Privacy Policy

1. Introduction

1. This Privacy Policy explains how VCheck Ltd ("VCheck", "we", "our", "us") collects, uses, stores and protects personal information when you use our website, purchase vehicle history reports, create an account, contact us or otherwise interact with our services.
2. VCheck Ltd is the data controller responsible for the processing of personal data described in this Privacy Policy.
3. This Privacy Policy applies to the website https://www.vcheck.uk and to services provided through that website.

2. Contact Details

1. Company: VCheck Ltd
2. Website: https://www.vcheck.uk
3. Email: [email protected]

3. Information We Collect

1. We may collect and process the following categories of information depending on how you use our services.
2. Account information may include your name, email address, password, account preferences and account activity.
3. Vehicle search information may include vehicle registration marks, VIN or chassis numbers, vehicle report requests, search history, report generation records and report access records.
4. Transaction information may include products purchased, order history, transaction references, billing information and payment status.
5. Technical information may include IP address, browser type, device information, operating system, referral information, log files and website usage information.
6. Communication information may include support enquiries, email correspondence, complaints, feedback and information you provide when contacting us.

4. Payment Information

1. Payments may be processed by third-party payment providers including Stripe, PayPal, Braintree, Apple Pay and Google Pay.
2. VCheck does not store full payment card details.
3. Payment information is processed by the relevant payment provider in accordance with their own privacy policies and security standards.
4. We may retain payment references, transaction identifiers and order records for accounting, fraud prevention, chargeback defence and dispute resolution purposes.

5. How We Use Personal Information

1. We may use personal information to provide vehicle history reports and related services.
2. We may use personal information to process payments, fulfil orders and manage customer accounts.
3. We may use personal information to respond to enquiries, provide support and deal with complaints.
4. We may use personal information to detect, prevent and investigate fraud, misuse of our services, suspicious transactions, chargebacks and unlawful activity.
5. We may use personal information to maintain website security, monitor system integrity and improve our services.
6. We may use personal information to comply with legal obligations, enforce our terms, defend legal claims and resolve disputes.

6. Legal Bases for Processing

1. Under UK GDPR, we rely on one or more lawful bases when processing personal data.
2. Performance of a contract: where processing is necessary to provide reports, process orders, manage accounts or respond to service requests.
3. Legitimate interests: where processing is necessary for fraud prevention, security, service improvement, customer support, dispute resolution, business administration and protection of our legal rights.
4. Legal obligation: where processing is necessary to comply with accounting, tax, regulatory or legal requirements.
5. Consent: where required for certain cookies, marketing communications or optional processing activities.

7. Fraud Prevention, Security and Misuse

1. We may use personal data, account information, technical information and vehicle search data to detect, prevent and investigate fraud, misuse of the service, unauthorised access, scraping, abuse, chargebacks, suspicious transactions and unlawful activity.
2. We may retain relevant records where reasonably necessary for fraud prevention, audit, security monitoring, dispute resolution and legal compliance.
3. Where necessary, we may share relevant information with payment providers, professional advisers, law enforcement, regulators or other appropriate parties.

8. Vehicle Reports and Vehicle Search Data

1. Vehicle registration numbers, VINs, report requests and report generation records may be retained for audit, quality control, fraud prevention, dispute resolution, customer support and service improvement purposes.
2. Vehicle history information contained within reports does not normally constitute personal data.
3. Where personal data is included within a report, it is processed only where lawful and necessary for the provision of the service, compliance with legal obligations, fraud prevention or protection of legal rights.

9. Sharing Information

1. We may share information with trusted third parties where necessary for the operation of our business and provision of our services.
2. This may include payment providers, hosting providers, cloud infrastructure providers, analytics providers, customer support tools, fraud prevention providers, professional advisers, law enforcement authorities, regulators and government authorities where legally required.
3. We may share information with vehicle data providers where necessary to obtain, verify or provide vehicle history information.
4. We do not sell personal data to third parties.

10. International Transfers

1. Some service providers may process personal data outside the United Kingdom.
2. Where international transfers occur, appropriate safeguards are used in accordance with applicable data protection laws.

11. Data Retention

1. We retain information only for as long as reasonably necessary for the purposes for which it was collected.
2. Customer account records may be retained for up to 6 years after account closure.
3. Order, invoice and transaction records may be retained for up to 6 years.
4. Vehicle report records, search logs and report access records may be retained for up to 6 years for audit, fraud prevention, customer support, dispute resolution and legal purposes.
5. Support enquiries may be retained for up to 3 years, unless a longer period is required for legal, fraud prevention or dispute resolution purposes.
6. Marketing preferences may be retained until consent is withdrawn or the information is no longer required.
7. Fraud prevention, security and dispute records may be retained for as long as reasonably required to protect our business, customers and legal rights.

12. Cookies

1. We use cookies and similar technologies to operate our website, improve functionality, analyse traffic and enhance user experience.
2. Cookies may include essential cookies, analytics cookies, performance cookies and marketing cookies.
3. Essential cookies are required for the website and service to function properly.
4. Analytics, performance and marketing cookies are used only where permitted by law and, where required, with your consent.
5. You can manage cookie preferences through our cookie consent tools and through your browser settings.

13. Analytics and Tracking

1. We may use analytics tools to understand how users interact with our website and services.
2. Analytics information may include page views, session information, referral sources, device information and general usage patterns.
3. Where analytics cookies or similar technologies require consent, they will only be used where such consent has been provided.

14. Marketing Communications

1. Where permitted by law, we may send service updates, product information and marketing communications.
2. You may unsubscribe from marketing communications at any time by using the unsubscribe link in our emails or by contacting us.
3. We may still send service-related messages where necessary, for example order confirmations, account notifications, security messages or support communications.

15. Security Measures

1. We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, disclosure, alteration or destruction.
2. These measures may include encryption, secure transmission, access controls, logging, monitoring, backups and security auditing.
3. No online service can be guaranteed to be completely secure, but we take reasonable steps to protect the information we hold.

16. Your Rights

1. Subject to applicable law, you may have the right to access your personal data.
2. You may have the right to correct inaccurate or incomplete personal data.
3. You may have the right to request deletion of personal data.
4. You may have the right to restrict processing of personal data.
5. You may have the right to object to certain processing activities.
6. You may have the right to request data portability.
7. You may have the right to withdraw consent where processing is based on consent.
8. Requests may be submitted by contacting [email protected].

17. Children

1. Our services are not intended for children.
2. We do not knowingly collect personal data from children.

18. External Links

1. Our website may contain links to third-party websites.
2. We are not responsible for the privacy practices, content or security of third-party websites.
3. You should review the privacy policy of any third-party website you visit.

19. Complaints

1. If you believe we have not handled your personal information appropriately, please contact us first so we can investigate and respond.
2. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).
3. The ICO website is https://ico.org.uk.

20. Changes to this Privacy Policy

1. We may update this Privacy Policy from time to time.
2. The latest version will be available on our website.
3. Where changes are material, we may take reasonable steps to notify users.

21. Applicable Law

1. This Privacy Policy is intended to comply with UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003.

Version: 202606.1801