Privacy Policy — Car Report Check

Last updated: 13 August 2026

Introduction

Car Report Check ("we", "us", "our") provides paid vehicle history reports for UK-registered vehicles. This Privacy Policy explains how we collect, use, share, and protect personal data when you use our website and services. It also explains the rights available to users in the UK under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information we collect

Information you provide

Full name
Email address
Vehicle registration mark (VRM)
Agreement to our Terms & Conditions (consent checkbox)

Payment information

We do not directly process card payments on the site. Payments are processed by our payment provider, Lemon Squeezy. We receive limited payment metadata from Lemon Squeezy (e.g., payment status, invoice reference) necessary to fulfil orders, but we do not store full payment card details.

Automatically collected and technical data

When you visit the site we may collect technical information such as IP address, browser type, device identifiers, pages visited, and — if you arrive via a search campaign or referral link — the referring source, campaign, and landing page. This information is used for security, fraud prevention, attributing orders to referral partners, and (where you've consented) analytics. See Cookie Policy for the specific cookies involved and how long each is kept.

How we use your information

To provide reports: Use name, email, and VRM to generate and deliver vehicle reports.
To process payments and orders: Use order metadata from Lemon Squeezy to confirm payment and fulfil purchases.
To communicate: Respond to enquiries, send reports, transactional and essential messages.
Security and fraud prevention: Detect and prevent abuse and fraud, including payment fraud.
Referral attribution: Identify which referral partner, if any, should be credited for a visit or order.
Analytics (with consent): Understand site usage and improve the service, using tools such as Google Analytics.
Legal obligations: Comply with legal requests and obligations from public authorities.

Legal basis for processing

Performance of a contract — to deliver the paid report you ordered, and to attribute orders made via a referral link.
Legal compliance — where required by law or lawful requests from authorities.
Legitimate interests — for fraud prevention and security.
Consent — for optional processing where consent is obtained, including analytics cookies and marketing communications. You can withdraw this consent at any time via the cookie preferences link in our site footer, without affecting the lawfulness of processing before withdrawal.

Sharing and disclosures

We may share personal data with the following categories of recipients:

Data providers: Authorised third-party APIs and government services to obtain vehicle data.
Payment processor: Lemon Squeezy, for payment processing and order records.
Email and delivery providers: Third-party providers we use to send reports and transactional emails.
Analytics provider: Google Analytics, only once you've consented to analytics cookies.
Legal and safety: If required by law, or to protect rights, users, or the public.

We require all service providers to process data only on our instructions and maintain security measures. Referral and attribution data is not shared with any third party — it is used internally only.

Cross-border transfers

Your data may be processed by service providers outside the UK. We take steps required under UK law to protect your personal information, e.g., standard contractual clauses.

Data retention

Order and payment metadata: retained for a minimum of 6 years for tax/accounting purposes.
User contact details and report data: retained up to 2 years after last interaction unless law requires longer.
Referral attribution data: retained as described in our Cookie Policy.

Your rights (UK residents)

Request access to personal data (Subject Access Request).
Request correction of inaccurate/incomplete data.
Request deletion of personal data (certain circumstances).
Request restriction of processing (certain circumstances).
Object to processing based on legitimate interests.
Request portability of data in structured format.
Withdraw consent at any time, where processing is based on consent.

To exercise any rights, contact support@carreportcheck.co.uk. Verification may be required. Complaints can be lodged with the UK Information Commissioner's Office (ICO).

Security

We use reasonable technical and organisational measures to protect personal data. No system is fully secure — if you believe your data is compromised, contact support@carreportcheck.co.uk.

Cookies and tracking

We use a small number of cookies: some are strictly necessary to run the site and remember your preferences, and others — such as analytics — are only set once you've given consent via the cookie banner shown on your first visit. You can change your choice at any time using the cookie preferences link in the site footer, or through your browser settings. See our Cookie Policy for a full list of the cookies we use, what each is for, and how long each lasts.

Children

Our services are not intended for children. As a matter of policy we do not knowingly collect personal data from anyone under 16 — a higher bar than the minimum age of 13 set by the Data Protection Act 2018 for consent to online services. If we learn that a child under 16 has provided personal data, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy. Revised policy will be posted with an updated "Last updated" date. Significant changes may be communicated via email.

Contact us

For privacy enquiries, data access requests or complaints, contact: support@carreportcheck.co.uk.