CAR CAVE EUROPE  PRIVACY POLICY 

Last updated: August 16, 2026 

1. Introduction and Scope 

This Privacy Policy applies to the websites operated by Car Cave’s European entities (“Car Cave,” “we,” “us,” or “our”) and explains, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), what personal data we collect, why, how we use and share it, and the rights available to you. 

Car Cave is part of the Car Cave Global group of companies; our US entity, Car Cave USA, maintains a separate Privacy Policy for its site. 

The following entities act as data controller for personal data collected via their respective sites: 

• Car Cave Belgium 
• MIYO (Belgium) 
• Car Cave Cyprus 

Where this Policy refers to “Car Cave,” it refers to whichever entity is the controller of your personal data based on the site you interact with. If you are unsure which entity is responsible for your data, please contact us using the details in Section 12. 

2. Personal Data We Collect 

2.1 Information you provide directly 

• Contact and inquiry form data: name, email address, phone number, and the content of your message when you inquire about a vehicle listing. 
• Newsletter signup data: email address and, where provided, name. 
• Payment and transaction data. 
• Any other information you choose to provide when corresponding with us. 

2.2 Information collected automatically 

• Device and usage data: IP address, browser type, pages viewed, referring URL, and approximate location derived from your IP address. 
• Cookies and similar technologies, only activated with your opt-in consent (see our separate Cookie Policy). 

3. How We Use Your Personal Data 

• To respond to inquiries about vehicle listings and provide customer service. ● To send newsletters and marketing communications, where you have consented.
• To operate, maintain, and improve our websites. 
• To measure and optimize our advertising, where you have consented to related cookies. ● To process payments and deposits 
• To comply with legal obligations and enforce our Terms and Conditions. 
• To detect, prevent, and address fraud, security, or technical issues. 

4. Legal Basis for Processing 

Under GDPR, we rely on the following legal bases: 

• Consent — for newsletter marketing and non-essential cookies (including any advertising pixels). 
• Contract — to respond to your inquiries and, once available, to process payments or bookings you request. 
• Legitimate interests — to operate and improve our sites, balanced against your rights and expectations. 
• Legal obligation — where processing is required to comply with applicable law. 

You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal (see Section 8). 

5. Cookies 

Non-essential cookies, including any advertising or analytics tools, are only set with your prior opt-in consent via our cookie consent banner. Full details are set out in our separate Cookie Policy. 

6. How We Share Your Personal Data 

We do not sell your personal data. We share personal data with the following categories of recipients, each acting under appropriate data protection terms: 

• Analytics and marketing tool providers: Google Analytics 
• Email marketing platform: Mailchimp, to deliver newsletters and email communications. ● Website hosting and infrastructure providers: GoDaddy & Combell. 
• Customer relationship management (CRM) tools: MotorDesk. 
• Payment processors. 
• Professional advisors, regulators, or authorities, where required by law. 
• A successor entity in the event of a merger, acquisition, or sale of business assets. 

Each third-party service provider processes personal data under a data processing agreement consistent with GDPR. 

7. International Data Transfers 

Where personal data collected in the EEA is transferred outside the EEA — for example, to Car Cave USA or to non-EU service providers — we rely on appropriate safeguards, such as the European Commission’s

Standard Contractual Clauses (SCCs), to ensure your data continues to receive an adequate level of protection. Additional detail is available on request. 

8. Your Privacy Rights 

If GDPR applies to the processing of your personal data, you have the right to: 

• Access the personal data we hold about you. 
• Request correction of inaccurate or incomplete data. 
• Request deletion of your personal data, in certain circumstances. 
• Request restriction of, or object to, processing. 
• Request a portable copy of your data. 
• Withdraw consent at any time, where processing is based on consent. 
• Lodge a complaint with a supervisory authority — for example, the Belgian Data Protection Authority (APD/GBA) or the Office of the Commissioner for Personal Data Protection, Cyprus. 

To exercise any of these rights, contact us at info@carcave.com. We will respond within 30 days, as required by GDPR. 

9. Data Retention 

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, including to satisfy legal, accounting, or reporting obligations. 

10. Children’s Privacy 

Our websites are not directed to individuals under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it. 

11. Data Security 

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. 

12. Changes to This Policy 

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. We will post the updated version on this page with a revised “Last updated” date. Material changes will be communicated where required by law.