Privacy Policy

Last updated: 2 September 2026

This policy explains what personal data Your Car Data collects, why, how we use and protect it, and the rights you have over it. We take your privacy seriously and only collect what we need to provide our vehicle-check service.

1. Who we are

Your Car Data is a product operated by ELLABYTE LTD (“we”, “us”, “our”), a company registered in England and Wales under company number 17043403, with its registered address at 1 Milnyard Square, Orton Southgate, Peterborough, PE2 6GX, United Kingdom. We are the “data controller” for the personal data described in this policy. Our ICO registration number is ZC176472.

For any privacy questions, contact us at hello@yourcardata.com.

2. The data we collect

• Vehicle registration (VRM) you enter to run a check.
• Email address, so we can deliver your report and, if you ask, notify you of launch or updates.
• Payment information — processed securely by our payment provider, Stripe. We do not see or store your full card details.
• Transaction records — which report you bought, when, and the amount paid.
• Your purchased report — the completed vehicle report we generate for you is stored so you can re-open it from the link we email you (see section 6 for how long we keep it).
• Technical data — such as IP address and device/browser type, kept in server logs to run the service securely and prevent fraud. Where you accept analytics cookies, we also collect aggregate usage statistics (see section 8).

3. How we use your data, and our lawful bases

• To provide the report you buy — running the vehicle check and delivering the results (lawful basis: performance of a contract).
• To take payment and keep records — including for accounting and tax (lawful basis: contract and legal obligation).
• To send launch or service updates you request (lawful basis: consent, which you can withdraw at any time).
• To keep the service secure, prevent fraud and improve it (lawful basis: legitimate interests).

4. Vehicle data and its sources

The vehicle information in your report is sourced from official and industry providers, including the DVLA, the DVSA (MOT history), and our vehicle-data supplier Vehicle Data Global Limited. This data relates primarily to the vehicle rather than to you. Where any such data constitutes personal data (for example, information relating to a vehicle’s keeper), it is provided by those sources and handled in line with this policy and the suppliers’ own terms.

A report may also include limited personal data relating to people other than you — for example the number and dates of a vehicle’s previous keepers, or its plate-change history. We do not receive or show those individuals’ names. We process this information on the basis of our legitimate interests, and those of our customers, in providing a vehicle-history service that helps prevent fraud and supports safe, informed vehicle purchases — balanced against the privacy of the individuals concerned. If you are an individual whose data appears in a report and you have a concern, please contact us at hello@yourcardata.com and we will help, directing you to the original data source where appropriate.

5. Who we share data with

We share personal data only with the service providers we need to run Your Car Data, acting as our processors under contract:

• Payment processing — Stripe.
• Vehicle-data supplier — Vehicle Data Global Limited, to fulfil your check.
• Email delivery / mailing list — Mailchimp (Intuit).
• Hosting — Hosting.com.
• Website analytics — Google Analytics (Google), only where you have given consent (see section 8).

We do not sell your personal data. We may disclose data where required by law.

International transfers. Some of these providers (including Stripe, Mailchimp and Google) may process data on servers outside the UK, such as in the United States. Where personal data is transferred outside the UK, we rely on appropriate safeguards — such as UK ‘adequacy’ regulations, the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework — so that it stays protected to UK standards.

6. How long we keep it

We keep your purchased report available to view via your link for 90 days from purchase, after which the link expires and a fresh check is a new purchase. Your report shows the records held at the date it was generated. We keep transaction records (such as your email, the vehicle checked and the amount paid) for as long as needed to meet our legal and accounting obligations — typically 6 years for financial records. Marketing/notify emails are kept until you unsubscribe. We delete or anonymise data we no longer need.

7. Your rights

Under UK data protection law you have the right to access, correct, delete or restrict the use of your personal data, to object to certain processing, to data portability, and to withdraw consent at any time. To exercise any of these, email hello@yourcardata.com. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Some of these rights are not absolute. In particular, we may need to keep certain records to meet the legal and accounting obligations described in section 6, even where you ask us to erase your data.

8. Cookies and analytics

We use Google Analytics to understand, in aggregate, how visitors use our site. Google Analytics sets cookies, which are non-essential. We ask for your consent before any such cookies are set: when you first visit, a banner lets you Accept or Decline, and no analytics cookies are set unless you accept. You can change your choice at any time using the “Cookie preferences” link in the footer. Any strictly necessary cookies needed to make the site work do not require consent.

9. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS) and restricted access. No method of transmission is completely secure, but we work to protect your information at all times.

10. Children

Your Car Data is intended for adults. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. The “last updated” date above shows when it last changed. Significant changes will be highlighted on this page.

12. Contact us

ELLABYTE LTD
1 Milnyard Square, Orton Southgate, Peterborough, PE2 6GX, United Kingdom
hello@yourcardata.com