Privacy Policy
We designed SmartCarCheck to be privacy-first from the ground up. No accounts, no personal data stored, no profiling.
1. Who we are
SmartCarCheck (“we”, “us”, “our”) operates the website at smartcarcheck.co.uk. We provide AI-powered buyer reports for UK used vehicles, drawing on official DVSA MOT and DVLA registration data.
For GDPR purposes, SmartCarCheck is the data controller for any personal data processed in connection with this website. Questions can be directed to privacy@smartcarcheck.co.uk.
2. What data we collect — and what we don't
Vehicle registration numbers. When you enter a reg to generate a report, that registration number is sent to the DVSA and DVLA APIs to retrieve vehicle data. We do not link this request to any personal identity. Registration numbers are not stored in our database beyond the current session.
Payment data. Payments are processed entirely by Stripe. We never see or store your full card number, expiry date, or CVV. Stripe returns a payment confirmation and an order reference. We store only the order reference and the registration number associated with the purchase so we can retrieve your report if needed.
Analytics data. We use Google Analytics 4 to understand aggregate traffic patterns (pages visited, session duration, device type). This data is anonymised and not linked to individual identities. IP addresses are anonymised before processing.
What we do NOT collect: name, email address, postal address, phone number, or any other personally-identifying information — unless you contact us directly by email.
3. How we use the data we hold
- Order references + reg number — to retrieve or re-deliver your report if requested.
- Analytics — to understand which pages are useful and improve the service.
- Email correspondence — if you email us, we use your email address only to respond and retain the thread for support continuity. We do not add you to any marketing list.
4. Legal basis for processing (GDPR)
- Contract performance — processing your payment and generating your report.
- Legitimate interests — aggregate analytics to improve the service.
- Consent — non-essential cookies (analytics), where you have accepted via our cookie banner.
5. Data retention
Order references and associated registration numbers are retained for 12 months to allow report re-delivery if requested, then deleted. Email correspondence is retained for 2 years for support continuity, then deleted. Analytics data held by Google is subject to Google's Privacy Policy.
6. Third-party services
- Stripe — payment processing. Stripe Privacy Policy
- DVSA / DVLA APIs — official UK government vehicle data.
- Google Analytics 4 — anonymised usage analytics. Google Privacy Policy
- AWS (Amazon Web Services) — cloud hosting. Data is processed and stored in the eu-west-2 (London) region.
7. International transfers
All primary data processing occurs within the UK and EU. Where third-party processors (e.g. Stripe, Google) transfer data outside the UK/EEA, they do so under Standard Contractual Clauses or equivalent safeguards approved under UK GDPR.
8. Your rights
Under UK GDPR you have the right to:
- Access any personal data we hold about you.
- Correct inaccurate personal data.
- Request deletion of your personal data.
- Object to or restrict processing.
- Data portability (where technically feasible).
- Lodge a complaint with the ICO (ico.org.uk).
To exercise any of these rights, email privacy@smartcarcheck.co.uk. We will respond within 30 days.
9. Cookies
We use essential cookies for site operation and optional analytics cookies (Google Analytics 4). See our Cookie Policy for full details and how to manage your preferences.
10. Changes to this policy
We may update this policy from time to time. When we do, we update the “Last updated” date at the top of this page. Continued use of the service after a change constitutes acceptance of the revised policy.