SMMT Data Shop

Last updated: 20 November 2025

The Society of Motor Manufacturers and Traders Limited (“SMMT”) respects your right to privacy. This Privacy Notice explains who we are, how we collect, share and use personal information about you, and how you can exercise your privacy rights. This Privacy Notice describes SMMT’s current practices with regard to Personal Data collected by SMMT from you directly and/or through https://datashop.smmt.co.uk (‘Website’). There is a separate Privacy Notice for SMMT here.

This Website is owned and operated by SMMT. If you have any questions or concerns about our use of your personal information, then please contact us using the contact details provided at the bottom of this Privacy Notice.

Your Data Protection Rights

You have the following data protection rights:

If you wish to access, correct, update or request deletion of your personal information, you can do so at any time by contacting us using the contact details provided under the “How to Contact Us” heading below.
In addition, you can object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information. Again, you can exercise these rights by contacting us using the contact details provided under the “How to Contact Us” heading below.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. If you are not satisfied, you also have the right to make a complaint to the Information Commissioner’s Office – the supervisory authority that handles data protection law in the UK. You can contact them at: https://ico.org.uk/make-a-complaint/

How Is Data Collected And Used?

The personal information that we may collect about you broadly falls into the following categories:

Information that you provide voluntarily

SMMT collects personal data on this site when you submit such data to us during the Website registration and log in (this includes your name, organisation, contact details (phone and email), job title and marketing preferences) or when you use the ‘contact us’ facility. The personal data you provide will only be used by SMMT to provide you with the Website services or to send you communications (including marketing communications) where you have requested us to do. The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.

Information that we collect automatically

Use of IP Addresses

An Internet Protocol (IP) Address is a set of numbers that is automatically assigned to your computer whenever you log onto your internet service provider or through your organisation’s local area network (LAN) or wide area network (WAN). Web servers automatically identify your computer by the IP address assigned to it during your session. SMMT may collect IP addresses for the purposes of systems administration and to audit the use of our websites. For more information please refer to our Cookies Notice.

Marketing And Consent

During the Website registration and log in process or at any point where personal data is collected by us about you, you may be asked to indicate your marketing preferences regarding SMMT sending you information about other SMMT products or services. You will only be sent information if you have requested to receive it and if having given your consent you later change your mind, you are free at any time to amend your details to remove your consent by emailing us at gdpr@smmt.co.uk with the details of your request. We will then update your preferences for you.

If you also do not wish to receive certain information which we have provided to you, please let us know at gdpr@smmt.co.uk.

Legal Basis For Processing Personal Information

Our legal basis for collecting and using personal information will depend on the data concerned and the specific context in which we collect it.

However, we will normally collect personal information from you only where we have your consent or there is a contractual relationship, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms.

If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information). Similarly, if we collect and use your personal information in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “How to contact us” heading below.

Sharing Personal Data With Third Parties

We may disclose your personal information to the following categories of recipients:

to our group companies, third party services providers and partners who provide data processing services to us (for example, to support the delivery of, provide functionality on, or help to enhance the security of our Website), or who otherwise process personal information for purposes that are described in this Privacy Notice or notified to you when we collect your personal information
to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
to an actual or potential buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Privacy Notice;

Aggregated Data

SMMT combines personal data collected during registration with information from cookies to track overall website usage. This includes metrics such as the total number of visits, page-by-page traffic, and visitors’ internet service provider domains. To process and analyse this data, SMMT may work with third-party partners. All data is aggregated, meaning it is grouped and anonymized, and no individual personal details are disclosed. We use these insights to understand how visitors interact with our websites and to improve their experience. When specific services are involved, aggregated data may also be shared with service partners to help monitor and enhance those services. No personal data is ever shared during this process.

Security

SMMT has security measures in place to attempt to protect against the loss, misuse and alteration of your user data under our control. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information. Employees who have access to Personal Data have been trained to handle such data properly and in accordance with our security protocols and strict standards of confidentiality. Although we cannot guarantee against any loss, misuse, unauthorised disclosure, alteration or destruction of data, we try to prevent such unfortunate occurrences.

Updates to this Privacy Notice

We may update this Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make.

You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice.

Data Retention

We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it.

How To Contact Us

Should you have any queries or concerns regarding use of your personal data, please email gdpr@smmt.co.uk.

Back