Vixa Repair Service Privacy Notice

Updated June 2024

This privacy notice lets you know what happens to the personal data we collect, use and hold when you, your beneficiaries hold or use the Vixa Repair Service. For other AA Group Privacy Notice please click here.

If you provide us with personal information on behalf of another person, you must ensure that it is accurate, up to date and that you have their authorisation to do so. Alternatively, you have full permission from the vehicle owner to use it in connection with the Vixa Repair Service. You should make sure that you provide them with a copy of this Privacy Notice or let them know how to access it. Where this Privacy Notice refers to "you" this also includes data about anyone else named on the Vixa account or whose data you provide us with.

The AA Limited and our Data Protection Officer (DPO)

We are the AA. Our main address is Fanum House, Basing View, Basingstoke, Hampshire, RG21 4EA. The data controller of the Vixa Repair Services is Prestige Fleet Servicing Limited. We have a Data Protection Officer who you can contact by using the contact details at the bottom of this notice.

Personal data we hold and use

We use several different types of information about you and your product beneficiaries. Below we have set out the types of information we collect, use or hold about you. If you hold any other AA Group products, e.g. insurance policy, roadside product or other services (such as financial service or travel products), you should also read the Privacy Notice for those products or services to understand what other data we might hold. The next section tells you what personal data we collect about you:

Personal and contact details, address, and location for repairs;
Product beneficiaries and users of the Vixa product;
Records of your contacts with us and your payment details;
Vehicle information, including make, model, age, usage, breakdowns, repairs, and faults;
Connected car insights about your vehicle (including assessing faults or issues);
Telemetry data, such as vehicle diagnostics faults and general vehicle status, idling time, engine revolutions, battery related information, where available;
Details of your usage of the Vixa Repair Services; and
Third party transactions such as where a person other than the account holder pays for or uses the service.

We may be unable to provide you with our products or services if you do not provide certain information to us. In cases where providing some personal information is optional, we’ll make this clear.

Sources of your personal data

As we said above, the information we hold comes from different sources. These are:

You directly, and any information from family members, beneficiaries of products and services (for example, if they are authorised to act for you or are allowed to use a service you have with us);
From your car that has connectivity enabled via the Original Equipment Manufacturer (i.e. car manufacturer) or obtained via the Car Plug-in;
Information generated about you when you use our products and services;
Business partners (e.g. garage agents, financial services institutions, insurers) or others needed to provide our services to you;
Anyone who operates any of your accounts, products or services on your behalf (e.g. Power of Attorney, solicitors, intermediaries, etc.);
From sources such as, DVLA, DVSA, publicly available directories and information (e.g. telephone directory, social media, internet, news articles), debt recovery and/or tracing agents, other organisations to assist in prevention and detection of crime, police and law enforcement agencies; and
Information we source about you or customers generally from commercial third parties, including demographic information, vehicle details, claims data, fraud information, marketing data, publicly available information, property and other information to help improve our products and services or our business.

Reasons for holding and using your personal data

The reasons for using your personal data are below. We have arranged them according to the legal reason we are allowed to use the data.

