Privacy Policy

What we collect

When you use our service, we collect:

• Email address - to deliver your report and receipt
• Vehicle registration - to generate your report
• Payment information - processed securely by Stripe (we never see or store your card details)

For free vehicle lookups, we store an anonymised hash of the registration for analytics purposes only.

How we use your information

• Generate and deliver your vehicle history report
• Send your receipt and report access link via email
• Respond to support requests
• Improve our service through anonymised analytics

We do not sell your data. We do not send marketing emails. We do not share your information with advertisers.

Legal basis (GDPR)

We process your personal data under the following lawful bases:

• Contract - to fulfil your purchase and deliver the report you requested
• Legitimate interest - to improve our service and prevent fraud

Third parties

We work with third parties to provide our service:

• DVLA & DVSA - official UK government vehicle and MOT data sources
• Payment processor - handles card payments securely (we never see or store your card details)
• AI analysis - generates insights from vehicle history data
• Email delivery - sends your report and receipt

We use privacy-friendly, cookie-free analytics. We do not use Google Analytics, Facebook tracking, or any advertising networks.

Cookies

We use essential cookies only to keep the site functioning (session management). We do not use tracking or advertising cookies. Plausible Analytics is cookie-free.

Data retention

We retain your personal information for as long as necessary to provide our services:

• Purchased reports - retained so you can access them again via your unique link
• Payment records - kept as required by UK tax law (typically 6 years)
• Support correspondence - retained to help with any follow-up queries

You can request deletion of your data at any time (see Your Rights below).

Your rights

Under UK GDPR, you have the right to:

• Access - request a copy of the personal data we hold about you
• Rectification - ask us to correct inaccurate data
• Erasure - ask us to delete your personal data
• Portability - receive your data in a portable format

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

Security

We use industry-standard security measures including HTTPS encryption, secure password hashing, and access controls. Payment data is handled entirely by Stripe and never touches our servers.

Changes to this policy

We may update this policy from time to time. Significant changes will be noted by updating the "Last updated" date above.

Contact

For privacy-related questions or to exercise your rights, email [email protected]

If you have unresolved concerns, you have the right to complain to the Information Commissioner's Office (ICO).