Last updated: 26-September-2026
1. Who we are
2. The information we collect
- Account details: your name, email address, password (stored only in scrambled form), and optionally your phone number. Whether you are a private seller or a trader, and when you accepted our terms.
- Listings: vehicle details, registration number, photos, price, description and the location you choose (we show the town and the first part of the postcode, never your full address).
- Dealer accounts: business name, address, phone, website, logo, opening hours, and Companies House or FCA numbers if you provide them.
- Messages: the messages you send and receive through the site. Buyers who are not signed in give their name, email address and optionally a phone number.
- Your activity: saved cars, saved searches and alert settings, cars you compare (stored only in your own browser), and reports you make.
- Payments: if you buy a featured listing, the amount, date, listing and Stripe payment reference. Your card details go directly to Stripe and we never see them.
- Contact form: your name, email address and message.
- Technical information: a scrambled (hashed) form of your IP address, used to stop spam and abuse and to count listing views without identifying you, and the standard logs kept by our web host.
- Analytics (only if you agree): how you use the site, collected by Google Analytics through cookies. See section 8.
3. How we use it, and our legal basis
- To provide the marketplace (accounts, listings, messages, saved searches, alerts, featured listings and dealer pages): because it is necessary to perform our contract with you.
- To keep the site safe (checking listings, preventing fraud and spam, enforcing our terms, rate limiting): our legitimate interests in running a trustworthy marketplace.
- To look up official vehicle data from the DVLA and DVSA when a registration number is entered: our legitimate interest in showing accurate vehicle information to buyers and sellers.
- To send service emails (verification, password resets, messages, alerts you set up, and important changes): contract and legitimate interests. You can switch alerts off at any time using the link in each alert.
- To keep accounting records of payments: legal obligation.
- Analytics: only with your consent, which you can withdraw at any time using “Cookie settings” at the bottom of every page.
We do not sell your personal information, and we do not send marketing emails unless you have separately agreed to receive them.
4. Who can see your information
- Other users: your listings are public, with the seller name, town and (for dealers) business details you provide. When you message someone, they see your name and your message, but not your email address. If you include contact details in a message, the other person will see them.
- Our service providers, who process information only on our instructions: Hostinger (web hosting); Brevo, Sendinblue SAS in France (sending emails); Stripe (card payments, as an independent controller for payment and fraud checks); Google (analytics, only if you consent); Cloudflare (a spam check on some forms, if enabled); and postcodes.io (converting the first part of a postcode into an approximate location for distance search).
- Government services: the registration number is sent to the DVLA and DVSA to look up vehicle and MOT information. No personal details are sent.
- Where the law requires it: for example to the police or a regulator, or to protect our users from fraud.
Some providers may process information outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Addendum and equivalent safeguards.
5. How long we keep it
- Your account, listings, saved cars and saved searches: until you delete your account or ask us to. Deleting your account (Account settings → Delete account) removes them straight away.
- Messages: the messages you sent stay in the other person’s inbox after you delete your account, but your name is replaced with “Former member” and your contact details are removed.
- Payment records: six years, as required for accounting, no longer linked to your account once it is deleted.
- Contact form messages: up to two years, then deleted automatically.
- Spam and abuse controls: hashed IP addresses used for rate limiting are kept for no more than a day; those attached to reports and enquiries are kept with that record.
- Backups are overwritten on a rolling basis.
6. Your rights
You have the right to access your information, to have it corrected or deleted, to object to or restrict how we use it, to data portability, and to withdraw consent. You can update most details yourself in your account. For anything else, use our contact form and choose “Privacy or data request”. We will reply within one month.
If you are unhappy with how we handle your information, please tell us first. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
7. Security
The site uses HTTPS encryption throughout, stores passwords only in scrambled form, keeps email addresses private between users, and limits repeated sign-in attempts. No system is completely secure, so please use a strong, unique password.
8. Cookies and similar technologies
- Essential (no consent needed): WordPress sign-in cookies that keep you signed in and protect forms, and small items stored in your browser to remember your comparison list and your cookie choice.
- Analytics (only if you click Accept): Google Analytics cookies (names beginning
_ga) that tell us how the site is used, with IP addresses anonymised. You can change your choice at any time using “Cookie settings” at the bottom of every page. - Spam protection: if enabled, Cloudflare Turnstile may set a cookie on forms to check you are not a bot.
9. Children
The site is not intended for anyone under 18, and we do not knowingly collect their information.
10. Changes to this policy
We will update this policy if the way we use information changes, and show the date of the latest version at the top. We will tell registered users by email about significant changes.