Legal
What we dowith your information.
Ultra Vita collects personal information in order to answer enquiries, source vehicles and introduce customers to finance. This explains what is collected, why, who else sees it and what you can do about it.
Who is responsible for your information
Riccardo Leighton trading as Ultra Vita is the data controller for the personal information described in this notice. Ultra Vita is a trading name; the business is a sole trader, not a company.
The named data controller is Mr Riccardo Leighton. Write to Ultra Vita at Edward House, Great North Road, Newark, Nottinghamshire, NG24 1DP, or use the contact details on the contact page.
Ultra Vita is registered with the Information Commissioner's Office under reference ZC236752, registered on 2 September 2026 and due for renewal on 1 September 2027.
What we collect
What Ultra Vita holds about you depends entirely on how far a conversation goes. An enquiry that never becomes a purchase leaves very little behind; a completed finance agreement leaves more.
| Category | What it includes |
|---|---|
| Contact details | Your name, email address and telephone number — the three things the enquiry form asks for. |
| What you are looking for | The vehicle or the shape of it, your budget range, your timing, the kind of finance arrangement you have in mind, and anything else you choose to tell us. |
| Messages between us | Email, telephone notes, WhatsApp or text messages, and messages sent through Instagram or Facebook. Telephone calls are not recorded. |
| Identity documents | Where a purchase or a finance application goes ahead, a driving licence or a passport. |
| Finance paperwork | Quotations and signed agreements relating to a vehicle you are funding. |
| Technical information | The web server records the usual request information — IP address, browser and the page requested — for security and for keeping the site running. The site sets no cookies of its own and runs no analytics or advertising technology. |
Where we get it
Almost all of it comes from you. The rest comes from the people involved in the purchase.
- Directly from you — the enquiry form, email, telephone, WhatsApp, or a message on Instagram or Facebook.
- From a dealer, broker or supplier involved in a vehicle you are buying.
- From DSG Financial Services Ltd or a lender, in the course of a finance introduction.
- From public sources, where a vehicle is being sourced and its history or specification needs checking.
Messages sent through Instagram or Facebook reach Ultra Vita through those platforms, and Meta processes them under its own terms before Ultra Vita ever sees them. Ultra Vita has no control over that part and does not use either platform's advertising tools to target you.
Why we use it, and on what basis
UK data protection law requires a lawful basis for each purpose. These are Ultra Vita's.
| Purpose | Lawful basis |
|---|---|
| Answering your enquiry and discussing what you need | Steps taken at your request before entering into a contract. Where no contract is in prospect, our legitimate interest in responding to someone who has asked us to. |
| Sourcing a vehicle and dealing with a dealer or supplier on your behalf | Performance of our agreement with you, or steps at your request before it. |
| Introducing you to DSG Financial Services Ltd and to lenders | Steps at your request before entering into a finance agreement. |
| Keeping records of what was agreed, quoted and signed | Our legal obligations, and our legitimate interest in being able to evidence what happened. |
| Handling a complaint | Our legal obligations and our legitimate interest in resolving it properly. |
| Sending you marketing about vehicles or services | Your consent, which you can withdraw at any time. Marketing is never a condition of an enquiry and is never pre-ticked. |
| Keeping the website and our systems secure | Our legitimate interest in preventing abuse and keeping the service available. |
Finance introductions
Finance quotations are prepared through DSG Financial Services Ltd's quoting system, which shows quotes from the lenders available through DSG. You choose the one you would like to proceed with; Ultra Vita then proposes that deal, and DSG's team seeks approval from the lender. Approval is never guaranteed. Your details are entered either by Ultra Vita, from what you have told us, or by you, through a link Ultra Vita sends you. No credit search is carried out without your permission first.
Where you ask Ultra Vita to look at finance, your details are passed to DSG Financial Services Ltd and, through them, to lenders able to consider your circumstances. Ultra Vita is a credit broker, not a lender, and does not make lending decisions.
Once your information reaches DSG or a lender, each of them is a data controller in its own right and handles your information under its own privacy notice. A lender may carry out a credit search, which may leave a record on your credit file. The lender, not Ultra Vita, will tell you when that happens and what kind of search it is.
DSG publishes its own privacy notice, linked below.
