Privacy Policy

What data we collect

• Vehicle registration number — the UK registration you enter when you run a check. We need this to request MOT and register data on your behalf.
• Email address (optional) — if you choose to provide one (for example to receive a report link or service messages). You can use the free trust score without giving us an email.
• Payment details — when you pay for a full report, card and payment method data are collected and processed by Stripe. We do not store full card numbers on our own systems. We may receive limited payment metadata from Stripe (such as transaction reference, amount, status, and the billing contact details you supply to Stripe).
• IP address and technical data — such as IP address, browser type, and basic server logs. We use this for fraud prevention, abuse protection, security monitoring, and to keep the service reliable.

When you run a check, the response may also include vehicle and register information returned by our suppliers (for example MOT results or register flags). Most of that is not data about you as an individual; it relates to the vehicle record. It is still handled securely and only for delivering the service you asked for.

Where our data comes from

• MOT history and related vehicle data are obtained from the Driver and Vehicle Standards Agency (DVSA), the official UK government source for MOT testing information, through authorised channels.
• Additional checks — such as indicators relating to finance, stolen records, write-offs, mileage, keepers, and registration changes — use licensed UK data registers and approved partners (including aggregated products supplied via interfaces such as Vehicle Data Global Limited, where integrated). We only show what those sources return for the registration you searched.

Why we collect it

• To perform vehicle history checks you request (free summary and paid full report).
• To deliver paid reports and essential service emails (for example checkout or report access).
• To process payments securely through Stripe.
• To detect and prevent fraud, misuse, and attacks on the service.
• To meet legal and accounting obligations where they apply.

How long we keep it

• Email addresses — retained for up to twelve (12) months from collection unless you ask us to delete them sooner or unsubscribe from marketing (where applicable), subject to any overriding legal need to retain a minimal record.
• Payment and accounting records — retained for up to seven (7) years where required for tax, audit, and statutory accounting purposes, or longer if a dispute or investigation requires it.
• Vehicle search / usage history — identifiers tied to individual checks are anonymised after ninety (90) days where operational systems allow, so we can still understand aggregate demand without keeping the registration indefinitely linked to that event.
• Security logs — typically kept for a limited period (often up to twelve months) unless a longer retention is needed to investigate an incident or satisfy a legal obligation.

Who we share it with

We do not sell your personal data. We share information only where necessary to run the service or comply with the law:

• Stripe — for payment processing and fraud signals related to checkout.
• DVSA and licensed data partners — to perform the vehicle and register lookups you trigger. They process the registration (and related technical data) as required to return results.
• Email delivery provider — we use a transactional email provider (currently Resend) strictly as a processor on our instructions, to send messages such as report delivery or service notifications. They do not use your data for their own marketing.
• Law enforcement and regulators — if we are legally required to disclose information (for example under a court order or lawful request), we will do so within the bounds of applicable law.

Some processors may host data outside the UK. Where that happens, we rely on appropriate safeguards recognised under UK data protection law (such as the UK International Data Transfer Agreement or standard contractual clauses), as required.

Your rights under UK GDPR

Depending on the circumstances, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Request deletion, where there is no overriding legal reason to keep it;
• Object to or restrict certain processing;
• Data portability, where processing is based on consent or contract and technically feasible;
• Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, email info@bad-drivers.uk. We will respond within the timeframes set by law and may ask for reasonable identity verification before acting on a request.

Affiliate programme data

We operate an affiliate programme. If you apply to become an affiliate, we collect: your name, email address, social media profile URLs, and PayPal or bank details for payouts. This data is stored securely in our database and used only to operate the affiliate programme. We do not share it with third parties. You can request deletion at any time by emailing info@bad-drivers.uk. Legal basis: legitimate interests (operating a commercial affiliate programme).

Cookies

We use essential cookies and similar technologies only where they are needed for the site to function (for example security, load balancing, or session continuity). We do not use advertising or behavioural tracking cookies.

We use a referral tracking cookie if you arrive at our site via an affiliate link. This cookie stores the affiliate's username and lasts 30 days. It is used solely to attribute any purchase you make to the referring affiliate for commission purposes. No personal data is stored in this cookie.

Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS), access controls, and reputable payment and infrastructure providers. No online service can guarantee perfect security; if you believe your interaction with us has been compromised, please contact us at info@bad-drivers.uk promptly.

Marketing and unsubscribe

Where the law allows, we may send occasional promotional emails about Bad Drivers UK. Every marketing message includes a way to opt out. You can also use our unsubscribe page. Opting out of marketing does not delete all data immediately, but we will stop promotional contact (subject to short technical delays). We may still send essential transactional emails related to a purchase you have made.

Changes to this policy

We may update this Privacy Policy as our service or legal requirements evolve. The date at the top of this page will always show when it was last revised. If we make material changes, we will take reasonable steps to draw attention to them on the website.