Colour Car Sales Limited – €198,900 Fine (United Kingdom, 2021)

€198,900Information Commissioner's Office24 May 2021United Kingdom
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Colour Car Sales Limited was fined for sending over 3 million marketing texts without proper consent. The UK Information Commissioner's Office found that the company did not clearly inform people about how their data would be used or give them a choice to opt out. This case highlights the importance of obtaining clear consent before sending marketing messages.

What happened

Colour Car Sales Limited sent over 3 million marketing texts without proper consent.

Who was affected

People who received unsolicited marketing texts from Colour Car Sales Limited.

What the authority found

The ICO ruled that Colour Car Sales Limited violated GDPR by not obtaining valid consent for sending marketing messages.

Why this matters

This case serves as a warning to companies that they must clearly inform individuals about data use and offer an opt-out option before sending marketing communications. It emphasizes the need for transparency and consent in direct marketing practices.

GDPR Articles Cited

AI-verified

View original scraped data
Art. 4(11) GDPR

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Regulation 22 PECR
Source verified 6 March 2026
articles corrected
national law identified
Full Legal Summary
Detailed

Colour Car Sales Limited (CCSL) is a company acting as a credit intermediary for finance on used cars. It traded under serveral names, including 'immediatecarfinance.co.uk'; 'carfinancetoday.net'; 'achillesuk.com'; and 'taxifinancetoday.com'. Between 2018 and 2019, the UK DPA (Information Commissioner's Office; ICO) received nearly 200 complaints over unsolicited electronic direct marketing text messages. The ICO started a preliminary investigation and contacted CCSL for further evidence. The letter sent was returned undelivered. The company director was then contacted who provided an alternative contact address. CCSL confirmed it had sent over 3 million direct marketing messages between 2018 and 2019. CCSL claimed to have gathered consent through an application form with the following statement: "By starting an application you agree that immediatecarfinance may/will pass your details on to a third party lender or broker, and they may wish to contact you by phone, post, SMS or other electronic means". CCSL explained that an opt-out would be possible by calling the CCSL office. The ICO investigated the privacy notice available and found that the privacy notice stated that marketing communication was only sent where there was consent of a "legitimate business interest" Following initial cooperation, CCSL did not respond to the ICO any further. What classifies as valid consent to send direct marketing messages? The UK DPA first outlined the definition of consent as defined by Article 4(11) of the GDPR. It also outlined the rules under Regulation 22 PECR which address consent. Analysing the application form, the ICO considered that there was no specific reference to direct marketing nor purposes of contact from third parties. Additionally, the UK DPA found that there was no method for the individual to send an application without consenting to being contacted, nor any option for them to select who may contact them. The ICO therefore found CCSL in contravention o

Violations (2)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Third-Party Cookies Without Consent
critical

Third-party tracking cookies or scripts are loaded without obtaining prior user consent.

Art. 13, 14 GDPR

Related Enforcement Actions (0)

No other enforcement actions found for Colour Car Sales Limited in UK

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

24 May 2021

Authority

Information Commissioner's Office

Fine Amount

€198,900

170,000 GBP

GDPRhub ID

gdprhub-3547

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Colour Car Sales Limited - United Kingdom (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: