Privacy policy

Last updated: 19 June 2026

1. Who We Are

Tesla Owners UK Limited ("we", "us", "our" or the "Club") is the controller of your personal data. We are a company limited by guarantee registered in England and Wales (company number 12049084) with our registered office at Oaklands, St Clere Hill Road, Sevenoaks, Kent TN15 6AH.

We are an independent Tesla owners' group. We are not affiliated with Tesla, Inc. or Tesla Motors Limited.

Our data privacy manager can be contacted at:

Email: regulation@teslaowners.org.uk
Post: Oaklands, St Clere Hill Road, Sevenoaks, Kent TN15 6AH

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we would appreciate the chance to address your concerns first.

2. What Data We Collect

We collect the following categories of personal data:

Identity data — name, username, title. We also treat vehicle identification numbers (VINs) and registration numbers as personal data where they can be linked to you.
Contact data — email address, postal address, telephone number.
Payment data — payment card details (processed by Stripe; we do not store full card numbers).
Transaction data — records of purchases and payments.
Technical data — IP address, browser type and version, device and operating system, time zone, and browsing behaviour on our Website.
Profile data — your username, password, membership preferences, survey responses, and purchase history.
Communications data — your marketing preferences and records of correspondence with us.

We do not collect special category data (such as health, ethnicity, political opinions, or biometric data) or data about criminal convictions.

3. How We Collect Your Data

We collect data in three ways:

Directly from you — when you register for membership, verify your eligibility with a VIN, place an order, subscribe to communications, enter a competition, attend an event, post on our forum, or contact us.

Automatically — when you use the Website, through cookies, server logs, and similar technologies. See our Cookie Policy for details.

From third parties — including analytics providers (such as Google), payment processors (Stripe), and publicly available sources (such as Companies House).

4. How and Why We Use Your Data

We only process your personal data where we have a lawful basis to do so. The table below sets out our processing activities, the data involved, and the lawful basis we rely on.

What we do	Data used	Lawful basis
Register you as a member and verify your eligibility (including by VIN)	Identity, Contact	Performance of our contract with you
Process orders and payments	Identity, Contact, Payment, Transaction	Performance of our contract with you
Manage your membership and notify you of changes to our terms or policies	Identity, Contact, Profile, Communications	Contract performance; Legal obligation
Operate and administer the Website, including security and troubleshooting	Identity, Contact, Technical	Legitimate interests (keeping the Website secure and operational)
Send you information about the Club, events, and offers	Identity, Contact, Profile, Technical, Communications	Legitimate interests (promoting the Club to existing members). For third-party marketing: your consent
Analyse Website usage and improve our services	Technical, Profile	Legitimate interests (understanding how members use the Website so we can improve it)
Run competitions and surveys	Identity, Contact, Profile	Contract performance; Legitimate interests (growing and developing the Club)
Prevent banned users or non-owners from accessing the community under false identities	Identity, Contact, Profile, Technical	Legitimate interests (protecting the integrity of the Club community)

A note on legitimate interests: Where we rely on legitimate interests, we have assessed that our processing is necessary for purposes that are not overridden by your rights and interests. You can ask us for details of this assessment at any time.

Marketing: You will receive marketing from us if you have purchased from us or joined as a member and have not opted out. You can opt out at any time by clicking the unsubscribe link in any email, or by contacting us. We will always obtain your express consent before sharing your data with third parties for their own marketing.

We share your data only where necessary and with appropriate safeguards. Recipients include:

Payment processors — Stripe, to process your payments.
Website and IT service providers — who host and maintain the Website and our systems.
Analytics providers — such as Google, to help us understand Website usage.
Professional advisers — including accountants, lawyers, and insurers, where needed.
Regulators and authorities — including HMRC, where we are legally required to do so.

We do not sell your personal data.

If the Club is involved in any merger, acquisition, or restructuring, your data may be transferred to the successor entity, who will be bound to use it in accordance with this policy.

We require all third-party processors to respect the security of your data and to process it only on our instructions and in accordance with data protection law.

6. International Transfers

Some of our service providers (including Google and Stripe) are based outside the United Kingdom. Where your data is transferred outside the UK, we ensure it is protected by appropriate safeguards, including:

transfers to countries with UK adequacy regulations;
the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses; or
where applicable, certification under the UK Extension to the EU–US Data Privacy Framework.

You can contact us for further details of the safeguards in place.

7. How Long We Keep Your Data

We keep your data only for as long as we need it. As a general guide:

Membership and account data — for the duration of your membership and for up to 2 years after it ends, to allow for re-joining and to resolve any disputes.
Transaction and payment records — for 6 years after the transaction, in line with HMRC requirements and limitation periods.
Marketing preferences — until you opt out or withdraw consent.
Technical and analytics data — typically retained in anonymised or aggregated form.

Where we no longer need your personal data, we will securely delete or anonymise it.

8. Your Rights

Under UK data protection law, you have the following rights:

Access — to request a copy of the personal data we hold about you.
Correction — to ask us to correct inaccurate or incomplete data.
Erasure — to ask us to delete your data where there is no good reason for us to continue processing it.
Restriction — to ask us to suspend processing in certain circumstances.
Portability — to receive your data in a structured, commonly used, machine-readable format.
Objection — to object to processing based on legitimate interests or for direct marketing.
Withdraw consent — where we rely on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
Complain — to lodge a complaint with us or with the ICO.

To exercise any of these rights, please contact us using the details in section 1. We will respond within one month. We may need to verify your identity before acting on your request. There is no fee for most requests, but we may charge a reasonable fee or refuse to act if a request is clearly unfounded or excessive.

From 19 June 2026, you will also have a statutory right to complain directly to us about our handling of your personal data, and we will acknowledge your complaint within 30 days.

9. Data Security

We have implemented appropriate technical and organisational measures to protect your data against accidental loss, unauthorised access, alteration, and disclosure. Access to your data is limited to those who need it for legitimate Club purposes, and all such persons are subject to confidentiality obligations.

If we become aware of a personal data breach that is likely to result in a risk to your rights, we will notify you and the ICO in accordance with our legal obligations.

10. Cookies

We use cookies and similar technologies on the Website. For full details of the cookies we use, why we use them, and how to manage your preferences, please see our Cookie Policy.

11. Children

The Website is not directed at children and we do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a child, we will delete it promptly.

12. Third-Party Links

The Website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and recommend that you read their privacy policies before providing any personal data.

13. Changes to This Policy

We may update this policy from time to time. We will notify members of material changes by email or through the Website. The date at the top of this page shows when this policy was last revised.

Previous versions are available on request.