Privacy Policy
1. Introduction
CarCheck UK Ltd ("we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our vehicle history checking services and website.
We are registered with the Information Commissioner's Office (ICO) and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our services, you consent to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
2. Data Controller
CarCheck UK Ltd
Registered Office: 123 Fleet Street, London, EC4A 2BB
Company Number: 12345678
ICO Registration Number: ZA123456
Email: privacy@carcheckuk.co.uk
Data Protection Officer: dpo@carcheckuk.co.uk
3. Data We Collect
We collect and process various types of personal data to provide our services:
3.1 Information You Provide
- Account Information: Name, email address, phone number, billing address
- Payment Information: Credit/debit card details (processed securely by our payment provider)
- Vehicle Search Data: Vehicle registration numbers (VRNs) you search for
- Communications: Messages, emails, and support tickets you send us
- Survey Responses: Feedback and preferences you share with us
3.2 Information We Collect Automatically
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent on pages, click patterns, search queries
- Location Data: Approximate location based on IP address
- Cookies & Tracking: See our Cookie Policy for details
3.3 Information from Third Parties
- Vehicle Data: DVLA, DVSA, MIAFTR (Motor Insurance Anti-Fraud and Theft Register), finance company records, MOT history database
- Payment Processors: Transaction confirmation and fraud prevention data
- Analytics Providers: Aggregated usage statistics
4. How We Use Your Data
We use your personal data for the following purposes:
Service Delivery
- Process vehicle history check requests
- Generate and deliver vehicle reports
- Manage your account and subscriptions
- Provide customer support
Payment Processing
- Process payments and prevent fraud
- Issue invoices and receipts
- Manage refunds where applicable
Communication
- Send transactional emails (order confirmations, reports)
- Respond to your inquiries and support requests
- Send important service updates and security notifications
- Send marketing communications (with your consent)
Improvement & Analytics
- Analyze usage patterns to improve our services
- Conduct research and development
- Monitor and improve website performance
- Understand customer preferences and behavior
Legal & Security
- Comply with legal obligations and regulations
- Prevent fraud, abuse, and illegal activities
- Protect our rights and property
- Enforce our terms and conditions
5. Legal Basis for Processing
Under UK GDPR, we process your personal data on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Providing vehicle check services | Contract performance |
| Processing payments | Contract performance |
| Marketing communications | Consent (opt-in) |
| Website analytics and improvement | Legitimate interests |
| Fraud prevention and security | Legitimate interests |
| Tax and accounting compliance | Legal obligation |
6. Data Sharing & Third Parties
We share your personal data with trusted third parties only when necessary to provide our services:
Service Providers
We work with carefully selected partners who process data on our behalf:
- Payment processors (Stripe, PayPal)
- Cloud hosting providers (AWS, Microsoft Azure)
- Email service providers (SendGrid, Mailgun)
- Analytics platforms (Google Analytics, Mixpanel)
- Customer support tools (Intercom, Zendesk)
Data Sources
We access vehicle data from authorized sources:
- Driver and Vehicle Licensing Agency (DVLA)
- Driver and Vehicle Standards Agency (DVSA)
- Motor Insurance Anti-Fraud and Theft Register (MIAFTR)
- Finance and leasing companies
- Vehicle history database providers
Legal Requirements
We may disclose your information if required by law, court order, or governmental authority, or to protect our legal rights, prevent fraud, or ensure public safety.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the new entity. We will notify you of any such change.
We never sell your personal data to third parties. All third-party processors are bound by data protection agreements and can only use your data as instructed by us.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account information | Until account deletion + 30 days | Service provision |
| Transaction records | 7 years | Legal/tax requirements |
| Vehicle search history | 3 years | Customer service & dispute resolution |
| Marketing consent | Until withdrawal + 90 days | Compliance verification |
| Website analytics | 26 months | Industry standard |
| Support tickets | 3 years | Quality assurance |
When data is no longer needed, we securely delete or anonymize it in accordance with our data retention schedule and applicable laws.
8. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
✓ Right to Access
Request a copy of the personal data we hold about you.
✓ Right to Rectification
Correct inaccurate or incomplete personal data.
✓ Right to Erasure
Request deletion of your personal data (subject to legal obligations).
✓ Right to Restriction
Limit how we process your personal data in certain circumstances.
✓ Right to Data Portability
Receive your data in a structured, commonly used format.
✓ Right to Object
Object to processing based on legitimate interests or for direct marketing.
✓ Right to Withdraw Consent
Withdraw consent for processing at any time (where applicable).
✓ Right to Complain
Lodge a complaint with the ICO if you believe your rights have been violated.
How to Exercise Your Rights
To exercise any of these rights, please contact us at:
- Email: privacy@carcheckuk.co.uk
- Post: Data Protection Officer, CarCheck UK Ltd, 123 Fleet Street, London, EC4A 2BB
We will respond to your request within one month. For complex requests, we may extend this by up to two months and will inform you of any delay.
ICO Contact Information
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office:
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
10. Data Security
We implement industry-standard security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:
Technical Measures
- • SSL/TLS encryption for data transmission
- • Encrypted databases and backups
- • Secure password hashing (bcrypt)
- • Regular security audits and penetration testing
- • Firewall protection and intrusion detection
- • Multi-factor authentication for staff access
Organizational Measures
- • Staff training on data protection
- • Access controls and role-based permissions
- • Data processing agreements with vendors
- • Incident response and breach notification procedures
- • Regular backup and disaster recovery plans
- • Secure disposal of hardware and documents
Data Breach Notification
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the ICO within 72 hours of becoming aware of the breach, as required by UK GDPR.
While we implement robust security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.
11. International Data Transfers
Your personal data is primarily stored and processed within the United Kingdom and European Economic Area (EEA). However, some of our service providers may process data outside these regions.
When we transfer data internationally, we ensure appropriate safeguards are in place:
Standard Contractual Clauses (SCCs)
We use EU/UK-approved contractual terms with data processors
Adequacy Decisions
We transfer to countries with UK adequacy decisions where applicable
Additional Security Measures
Encryption, pseudonymization, and access controls for international transfers
For more information about our international data transfers, please contact privacy@carcheckuk.co.uk.
12. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children.
If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at privacy@carcheckuk.co.uk. We will promptly delete such information from our records.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
How We Notify You
- • We will post the updated policy on this page with a new "Last Updated" date
- • For material changes, we will notify you via email or prominent website notice
- • We encourage you to review this policy periodically
- • Continued use of our services after changes constitutes acceptance
Previous versions of this policy are available upon request by contacting privacy@carcheckuk.co.uk.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
General Inquiries
Data Protection Officer
Postal Address
Data Protection Officer
CarCheck UK Ltd
123 Fleet Street
London, EC4A 2BB
United Kingdom
Thank you for trusting CarCheck UK Ltd with your personal information. Your privacy is important to us, and we are committed to protecting it in accordance with the highest standards.
CarCheck UK Ltd
Questions? Contact us at legal@carcheckuk.co.uk