time. If we make changes to this Privacy Notice, we will notify you of these changes by email and post an alert on the home page of our website.

The latest version of this Privacy Notice applies.

Version 2026/3. Effective date: 19 March 2026.