To provide you with our products or services:
Providing you with Vixa Repair Services (see Vixa Repair Service Terms and Conditions);
Communicating with you and holding records about our dealings and interactions with you, your fellow beneficiaries;
Making decisions about you or your use of the Vixa product and service, including your continued suitability for it, the risk of providing you with the products, and assessing compliance with the product terms;
To manage the operation of our business;
To manage the operation of our business and business partners that help support the Vixa product and service;
For analysing and profiling aspects of your vehicle or driving (including assessing faults or issues), driving style (including recommending improvements and assessing risk associated with your driving style);
Updating your records, and recovering debt;
To enable other AA group and branded companies to provide you with your products and services, quote for products and services, or manage products and services you hold; and
To share information as needed with business partners as required for managing your product or assessing application account beneficiaries, service providers or as part of providing, administering or developing our products and services or our business.
For our legitimate interests or those of others:
To develop our Roadside, Insurance and any other products or service using the information we hold;
To continually develop, improve and manage our risk assessment and pricing models;
To provide personalised content and services to you, such as tailoring our products and services, our digital customer experience and offerings, and deciding which offers or promotions to show you on our digital channels;
To link together your AA products and services including to enable you to view these in a single account or profile, linking together your accounts on our systems and using this combined view for the purposes listed in this section;
To test and improve the performance of our products, services, processes and systems;
To improve the operation of our business - and that of our business partners – for example, by improving customer service and operational performance and efficiency;
To develop new products and services, and to review and improve current products and services;
For management and auditing of our business operations - including accounting;
To monitor and to keep records of our communications with you and our staff (see below);
For marketing analysis and related profiling to help us to offer you relevant products and service, including deciding whether or not to offer you certain products and service;
To understand our customers, their use of our products, their preferences and develop models, including developing profiles, algorithms and statistical models;
Subject to your preferences, to send you marketing by SMS, push notification, email, phone, post, social media and digital channels (e.g. using Facebook Custom Audiences and Google Custom Match). Offers may relate to any of our products and services such as cars, money and financial services, insurance, travel, member offers as well as to any other offers and advice we think may be of interest;
To provide insight and analysis of our customers both for ourselves and business partners based on your products, your use of it, your other use of your products by others;
For market research, profiling, and analysis and developing statistics;
To facilitate the sale of one or more parts of our business;
To share information with business partners as necessary for the purposes listed in this notice; and
To share information with other AA Group, AA branded and non-AA branded companies to enable them to perform any of the above purposes.
To comply with our legal obligations such as our financial services or regulatory obligationssuch as our financial services or regulatory obligations, including Financial Conduct Authority, Prudential Conduct Authority and Financial Ombudsman Service rules, regulations and guidance.
With your consent or explicit consent:
For some direct marketing communications which are not based on our legitimate interests;
For some of our profiling and other automated decision making which is not required for contractual or legal purposes; and
For some of our processing of special categories of personal data such as about your health (where applicable), if you are a vulnerable customer or some criminal records information, if another legal basis does not apply.
Necessary for a public interest, such as:
Using special categories of personal data such as about your health, criminal records information (including alleged offences) if this is needed to quote for or administer a policy, including assessing the risk of providing you with the Roadside policy or product; and
Using special categories of personal data about your health or needs (if you are a vulnerable customer) including assessing the risk of providing you with a policy or product.

The categories of third parties we use are listed below. We will use these third parties for all the reasons we have described in this notice and they may process the types of personal information we also hold or use.

With AA Group, AA branded and non-AA branded companies, including but not limited to Automobile Association Developments Limited (including AA Breakdown Services and AA/BSM Driving School), Automobile Association Insurance Services Limited, AA Underwriting Insurance Company Limited and AA Financial Services Limited;
With account beneficiaries if they use a service you have with us;
With any parties involved in a claim if they need to receive information to allow us to handle a claim made by you or against you, or if either insurer needs to investigate a case of fraud;
With service providers who are a part of providing products and services to you or help us to operate our business;
Police and law enforcement agencies if we are required or need to support a criminal investigation;
Governmental and regulatory bodies such as HMRC, DVSA, DVLA, the Financial Conduct Authority, the Prudential Regulation Authority, the Financial Ombudsman’s Service, and the Information Commissioner’s Office;
Organisations and businesses who provide services to us under our authority such as service providers, debt recovery agencies, IT companies, and suppliers of business support services; and
Market research organisations who help us to develop and improve our products and services.

Where we rely on your consent, you can withdraw it at any time by using the contact details in the Contact Us section below or via functionality provided within the Vixa app.

Transfers outside of the UK and Europe

Your personal information may be transferred outside the UK or European Economic Area, for example to service providers. If we do so, we’ll make sure that suitable safeguards are in place where required, for example by using approved contractual agreements or other legal arrangements unless certain exceptions apply.

Changes to your data

You should tell us so that we can update our records. Please see the “Contact Us or our DPO” section below for more information.

Monitoring communications

We may monitor communications with you, where permitted by law. We do this for quality control and staff training purposes, to comply with regulatory rules, to prevent or detect crime, to protect the security of our communications, data, and systems, and to enforce compliance with our internal policies.

Retention of your personal data

Unless we explain otherwise to you, we’ll hold your personal information based on the following criteria:

For as long as we provide products or services to you and then for as long as someone could bring a claim against us;
To comply with legal and regulatory requirements or guidance; or
For as long as we have reasonable business needs.

Your data protection rights

Here is a list of the rights that all individuals have under UK data protection laws. They don’t apply in all circumstances so your request may not always be granted. If you wish to use any of them, we will explain when we respond to you if they are apply or not, or if we will comply or not with your request, including the reasons why.

The right to be informed about your processing of your personal information;
The right to have your personal information corrected if it is inaccurate and to have incomplete personal information completed;
The right to object to processing of your personal information;
The right to restrict processing of your personal information;
The right to have your personal information erased;
The right to request access to your personal information and how we process it;
The right to move, copy or transfer your personal information; and
Rights in relation to automated decision making which has a legal effect or otherwise significantly affects you.

You have the right to complain to the Information Commissioner’s Office which enforces data protection laws - https://ico.org.uk/. You can contact our DPO, for more details on all the above.

You have a right to object

You have the right to object to certain purposes for processing, in particular to data used for direct marketing purposes and to data processed for certain reasons based on our legitimate interests. You can contact us using the contact details listed belowto exercise these rights.

Opting out of marketing

You can stop our marketing at any time by contacting us using the details below or by following the instructions in the communication we sent you, e.g. unsubscribe link in the bottom of a marketing email. You can also email [email protected]

Changes to this privacy notice

We may change this privacy notice from time to time to reflect changes in the law and/or our privacy practices. We encourage you to check this privacy notice for changes periodically.

Contact Us or our DPO

You can contact us via the Contact Us section of our website. Alternatively, you can write to AA Limited, Fanum House, Basing View, Basingstoke, Hampshire, RG21 4EA, marking it for the attention of the DPO or email [email protected].

Vixa Repair Service Privacy Notice

Updated June 2024

The AA Limited and our Data Protection Officer (DPO)

Personal data we hold and use

Personal and contact details, address, and location for repairs;
Product beneficiaries and users of the Vixa product;
Records of your contacts with us and your payment details;
Vehicle information, including make, model, age, usage, breakdowns, repairs, and faults;
Connected car insights about your vehicle (including assessing faults or issues);
Telemetry data, such as vehicle diagnostics faults and general vehicle status, idling time, engine revolutions, battery related information, where available;
Details of your usage of the Vixa Repair Services; and
Third party transactions such as where a person other than the account holder pays for or uses the service.

We may be unable to provide you with our products or services if you do not provide certain information to us. In cases where providing some personal information is optional, we’ll make this clear.

Sources of your personal data

As we said above, the information we hold comes from different sources. These are:

You directly, and any information from family members, beneficiaries of products and services (for example, if they are authorised to act for you or are allowed to use a service you have with us);
From your car that has connectivity enabled via the Original Equipment Manufacturer (i.e. car manufacturer) or obtained via the Car Plug-in;
Information generated about you when you use our products and services;
Business partners (e.g. garage agents, financial services institutions, insurers) or others needed to provide our services to you;
Anyone who operates any of your accounts, products or services on your behalf (e.g. Power of Attorney, solicitors, intermediaries, etc.);
From sources such as, DVLA, DVSA, publicly available directories and information (e.g. telephone directory, social media, internet, news articles), debt recovery and/or tracing agents, other organisations to assist in prevention and detection of crime, police and law enforcement agencies; and
Information we source about you or customers generally from commercial third parties, including demographic information, vehicle details, claims data, fraud information, marketing data, publicly available information, property and other information to help improve our products and services or our business.

Reasons for holding and using your personal data

The reasons for using your personal data are below. We have arranged them according to the legal reason we are allowed to use the data.

