Privacy Policy
Last updated: [DATE]
This Privacy Policy explains how [COMPANY NAME] ("Verdari", "we", "us") collects and uses your personal data when you use [verdari.co.uk] and our apps. We are the data controller. We are committed to protecting your privacy and handling your data in line with UK data protection law (UK GDPR and the Data Protection Act 2018).
Contact: [privacy@verdari.co.uk] · [REGISTERED OFFICE ADDRESS] · Company no. [COMPANY NUMBER] · ICO registration no. [ICO NUMBER]
1. What we collect
- Account data: name, email address, and authentication details (managed by our login provider, Clerk).
- Payment data: when you buy a report, payment is processed by Stripe. We do not store your full card details; we keep a record of the transaction (amount, date, what you purchased).
- Usage data: the registrations you check, reports generated, pages visited, approximate location, IP address, device and browser information, and a device "fingerprint" used to count free checks and prevent abuse.
- Vehicle data you enter: UK vehicle registration numbers you submit for a check.
- Cookies and similar technologies: see our Cookie Policy.
2. How we use it, and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Provide your checks, reports and account | Performance of a contract |
| Take payment and prevent fraud | Contract / legal obligation / legitimate interests |
| Enforce free-check limits and prevent abuse | Legitimate interests |
| Improve and secure the service | Legitimate interests |
| Send service messages (e.g. receipts) | Contract / legitimate interests |
| Send marketing (if you opt in) | Consent |
| Non-essential cookies / analytics | Consent |
3. Vehicle and third-party data
To produce a report we obtain vehicle records from official and licensed sources (e.g. DVLA, DVSA MOT, Experian, Cap HPI / MIAFTR). Some of this may include limited personal data relating to a vehicle's history. We are not affiliated with these organisations and the accuracy of their data is outside our control. You should only check a vehicle where you have a legitimate reason to do so.
4. Who we share data with
We share data with service providers acting on our behalf, including: Clerk (authentication), Stripe (payments), [Neon / hosting provider] (database and hosting), our vehicle-data providers, and analytics providers. Where you click an affiliate link, your interaction is then governed by that third party's own privacy policy. We do not sell your personal data.
5. International transfers
Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK adequacy regulations or the International Data Transfer Agreement / Addendum).
6. How long we keep it
- Account data: while your account is active, then [period].
- Reports/purchases: report data remains accessible to you for 90 days after purchase; transaction records are kept as required for tax and legal purposes (typically [6] years).
- Usage/abuse-prevention data: [period].
7. Your rights
Under UK data protection law you have the right to access, correct, delete or port your data, to object to or restrict certain processing, and to withdraw consent. To exercise these, contact [privacy@verdari.co.uk]. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to help first.
8. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit and access controls. No system is completely secure, and we cannot guarantee absolute security.
9. Children
Verdari is intended for users aged 18 and over and is not directed at children.
10. Changes
We may update this policy. We'll post the new version here and update the date above.