Your claim will be brought to court under the Data Protection Act 2018, which incorporates the GDPR.  We believe that Arnold Clark have breached your privacy due to poor data controls, which will be the focus of our argument.