To provide you with our products or services:
Providing you with Vixa Repair Services (see Vixa Repair Service Terms and Conditions);
Communicating with you and holding records about our dealings and interactions with you, your fellow beneficiaries;
Making decisions about you or your use of the Vixa product and service, including your continued suitability for it, the risk of providing you with the products, and assessing compliance with the product terms;
To manage the operation of our business;
To manage the operation of our business and business partners that help support the Vixa product and service;
For analysing and profiling aspects of your vehicle or driving (including assessing faults or issues), driving style (including recommending improvements and assessing risk associated with your driving style);
Updating your records, and recovering debt;
To enable other AA group and branded companies to provide you with your products and services, quote for products and services, or manage products and services you hold; and
To share information as needed with business partners as required for managing your product or assessing application account beneficiaries, service providers or as part of providing, administering or developing our products and services or our business.
For our legitimate interests or those of others:
To develop our Roadside, Insurance and any other products or service using the information we hold;
To continually develop, improve and manage our risk assessment and pricing models;
To provide personalised content and services to you, such as tailoring our products and services, our digital customer experience and offerings, and deciding which offers or promotions to show you on our digital channels;
To link together your AA products and services including to enable you to view these in a single account or profile, linking together your accounts on our systems and using this combined view for the purposes listed in this section;
To test and improve the performance of our products, services, processes and systems;
To improve the operation of our business - and that of our business partners – for example, by improving customer service and operational performance and efficiency;
To develop new products and services, and to review and improve current products and services;
For management and auditing of our business operations - including accounting;
To monitor and to keep records of our communications with you and our staff (see below);
For marketing analysis and related profiling to help us to offer you relevant products and service, including deciding whether or not to offer you certain products and service;
To understand our customers, their use of our products, their preferences and develop models, including developing profiles, algorithms and statistical models;
Subject to your preferences, to send you marketing by SMS, push notification, email, phone, post, social media and digital channels (e.g. using Facebook Custom Audiences and Google Custom Match). Offers may relate to any of our products and services such as cars, money and financial services, insurance, travel, member offers as well as to any other offers and advice we think may be of interest;
To provide insight and analysis of our customers both for ourselves and business partners based on your products, your use of it, your other use of your products by others;
For market research, profiling, and analysis and developing statistics;
To facilitate the sale of one or more parts of our business;
To share information with business partners as necessary for the purposes listed in this notice; and
To share information with other AA Group, AA branded and non-AA branded companies to enable them to perform any of the above purposes.
To comply with our legal obligations such as our financial services or regulatory obligationssuch as our financial services or regulatory obligations, including Financial Conduct Authority, Prudential Conduct Authority and Financial Ombudsman Service rules, regulations and guidance.
With your consent or explicit consent:
For some direct marketing communications which are not based on our legitimate interests;
For some of our profiling and other automated decision making which is not required for contractual or legal purposes; and
For some of our processing of special categories of personal data such as about your health (where applicable), if you are a vulnerable customer or some criminal records information, if another legal basis does not apply.
Necessary for a public interest, such as:
Using special categories of personal data such as about your health, criminal records information (including alleged offences) if this is needed to quote for or administer a policy, including assessing the risk of providing you with the Roadside policy or product; and
Using special categories of personal data about your health or needs (if you are a vulnerable customer) including assessing the risk of providing you with a policy or product.

With AA Group, AA branded and non-AA branded companies, including but not limited to Automobile Association Developments Limited (including AA Breakdown Services and AA/BSM Driving School), Automobile Association Insurance Services Limited, AA Underwriting Insurance Company Limited and AA Financial Services Limited;
With account beneficiaries if they use a service you have with us;
With any parties involved in a claim if they need to receive information to allow us to handle a claim made by you or against you, or if either insurer needs to investigate a case of fraud;
With service providers who are a part of providing products and services to you or help us to operate our business;
Police and law enforcement agencies if we are required or need to support a criminal investigation;
Governmental and regulatory bodies such as HMRC, DVSA, DVLA, the Financial Conduct Authority, the Prudential Regulation Authority, the Financial Ombudsman’s Service, and the Information Commissioner’s Office;
Organisations and businesses who provide services to us under our authority such as service providers, debt recovery agencies, IT companies, and suppliers of business support services; and
Market research organisations who help us to develop and improve our products and services.

Where we rely on your consent, you can withdraw it at any time by using the contact details in the Contact Us section below or via functionality provided within the Vixa app.

Transfers outside of the UK and Europe

Changes to your data

You should tell us so that we can update our records. Please see the “Contact Us or our DPO” section below for more information.

Monitoring communications

Retention of your personal data

Unless we explain otherwise to you, we’ll hold your personal information based on the following criteria:

For as long as we provide products or services to you and then for as long as someone could bring a claim against us;
To comply with legal and regulatory requirements or guidance; or
For as long as we have reasonable business needs.

Your data protection rights

The right to be informed about your processing of your personal information;
The right to have your personal information corrected if it is inaccurate and to have incomplete personal information completed;
The right to object to processing of your personal information;
The right to restrict processing of your personal information;
The right to have your personal information erased;
The right to request access to your personal information and how we process it;
The right to move, copy or transfer your personal information; and
Rights in relation to automated decision making which has a legal effect or otherwise significantly affects you.

You have the right to complain to the Information Commissioner’s Office which enforces data protection laws - https://ico.org.uk/. You can contact our DPO, for more details on all the above.

You have a right to object

Opting out of marketing

Changes to this privacy notice

We may change this privacy notice from time to time to reflect changes in the law and/or our privacy practices. We encourage you to check this privacy notice for changes periodically.

Vixa Repair Service Privacy Notice