Privacy policy

Last updated: 2 September 2026

Who controls your data

The data controller for the personal data described here trades as UK Vehicle Audit and can be reached at support@ukvehicleaudit.co.uk.

What we collect

To run the service we store: your email address and name when you create an account; the registrations you check and the reports produced; and records of your payments (handled by Stripe; we never see your card number). We also keep ordinary server logs for security.

What we use it for

Providing your reports, taking payment, sending the emails you'd expect (receipts, password resets, your reports), and keeping the service secure. We don't sell your data, and we don't send marketing you haven't asked for.

Vehicle data

Vehicle history data comes from third-party providers and relates to the vehicle, not to any person. Checks are anonymous: the registered keeper is not told a check has taken place.

Cookies

We use one first-party session cookie to keep you signed in, and your browser's local storage to remember your light/dark theme choice. There is no advertising pixel, no tag manager and no third-party tracking script anywhere on this site, so no other company sees which pages you read. We do send Meta a record of four specific actions from our own server once you buy or sign up, which is set out under Advertising measurement below.

If you arrive from one of our Facebook or Instagram adverts, the link carries a reference to that advert. We keep that reference in the same session cookie for up to seven days so we can tell which adverts lead to sales. It identifies the advert, not you.

Advertising measurement

We advertise on Facebook and Instagram and need to know which adverts work. Rather than run Meta's browser pixel, we send Meta a short record from our own server after four things happen: an account is created, a checkout is started, an order is paid for, and an MOT reminder is confirmed. Nothing is sent while you browse, and which pages you read never leaves this site.

Each record holds the event, its value where it has one, and the details Meta uses to match it to an account: your email address and name as SHA-256 hashes (the address itself is not sent; Meta compares the hash against its own), your IP address, your browser's user agent, and the advert reference above if there is one. Meta is a separate data controller for what it receives and processes it outside the UK under its own safeguards. Its policy is at facebook.com/privacy/policy.

If you'd rather we didn't, email support@ukvehicleaudit.co.uk and we'll switch it off for your account. Deleting your account also deletes anything not yet sent.

Why we are allowed to hold it

UK GDPR asks us to name a lawful basis for each purpose, so here they are. Creating your account, running the checks you pay for and emailing you the results are all performance of a contract with you. Keeping payment records is a legal obligation under tax and payment rules. Keeping the service secure, preventing abuse and measuring which of our adverts lead to sales are our legitimate interests in running a viable business; you can object to the advertising measurement at any time using the address above, and we will stop it for your account.

Keeping and deleting data

Reports stay in your account so you can return to them, and we keep them for as long as the account is open. Payment records are kept for seven years because tax rules require it. Server logs are kept for ninety days. If you'd like your account and its data deleted, email us from the account's address and we'll remove it, keeping only those payment records we are obliged to retain.

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to processing we do on the basis of legitimate interests, and ask for your data in a portable form. Contact support@ukvehicleaudit.co.uk for any of these and we'll respond within a month.

If you think we have handled your data badly, please tell us first so we can fix it. You also have the right to complain to the Information Commissioner's Office, the UK regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.