Lexus's Privacy Notice

Lexus UK has appointed a Data Protection Officer (DPO) who is available to handle any questions or queries you may have relating to the processing of your data under this Notice.

The DPO can be contacted at privacy@ld.lexus.co.uk or alternatively by writing to the Data Protection Officer, Lexus UK Great Burgh, Burgh Heath, Epsom, Surrey KT18 5UX.

When you interact with us

When we interact with you

Additionally, we may process your data based on the lawful bases set out below:

Your Consent

Where you have provided your consent, we may use and process your information to:

• Provide marketing communications - Contact you from time to time about Lexus’s products, offers and events that we think might be of interest to you. We will send these communications by email, phone, SMS or post, or where you give consent to do so by digital channels such as Facebook, Instagram or via online advertising platforms.
• Provide personalised communications - Use your Personal Data to create a catalogue of your preferences to help us provide you with a personalised experience, with tailored offers and services communicated to you based on your expressed preferences. To do this, we use your catalogued information to understand how you interact as a customer across the Lexus group (including our Authorised Lexus Retailers, Lexus Motor Insurance and Lexus Financial Services). This information may include data which you have provided to Lexus or which is generated by your use of Lexus products, our website and app, and your interaction with our marketing and online campaigns. Where available we may share or make use of additional information about you when it is available from third parties such as social media platforms, advertising platforms, data cleansing and enrichment organisations and publicly available sources. This helps us reduce the amount of information you receive and tailor our products and services to you.

To further ensure we accurately understand your interest and preferences, we may share your information with specific third parties, such as social media platforms, advertising platforms, data cleansing and enrichment organisations and publicly available sources. These third parties help us analyse your preferences, as well as identifying others who may share your interests in our products. This data is only used for this purpose.

For the avoidance of doubt, you will always have the right to withdraw your consent at any time by contacting us at privacy@ld.lexus.co.uk or, in relation to any marketing messages you receive, by using the unsubscribe option included in each electronic communication. Alternatively, if you have one, you can log into your MyLexus account and update your preferences directly.

Legitimate Interests

We may use and process your Personal Data, as set out below, where it is in our legitimate interests as a business to do so. We will always ensure this legitimate interest is not outweighed by your privacy rights and that the use of your Personal Data is duly communicated to you in the privacy notice related to that processing.

Processing necessary for us to support customers with sales and other enquiries

• Providing service, maintenance and warranty information and reminders, unless you object.
• Undertaking market analysis and research (including contacting you with customer surveys).
• For product development purposes (for example to improve vehicle quality, performance and safety).

Processing necessary for us to promote our business, brands, and products by understanding our customer and to measure the reach and effectiveness of our campaigns.

• Sending you information on Lexus services that you are benefitting from which are about to expire, including, but not limited to, our extended warranty and roadside assistance products, finance contracts, leasing contracts, etc.
• Contacting you with targeted advertising delivered online through social media and other platforms operated by third party companies unless you object and only where you have consented to the use of advertising cookies to enable this. You may receive advertising based on information about you that we have provided to the platform, including your interests, likes and product renewal status as determined by your use of our websites, products, and services or because, at our request, the platform has identified you as having similar attributes to the individuals whose details it has received from us.
• Providing you with tailored advertising, based on your location, through your television subscription service. For example, delivering an advert ahead of an event at your local dealership. As part of these adverts, we also carry out quality and frequency checks, such as whether adverts were displayed correctly and how often particular adverts have been shown. You can choose not to receive this kind of tailored advertising by contacting us to opt out or managing your preferences through your television service provider.
• Identifying and recording when you have received, opened or engaged with our electronic communications or website (please see our Cookie Policy for more information).
• Contacting you when your local Lexus Centre opens, closes or moves premises.
• Analysing your Personal Data to create a customer summary of your interests, preferences and interactions across the Lexus group and authorised retailers, so that we can tailor our products, services and communications in a way that is timely and relevant to our customers by better understanding our customer’s needs and preferences. We share this information across the Lexus Group and authorised retailers, as this allows us to be more focused, efficient, and cost effective with our resources and ensures our customers only receive relevant products, services and communications from any member of the Lexus group and authorised retailers. We are committed to putting you in control of your data, so you are free to object to your information being used in this way at any time.

Processing is necessary for us to operate the administrative and technical aspects of our business efficiently and effectively

• Verifying the accuracy of information that we hold about you and create a better understanding of you as a customer.
• Complying with a request from you in connection with the exercise of your rights (for example, where you have asked us not to contact you for marketing purposes, we will keep a record of this on our suppression lists in order to be able to comply with your request).
• For network and information security purposes; i.e., in order for us to take steps to protect your information against loss, damage, theft or unauthorised access.
• Informing you of updates to our terms and conditions and policies.
• For the prevention of fraud and other criminal activities.

You use a specific login from your own social media account on a Lexus UK tool (website, portal, blog).

• Your use of such social media means that you have allowed the communication and collection of this information.
• Lexus UK sometimes facilitates the publication of (personal) Data via social media such as X, and Facebook. All forms of social media have their own terms of use, which you need to consider when active on social media.
• We remind you that publication on social media may have certain consequences, including for your privacy or for the privacy of persons whose Personal Data you share. You are fully responsible for your publications and Lexus UK will not have any responsibility and liability in this regard.

To Protect the Vital Interests of You or Another Person

Sometimes we will need to process your Personal Data to contact you if there is an urgent safety or product recall notice and we need to tell you about it.

We only retain your data for as long as required by law or where we have an appropriate business justification.

For further information on how long Personal Data is likely to be kept before being removed from our systems and databases, please contact us using the details provided in the “How to Contact Us” section above.

We have implemented a set of technical and organisational security measures to protect your Personal Data against unlawful or unauthorised access, use or modification, in addition to protection against accidental loss or damage.

Your Personal Data will only be processed by a third-party Data Processor if that Data Processor agrees to comply with a set of agreed contractual clauses, in addition to appropriate technical and organisational security measures.

Appropriate security means ensuring controls are in place to protect the confidentiality, integrity, and availability of your Personal Data:

• Confidentiality: we will protect your Personal Data from unlawful disclosure to third parties. 
• Integrity: we will protect your Personal Data from being modified by unauthorised third parties.
• Availability: we will ensure that authorised parties are able to access your Personal Data when needed.

We may use artificial intelligence and automated tools to help us personalise and improve the communications we may send to you. These tools analyse your preferences, behaviours, and interactions with us.

We may also use artificial intelligence to improve our services by analysing feedback, interactions and service data.

We use cookies on our websites. This helps us to provide you with a better experience when you browse our website and also allows us to make improvements to our site.

We have put together specific information on how we process cookies in a policy document for you, which is available here.

Depending on the purposes for which we collect your Personal Data, we may disclose it to the following categories of recipients, who will then process your Personal Data only for the purposes detailed below.

Within our organisations and our brand environment:

Our affiliates and subsidiary companies:

• Members of our Authorised Dealerships and Authorised Repairers network which you have indicated as preferred Authorised Dealerships or Authorised Repairers, or which are located near you (based on your postcode, address) or which you have been in contact with.
• Toyota Insurance Services (TIS) – your data will be passed to TIS if you decide to have insurance with them. They operate as a separate Data Controller, and you should view their Privacy Notice to understand how your data is processed by them.
• Toyota Financial Services (TFS) – if you complete a financial agreement or request a quotation with Toyota, this is delivered by TFS, not by Lexus. This includes all financial services on the Lexus UK website. TFS operates as a separate Data Controller, and you should view their Privacy Notice to understand how your data is processed by them.
• Toyota Motor Europe (TME) – for personalised marketing communications we share your information with TME, as they provide system support to us, issue marketing communications on our behalf, and allow us to manage your preferences. TME also manage certain systems on our behalf, request certain business-related information from us to undertake Europe-wide analysis of our customers experience and satisfaction.
• KINTO UK Limited (KINTO) – a Toyota brand delivering full-service leasing products to our customers. KINTO operate as a separate Data Controller, and you should view their Privacy Notice to understand how your data is processed by them.
• To centralise, combine, update and rectify your Personal Data via systems operated by us or by any other Toyota recipient of your Personal Data, including your Personal Data which would originate from several sources, or which would already be available to us via other systems operated by us or any other Toyota recipient.

Third-party business partners:

From time to time, we may disclose your Personal Data to trusted organisations who handle services on our behalf.

When we disclose your Personal Data, we take steps to ensure that any third-party partners who handle your Personal Data comply with data protection legislation and protect your Personal Data just as we do.

We only disclose the information that is necessary for them to provide the following services:

• Research, advertising, marketing and promotional agencies: to help us deliver and analyse the effectiveness of our advertising campaigns, promotions and products.
• Roadside assistance service providers.
• Provision of hire or loan car when Lexus vehicle is not available.
• Customer contact centres: to help us administer your vehicle protection.
• Providers of IT related services.

Specific contact with our authorised dealerships and repairers:

If you purchase a car or another product or service from one of our Authorised Dealerships or Authorised Repairers or if you give them your Personal Data, you will have a separate relationship with this Authorised Dealer or Authorised Repairer.

In this case, they become the Data Controller of your Personal Data, possibly jointly with us. For all questions or requests about the collection and use of your Personal Data by one of the Authorised Dealerships or Authorised Repairers, please contact them directly.

How is your preferred Authorised Dealer or Authorised Repairer identified?

The preferred Authorised Dealer or Authorised Repairer is chosen either by options you’ve chosen via the settings of your MyLexus account (which you can change at any time), automatically based on location (the nearest to you based on your postcode, address), or your historical contact with our network.

Lexus UK operates on a global scale and as a result, your Personal Data may be stored and processed by us or our partners in multiple countries. This is to enable us to deliver our services to you.

When your Personal Data is transferred to countries outside the UK (United Kingdom) that do not generally offer the same level of data protection as in the UK, Lexus UK will implement appropriate technical and organisational measures to ensure an adequate level of protection of your Personal Data.

At Lexus, we want to be as transparent as possible with you on how we use your data, so that you can make meaningful choices about how you want us to use your Personal Data. To exercise your rights under Data Protection Law, please use the DPO contact details.

Contact preferences and withdrawing consent

You can make a variety of choices about how you want to be contacted by us, through which channel (for example, email, mail, SMS, phone), for which purpose and how frequently. This can be done by adjusting the privacy setting on the relevant device, updating your user or account profile or by following the unsubscribe instructions included in the communication. However, it should be noted that it may not be possible to adhere to these preferences in all instances, for example, in the event of a product recall, we would contact you through the most expedient method.

Your Right to Access

You have the right to know whether or not we are processing your Personal Data, to access that information and additionally specified information regarding how we process your information.

Your Right to Rectification

If you find any mistakes in your Personal Data or you find it incomplete or incorrect, you may ask us to correct or amend it. This can be done by providing details of your request to us, using the contact details provided.

Your Right to Restrict Processing

You have the right to ask us to restrict the Processing of your Personal Data. This may be whilst we check the accuracy of the information that we hold about you. This can be done by providing details of your request to us, using the contact details provided.

Your Right to Object to Processing

You may also object to the use of your Personal Data for direct marketing purposes or, if you prefer, you can tell us through which channel and how frequently you prefer us to contact you. You may also object to us sharing your Personal Data with a third party for the same purpose.

Your Right to Withdraw Consent

If we are using your consent to process your data, you may withdraw that consent at any time. You may withdraw your consent by unsubscribing to an email, changing your preferences in your account, visiting our Opt-Out form or using the contact details provided.

Your Right to Erasure

You may want us to delete your Personal Data. If you do, please contact us as privacy@ld.lexus .co.uk and provide details of your request to us. We will assess your request and if we are able to erase your data, we will inform you of the outcome.

Your Right to Data Portability

You have the right to request that data you have provided is sent to you in a structured, commonly-used, and machine-readable format and have the right to transmit that data to another organisation. This can be done by providing details of your request to us, using the contact details provided.

We may send you marketing information, including:

• Contacting you from time to time about Lexus products, offers and events, and surveys that we think might be of interest to you. We will send these communications by email, phone, SMS or post, or where you give consent to do so, by digital channels such as Facebook, Instagram or via online advertising platforms.
• To further ensure we accurately understand your interest and preferences, we may share your profile with specific third parties, such as social media platforms, advertising platforms, data cleansing and enrichment organisations and publicly available sources. These third parties help us analyse your likes, as well as identifying others who may share your interests in our products.
• Contacting you from time to time with marketing information (unless you object) if you have expressly indicated to us that you are acting on behalf of a business or where we have obtained business contact details from our authorised dealer network and affiliates.
• Contacting you with targeted advertising delivered online through social media and other platforms operated by third party companies, unless you object, and only where you have consented to the use of advertising cookies to enable this.
• Providing you with tailored advertising, based on your location, through your television subscription service. For example, delivering an advert ahead of an event at your local dealership.

Targeting / Retargeting

We use so-called targeting, retargeting and cookie-less technologies in order to tailor our online marketing (e.g. banner ads) more specifically to your needs and interests. These include, Adobe Target, Flashtalking by Simplicity Marketing Limited, Google Search Ad, Google Display & Video 360, Facebook Pixel, Salesforce Data Management Platform, Trade Desk from The Trade Desk Inc. These are monitored and used when you visit other websites that work together with the providers of these (re-)targeting technologies, so as to inform you while meeting your interests as closely as possible.

When the above technologies are used, cookies on our websites and (in the case of retargeting) on the websites of others, register your interest in our products and services. In the process, random identifiers (so-called cookie IDs) are used which are not brought into connection with your name, your address or similar information, even if this information is known to us (e.g. from an existing contractual relationship), unless you have consented to this.