- DSG Financial Services privacy noticePDF, published by DSG (opens in a new tab)
Who else sees it
Ultra Vita does not sell personal information and does not share it for anyone else's marketing.
| Recipient | Why |
|---|---|
| DSG Financial Services Ltd and lenders | Finance introductions, where you have asked for one. |
| Dealers, suppliers and transport providers | Where they are involved in sourcing, supplying or delivering a vehicle you are buying. |
| HighLevel, our customer relationship system | Holding enquiries and the correspondence that follows them, so nothing is lost and anyone picking up your enquiry can see its history. |
| Apple iCloud | Document storage — see the section below, which explains the current arrangement honestly. |
| Vercel | Hosts the website, and briefly processes what you send through its forms on the way to the services below. |
| Supabase | Holds an enquiry sent through the website's enquiry form, other than a general enquiry, between the moment you send it and the moment it reaches HighLevel, so it cannot be lost on the way. It is deleted automatically 30 days after it has reached HighLevel; one that could not reach HighLevel is kept there until it has been dealt with. |
| Resend | Sends the website's contact, general enquiry, partnership, leasing and salary-sacrifice forms to Ultra Vita by email, and the alert Ultra Vita receives if an enquiry cannot reach HighLevel. The alert carries a reference, never your details. |
| Cloudflare | Runs the spam check on the website's forms (Turnstile). It sees your IP address and details about your browser, used only to tell a person from an automated program; it does not see what you type into the form. |
| Microsoft 365 | Ultra Vita's business email. |
| Professional advisers | Accountants and, where needed, legal advisers. |
| Regulators, the ombudsman and law enforcement | Where we are required to, or where it is necessary to establish or defend a legal claim. |
How documents are stored today
Ultra Vita currently stores customer documents — which may include driving licences and other photographic identification, finance quotations and signed finance agreements — using Apple iCloud, under an Apple Account belonging to the business owner.
That is stated plainly because it should be. Access is limited to the business owner, and the account is protected by the controls Apple provides. Ultra Vita does not claim that the files are held only in the United Kingdom: Apple operates data centres in several countries and determines where data is stored.
Ultra Vita has not yet completed a formal assessment of this arrangement, and does not present it as one that has been assessed or approved.
How long we keep it
Ultra Vita keeps personal information for as long as it is needed for the purpose it was collected for, and then for as long as there is a legal or regulatory reason to keep it — which for anything connected to a finance agreement is measured in years rather than months.
A formal retention schedule is being written. Until it exists, Ultra Vita is not going to publish a table of periods it cannot yet guarantee it follows. The one automatic deletion today is on the website itself: an enquiry is removed from the website's delivery queue 30 days after it has reached HighLevel. An enquiry that could not reach HighLevel is not deleted automatically: it stays in the queue until it has been dealt with, so that it is not lost. If you want your information removed sooner, ask, and Ultra Vita will tell you what can be deleted and what must be kept, and why.
Keeping it safe
The website is served over HTTPS and sends security headers that restrict what a page may load and prevent the site being framed by another. The enquiry form validates everything it receives on the server, not only in your browser, and limits how often it can be submitted.
Business systems are protected by the access controls those services provide, including passwords and, where available, two-factor authentication.
No one can promise that information sent over the internet is completely secure, and Ultra Vita does not. What it can say is what it actually does, which is the list above.
Information leaving the UK
Some of the services Ultra Vita relies on are provided by companies based outside the United Kingdom, and information may be stored or processed outside it. Where that happens, UK data protection law requires an approved safeguard — usually the UK addendum to the standard contractual clauses, or a finding that the destination country offers adequate protection.
Ultra Vita has not yet completed and documented that assessment for each of its providers, and this section will state the specifics once it has. Nothing here should be read as a confirmation that your information stays in the United Kingdom, or that the position has already been reviewed.
Your rights
Under UK data protection law you have the right to ask for a copy of the personal information Ultra Vita holds about you; to have inaccurate information corrected; to ask for information to be deleted; to ask that its use be restricted; to object to its use where the basis is legitimate interests; to receive certain information in a portable form; and to withdraw consent where consent is the basis — which applies to marketing.
Not every right applies in every situation, and some information must be kept even when you ask for it to be deleted. Where that is the case Ultra Vita will tell you which information, and why.
To exercise any of these, write to Mr Riccardo Leighton at Edward House, Great North Road, Newark, Nottinghamshire, NG24 1DP, or use the contact details on the contact page. Ultra Vita will respond within one month, and will say so if a request is complex enough to need longer.
If you are unhappy with how we have handled your information
Please tell Ultra Vita first — most things are faster to put right directly. If you remain unhappy, you have the right to complain to the Information Commissioner's Office, the UK's data protection regulator. Complaining to the ICO does not affect any other right you have.
A complaint about a vehicle, a service or a finance introduction is handled differently; the complaints page explains how.
- Information Commissioner's Office (opens in a new tab)
Changes to this notice
Ultra Vita will update this notice when what it does with personal information changes. The date at the top shows when the current version was issued. Where a change is significant, Ultra Vita will draw attention to it rather than relying on you to notice.
Questions about this page? Speak to a person on +44 7854 089010