Who we are
RegVerdict is operated by [Company name] Ltd (company number [Companies House number]), registered office [registered office address]. We are the data controller for the personal data described here and are registered with the Information Commissioner’s Office (registration [ICO registration number]). You can reach us at privacy@regverdict.com.
The data we process
- Vehicle look-ups. When you enter a registration we retrieve vehicle data: MOT history, mileage readings, advisories, make/model and (where available) tax and specification. We do not retrieve or hold registered-keeper or owner details.
- Purchase data. If you buy a full report we process the registration checked, your email (for the receipt and report), and a payment reference. Card details are handled by our payment processor. We never see or store them.
- Technical data. Standard server and security logs (IP address, browser type, pages requested, timestamps), used to run and protect the service.
- Analytics data. If you accept analytics cookies, Google Analytics collects usage data (such as pages viewed, approximate location, device and how you reached the site) so we can understand and improve it. It is off until you accept, and we keep advertising signals switched off.
Why we process it, and our lawful basis
- To provide the report you ask for. Lawful basis: contract (UK GDPR Article 6(1)(b)).
- To keep the service secure, prevent fraud and improve it. Lawful basis: legitimate interests (Article 6(1)(f)); we keep a legitimate-interests assessment on file and balance this against your rights.
- To measure and improve the site with analytics. Lawful basis: consent (Article 6(1)(a)); analytics runs only if you accept, and you can decline or withdraw at any time.
- To meet legal and accounting obligations. Lawful basis: legal obligation.
Payments
Payments are processed by Stripe, which acts as an independent controller of your card data under its own privacy policy. We receive only a payment confirmation and reference, never your card number.
Who we share data with
We share data only with the suppliers needed to run the service:
- DVSA (MOT history) and, where available, DVLA Vehicle Enquiry Service. We send the registration and receive vehicle data.
- A vehicle-data provider for paid finance, write-off and stolen checks, queried only when you purchase a full report.
- Stripe (payments), and our hosting and security/CDN providers (including Cloudflare) for delivery and protection.
- Google Analytics (Google), for usage analytics, only if you accept analytics cookies.
We do not sell your data, and we do not share it for third-party advertising.
How long we keep it
We keep purchase and report records for as long as needed to provide the service and to meet legal/accounting requirements (generally six years for transaction records). Security logs are kept for a short period. We do not build long-term profiles of the vehicles or people you look up.
International transfers
Some suppliers (for example Stripe and Google) may process data outside the UK. Where they do, the transfer is covered by appropriate safeguards such as the UK International Data Transfer Agreement or adequacy regulations.
Your rights
You have the right to access, correct, erase, restrict or object to the processing of your personal data, and to data portability. To exercise any of these, email privacy@regverdict.com. You can also complain to the Information Commissioner’s Office, though we’d appreciate the chance to put things right first.
What we never do
- Look up registered-keeper or owner details.
- Re-identify vehicle data to profile an individual.
- Sell your data or use it for marketing without a lawful basis.
Cookies
We use only strictly necessary cookies. See our cookie policy.
Changes and contact
We may update this policy; the date above shows the latest version. Questions go to privacy@regverdict.com.