Privacy Policy

When you use CheapRegCheck, we may collect the following categories of information:

• Vehicle registration numbers you submit for a check
• Contact details including name and email address (when provided)
• Payment metadata such as transaction IDs and timestamps (we never store card numbers)
• Usage data including pages visited, browser type, and approximate location via IP address
• Device and session data such as session tokens stored in your browser's localStorage

We use the information we collect solely to operate and improve CheapRegCheck. Specifically:

• To generate and deliver vehicle history reports you have requested
• To process and verify your payment via Stripe
• To send a report confirmation to your email address (where provided)
• To detect and prevent fraud, abuse, or misuse of our service
• To improve our data accuracy, interface, and user experience through aggregate analytics
• To comply with our legal obligations under UK law

We do not use your data for advertising profiling, sell it to data brokers, or use it for any purpose unrelated to providing this service.

Vehicle data displayed in our reports is sourced from the following official and licensed databases:

• DVLA — Driver and Vehicle Licensing Agency (registration, tax, keeper data)
• DVSA — Driver and Vehicle Standards Agency (full MOT history and advisories)
• Experian Automotive — Finance, stolen, and write-off checks (Full History reports only)
• Insurance industry databases — Category write-off records (Cat A, B, S, N)

We access these databases under licence. The vehicle data itself is not owned by CheapRegCheck — we are a retrieval and presentation service.

All payments on CheapRegCheck are processed by Stripe, Inc., a PCI DSS Level 1 certified payment provider. When you complete a purchase:

• Your card details are entered directly into Stripe's secure hosted fields — we never see or handle them
• Stripe returns a session token which we use to verify payment and generate your report
• We retain the Stripe session ID and transaction timestamp for order fulfilment and dispute resolution

CheapRegCheck uses a minimal set of cookies and browser storage to operate the service:

• Session storage (localStorage) — used to store your Stripe session ID temporarily so your report remains accessible after payment
• Analytics cookies — we may use privacy-respecting analytics (e.g. Plausible or similar) to understand aggregate usage patterns. These do not track individuals across sites.

We do not use advertising cookies, cross-site tracking, or third-party ad networks. You can clear localStorage at any time through your browser settings.

We do not sell, rent, or trade your personal data. We share data only where strictly necessary to provide the service:

• Stripe — payment processing (see Section 4)
• DVLA / DVSA / Experian — vehicle registration lookup queries (no personal data is sent, only the reg number)
• Railway / cloud infrastructure — our backend runs on Railway.app for hosting; data is processed in the EU/UK

We retain data only for as long as necessary:

• Payment records — retained for 7 years to comply with HMRC financial record-keeping requirements
• Report request logs — retained for up to 12 months for fraud prevention and dispute resolution
• Contact form submissions — deleted within 6 months of resolution
• Analytics data — aggregated and anonymised; no personally identifiable records retained

After the applicable retention period, data is securely deleted or anonymised.

Under the UK General Data Protection Regulation and Data Protection Act 2018, you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate or incomplete data
• Right to erasure — request deletion of your data ("right to be forgotten"), subject to legal retention obligations
• Right to restrict processing — ask us to limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, contact us at support@cheapregcheck.com. We will respond within 30 days as required by law.

CheapRegCheck is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has submitted information to us, please contact us and we will delete it promptly.

For any privacy-related questions, data requests, or complaints, please contact our data controller:

• Email: support@cheapregcheck.com
• Service: CheapRegCheck UK
• Response time: Within 30 days (GDPR requirement)

If you are not satisfied with our response, you may escalate your complaint to the Information Commissioner's Office at ico.org.uk/make-a-complaint.