Privacy notice.
ON THIS PAGE
1 · What we collect
The Classic Bureau collects the minimum information required to introduce a client to a partner, to maintain the Register, and to respond to an enquiry. In practical terms, this means:
- The name, email address, telephone number, and short message you provide on the enquiry form.
- For the Register: the publicly listed factual data of pre-1996 motor cars — year, make, model, chassis, indicative price, listing URL, and the date we observed the listing.
- For the daily scrape: server logs of which URLs we fetched, when, and the HTTP response (held for 30 days for diagnostic purposes only).
2 · What we explicitly do not collect
The Bureau does not, under any circumstances, scrape or store:
- The name, phone number, email, or any contact detail of a private seller on a third-party site.
- Any location finer than the published town or county on a listing.
- Your credit profile, your bank details, or any information related to a credit application. Finance introductions are warm hand-offs to a regulated partner; the application happens directly with them.
- Tracking cookies, third-party advertising pixels, social-media beacons, or any analytics that build a profile of you across the web.
3 · Why we collect what we do
The lawful basis for processing enquiry-form data is your explicit consent under Article 6(1)(a) of UK GDPR, and the equivalent voluntary disclosure of personal information under section 11 of the Protection of Personal Information Act 4 of 2013 (POPIA). For the Register, the lawful basis is legitimate interest in publishing a factual index of publicly available commercial listings, balanced against the rights of source publishers (whose images we attribute, not rehost — see our takedown procedure).
4 · How long we keep your information
- Enquiry data: retained for as long as the enquiry is active, plus 24 months for our reasonable business interest in following up on an introduction. Deleted on request at any time.
- Server logs: 30 days.
- Register entries: retained while the source listing is live; archived (without contact data) for up to 36 months thereafter to support the historical price index.
5 · Your rights
Whether you fall under POPIA or UK GDPR, you have the right to:
- Ask what we hold about you (a Subject Access Request).
- Ask us to correct or update inaccurate information.
- Ask us to delete your information ("right to erasure").
- Object to processing.
- Lodge a complaint with the relevant supervisory authority — the Information Regulator (South Africa) or the Information Commissioner's Office (United Kingdom).
We respond to all such requests within 30 calendar days. There is no fee.
6 · Cookies and analytics
The Classic Bureau uses one technical cookie — a CSRF token on the enquiry form — and no advertising or tracking cookies. We measure aggregate traffic at the server-log level only; we do not use Google Analytics, Meta Pixel, or any third-party analytics product. The site is hosted on infrastructure governed by the same privacy commitments stated here.
7 · Who we share data with
Only with the specific finance, insurance, restoration, or sourcing partner to whom you have asked the Bureau to introduce you. Each introduction is a warm hand-off by name; the partner will contact you directly under their own privacy notice, which we are happy to provide on request before the introduction is made.
8 · How to reach the Information Officer
The Bureau's Information Officer under POPIA, and Data Protection Lead under UK GDPR, is Nadia Okafor.
Correspondence: [email protected] · The Classic Bureau (Pty) Ltd, By appointment, Cape Town, South Africa.
This notice is reviewed every six months and on every material change to our processing. The most recent review is dated above.