Further information about the above technologies from the respective providers, and the associated processing of Personal Data, can be found at the following links:

Adobe: https://www.adobe.com/uk/privacy.html
Google: https://policies.google.com/technologies/partner-sites
Simplicity Marketing Limited: https://www.flashtalking.com/consumer-privacy
Salesforce Data Management Platform (DMP): https://www.salesforce.com/uk/company/privacy/
Trade Desk from the Trade Desk Inc. https://www.adsrvr.org/
Facebook Ireland Ltd., Dublin, Ireland:
 https://www.facebook.com/about/privacy/update and https://help.instagram.com/519522125107875

You can manage and deactivate the use of cookies on the following websites for the technology providers listed, or in your browser:

https://www.youronlinechoices.com/uk/your-ad-choices
https://optout.aboutads.info

During the retargeting process, we may also collect information about your interest in the products and services of our retargeting partners. When these targeting and retargeting tools are used, some data may be transferred to servers located in the United States and processed there.

For legal reasons, the use of tracking and (re-) targeting technologies is sometimes only possible with your express consent (see opt in section below). In other cases, you can object to the use of such technologies if you wish (see opt out section above). 

Use of online marketing products – Opt-in

We only use online marketing products from Google (e.g. Search Ad, Display & Video 360) and Facebook (so-called “Facebook Pixel”) with your express consent, which you can grant by clicking on the "Agree" button in the so-called Cookie Information Layer ("Opt-in"). We store this consent in a cookie on your device so that you are not asked for consent again each time you visit our websites, and for legal reasons, also on our servers with the IP address and a time stamp.  We delete this information, or restrict its processing if you withdraw your consent or 6 months at the latest after your last visit to our websites.

To delete cookies set with your consent when visiting our websites after your consent to these online marketing products is withdrawn, please visit the following websites or delete the cookies in your browser:

Google: https://adssettings.google.co.uk/anonymous
Facebook and Instagram: http://facebook.com/ads/preferences

Audience Expansion Techniques

We use audience expansion techniques to enhance the efficiency of our marketing efforts and ensure that our advertisements reach a more relevant audience. These techniques involve the following processes:

Data Collection: We collect data from various sources, including our website, social media platforms, and third-party partners. This data may include demographic information, browsing behaviour, and purchase history.

Lookalike Audiences: By analysing the characteristics of our existing customers, we create lookalike audiences. These are groups of people who share similar traits and behaviours with our current customers, making them more likely to be interested in our products or services.

Behavioural Targeting: We use behavioural targeting to display ads to individuals based on their past online activities. This helps us show relevant ads to users who have shown interest in similar products or services.

Interest-Based Advertising: We categorise users based on their interests and preferences. This allows us to tailor our advertising content to match the interests of different audience segments.

Data Matching: We may match data collected from our users with data from third-party sources to gain a more comprehensive understanding of our audience. This helps us refine our targeting strategies and improve the effectiveness of our campaigns.

Consent and Control: We respect your privacy and provide options for you to control how your data is used. You can manage your preferences and opt out of certain data collection and audience expansion techniques through our privacy settings.

By employing these techniques, we aim to deliver more relevant and engaging advertisements while respecting your privacy and data preferences.

We want the content of our websites to match your preferences, thereby improving what we offer you. To identify especially popular areas of our websites, we use the following analysis tools: Google Analytics and Adobe Analytics.

When we employ these analytics tools, information may be transferred to servers located in the US and processed there. From the standpoint of the European Union, the United States does not provide an "appropriate level of protection" meeting EU standards for the processing of personal information. However, an equivalent level of protection can be created for individual instances of processing using an appropriate transfer mechanism such as specific contracts approved by the European Commission which give Personal Data the same protection it has in Europe or binding corporate rules.

If you do not wish for us to use the below named analytics tools to collect and analyse information about your visit to our websites, you may permanently object to the practice (opt out) at any time.

We will comply with your rejection by placing an opt-out cookie in your browser. This cookie will only indicate that you have opted out. Please note that, for technical reasons, an opt-out cookie affects only the browser in which it has been installed. If you delete the cookie or use a different browser or device, you will need to opt out again.

Below you will find information about the providers of the analytics tools and the respective opt-out procedures:

If you wish to make a complaint, you have the right to contact our Data Protection Officer to raise your concerns. If you are unhappy with the response from the Data Protection Officer, then you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) Should you wish to contact the ICO, their contact details are:

Postal address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Email: casework@ico.org.uk

Website: https://ico.org.uk/global/contact-us/

Changes to this Notice (last updated: 06.01.2026)

We may occasionally make alterations to this Notice, which will reflect how we process and look after your data. This is to ensure our commitment to being transparent with you, protecting your information and upholding your rights. If significant changes are made to this Notice or the way in which we process your Personal Data, we will draw your attention to this either through updates to this Notice on our website, through our service lines or by another means of communication such as email.