Last updated: February 2026
1. Who We Are
This Privacy Notice explains how Harris Bus & Coach (“we”, “us”, “our”) collects and uses your personal information.
Controller:
Harris Bus & Coach
Registered UK Establishment Number: BR022910
Registered UK Office: 1 Carraway Road, Liverpool, Gillmoss Industrial Estate, L110EE
Parent Company: Harris Bus & Coach Unlimited Company
Email: info@harrishiger.co.uk
VAT Number: 372825284
If you are located in the EU, our Article 27 EU Representative is:
Harris Bus & Coach Unlimited Company, Harris Group, Naas Road, Dublin 12, Ireland, info@harrisgroup.ie
2. Joint Controllers
For certain activities, such as vehicle delivery, warranty administration, safety compliance and aftersales, we act as joint controllers with Harris Group and other partners.
A Joint Controller Agreement under Article 26 UK/EU GDPR sets out each party’s responsibilities. A summary (“the essence”) is available on request at info@harrishiger.co.uk.
3. The Personal Information We Collect
We collect personal information for the following purposes:
A. Providing vehicles, products and services
• Name, title, contact details
• Addresses
• Vehicle details (VIN, registration, warranty information)
• Purchase history & service records
• Payment information & identification documents
B. Operating customer accounts & warranties
• Contact details
• Account & warranty data
• Communications history
• Preferences & permissions
C. Website use, cookies and tracking
• IP address, device identifiers
• Browsing activity & analytics
• Marketing preferences
D. Safety, security & crime prevention
• CCTV images
• Security logs
• Call recordings
• Criminal offence–related verification (where legally required)
E. Research, quality & training
• Call recordings
• Feedback & survey responses
• Statistical/analytical data
F. Legal & compliance
• Identification documentation
• Tax, customs, import/export data
• Audit, regulatory & legal process information
Indirect collection:
Where we receive personal data from dealers, logistics partners, finance/insurance providers or public sources, we will provide all Article 14 information within one month or at first contact.
4. Special Category & Criminal Offence Data
We process special category or criminal offence data only where necessary and lawful.
Special Category Data (Art. 9 GDPR)
Processed under:
• Employment/social protection law
• Substantial public interest (e.g., safety, safeguarding)
• Explicit consent (where applicable)
Criminal Offence Data (Art. 10 GDPR)
Processed under:
• Schedule 1 DPA 2018 conditions such as:
– Preventing/detecting unlawful acts
– Regulatory requirements
– Safeguarding
5. Lawful Bases for Processing
We rely on the following lawful bases:
• Contract — to supply vehicles, provide warranties and manage services
• Legal obligation — recalls, tax, regulatory duties
• Legitimate interests — fraud prevention, site security, customer service improvement
• Consent — marketing communications; non essential cookies
• Public interest — compliance with statutory/ regulatory functions
Where we rely on legitimate interests, we document and balance them against your rights. Details are available on request.
6. Where We Get Your Data
We obtain information from:
• You directly
• Dealers and authorised repairers
• Harris Group
• Finance, logistics & warranty partners
• Insurers and regulatory agencies
• Website analytics providers
• Public sources
Where data is received indirectly, we will tell you the source and categories of data.
7. Who We Share Your Information With
We share information only where lawful and necessary with:
A. Industry partners
Vehicle manufacturers, dealers, warranty partners
B. Service providers (processors)
IT, cloud, communications, logistics, marketing & analytics providers
C. Regulatory & professional bodies
Insurers, HMRC, DVLA, Trading Standards, law enforcement
D. Joint Controllers
Harris Group and any other partners identified under Article 26.
All third parties must protect your data and use it only for specified lawful purposes.
8. International Transfers
Where we transfer data outside the UK/EEA, we use:
• Adequacy regulations/decisions
• UK IDTA
• EU SCCs
• UK US Data Bridge and/or EU US Data Privacy Framework for certified US recipients
You may request a copy or summary of safeguards used.
9. How Long We Keep Your Data
We keep data only as long as necessary, including to:
• Fulfil contracts
• Meet legal requirements
• Maintain safety records
• Resolve disputes
Typical periods:
• Customer records: 7 years after relationship ends
• Warranty/recall data: vehicle lifetime + statutory period
• Financial/transaction data: 7 years
• CCTV: 30–90 days
• Marketing data: until consent withdrawn
Where periods vary, we apply documented criteria. A full retention schedule is available on request.
10. Automated Decision-Making
We do not use personal data for automated decisions with legal or similar significant effects. If this changes, we will update this Notice.
11. Your Rights
You have rights to:
• Access
• Rectification
• Erasure
• Restriction
• Objection
• Data portability
• Withdraw consent at any time
We respond within one month.
Email: info@harrishiger.co.uk
Where providing data is a statutory or contractual requirement, we will explain the consequences of not providing it (e.g., inability to supply goods/services).
12. Cookies & Marketing Communications
We use cookies to operate our website and improve your experience.
• Consent is required for non essential cookies (analytics/advertising).
• “Reject all” is always as easy as “Accept all”.
• You may change cookie settings at any time.
For marketing:
• We send electronic marketing only with your consent, or under the PECR soft opt in to existing customers about similar products/services.
• Every message includes an opt out option.
We will update this section as ICO issues its final 2026 guidance following DUAA reforms.
13. How to Complain
If you have concerns, contact info@harrishiger.co.uk first.
If unresolved, you may complain to:
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
0303 123 1113
www.ico.org.uk
EU data subjects may also contact their local supervisory authority.
14. Children
Our services are not directed to children, and we do not knowingly collect children’s data.