Privacy policy

Last updated 16 June 2026.

This policy explains what personal data RegVerdict processes, why, and the rights you have over it under UK data protection law (UK GDPR and the Data Protection Act 2018).

Draft — the company name, registered address and ICO registration are finalised before RegVerdict begins taking payment. Bracketed fields below are completed at that point.

Who we are

RegVerdict is operated by [Company name] Ltd (company number [Companies House number]), registered office [registered office address]. We are the data controller for the personal data described here and are registered with the Information Commissioner’s Office (registration [ICO registration number]). You can reach us at [email protected].

The data we process

Vehicle look-ups. When you enter a registration we retrieve vehicle data — MOT history, mileage readings, advisories, make/model and (where available) tax and specification. We do not retrieve or hold registered-keeper or owner details.
Purchase data. If you buy a full report we process the registration checked, your email (for the receipt and report), and a payment reference. Card details are handled by our payment processor — we never see or store them.
Technical data. Standard server and security logs (IP address, browser type, pages requested, timestamps), used to run and protect the service.

Why we process it, and our lawful basis

To provide the report you ask for — lawful basis: contract (UK GDPR Article 6(1)(b)).
To keep the service secure, prevent fraud and improve it — lawful basis: legitimate interests (Article 6(1)(f)); we keep a legitimate-interests assessment on file and balance this against your rights.
To meet legal and accounting obligations — lawful basis: legal obligation.

Payments

Payments are processed by Stripe, which acts as an independent controller of your card data under its own privacy policy. We receive only a payment confirmation and reference, never your card number.

Who we share data with

We share data only with the suppliers needed to run the service:

DVSA (MOT history) and, where available, DVLA Vehicle Enquiry Service — we send the registration and receive vehicle data.
A vehicle-data provider for paid finance, write-off and stolen checks — queried only when you purchase a full report.
Stripe (payments), and our hosting and security/CDN providers (including Cloudflare) for delivery and protection.

We do not sell your data, and we do not share it for third-party advertising.

How long we keep it

We keep purchase and report records for as long as needed to provide the service and to meet legal/accounting requirements (generally six years for transaction records). Security logs are kept for a short period. We do not build long-term profiles of the vehicles or people you look up.

International transfers

Some suppliers (for example Stripe) may process data outside the UK. Where they do, the transfer is covered by appropriate safeguards such as the UK International Data Transfer Agreement or adequacy regulations.

Your rights

You have the right to access, correct, erase, restrict or object to the processing of your personal data, and to data portability. To exercise any of these, email [email protected]. You can also complain to the Information Commissioner’s Office, though we’d appreciate the chance to put things right first.

What we never do

Look up registered-keeper or owner details.
Re-identify vehicle data to profile an individual.
Sell your data or use it for marketing without a lawful basis.

Cookies

We use only strictly necessary cookies — see our cookie policy.

Changes and contact

We may update this policy; the date above shows the latest version. Questions go to [email protected].