Privacy policy

1. Who we are

Motorproof is a trading name of Breccs Private Limited, a company registered in England and Wales (Company No. 15139888). Breccs Private Limited operates the vehicle marketplace at motorproof.co.uk and is the data controller for personal data collected through this platform. We are registered with the Information Commissioner's Office (ICO) under registration reference ZB742139, in compliance with the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

Contact: info@motorproof.co.uk

2. Data we collect

We collect the following personal data:

• Account data: name, email address, phone number, county or postcode, and account role. Private sellers may opt in, in their dashboard, to a "Call" button on their listings that uses this number to connect buyers directly - the number itself is never printed as text on the page. This is off by default and only turns on if you switch it on yourself
• Dealer data: business name, address, Companies House number, VAT number (optional), and phone number. The phone number is shown publicly under your dealer name on your listings by default, since it is business contact information tied to operating your account; you can hide it at any time from your dashboard
• Listing data: vehicle registration, make, model, year, mileage, price, description, and photographs
• Verification data: vehicle registration submitted for DVLA verification and the result of that check
• Communication data: messages sent between buyers and sellers inside Motorproof; participant phone numbers and email addresses are not displayed as part of the messaging service itself (see above for how phone numbers may separately appear or be used elsewhere on a listing)
• Payment data: transaction records processed by Stripe. We do not store card numbers or full payment details
• Technical data: IP address, browser type, device type, pages visited, and session data
• Prospective dealer contact data: business email addresses and business names for trade businesses who have not signed up, manually compiled from publicly accessible sources such as Google Maps business listings, and used to send relevant marketing about Motorproof
• Referral data: for our dealer referral programme, which dealer referred another dealer, and the status of that referral (pending or converted), used to apply the referral reward

Partner Advertisers

Businesses that purchase partner advertising placements on Motorproof are referred to as Partner Advertisers. When you create a partner advertiser account, we collect and store the following information:

• Business name and contact email address
• Website URL and category
• Payment information processed securely via Stripe — we do not store card details
• Advert content including tagline and logo or icon
• Impression and click data for your advert placements

This information is used solely to deliver your advertising placement, send renewal reminders, and provide you with performance data. We do not sell or share your business data with third parties.

You may request deletion of your partner advertiser account by contacting info@motorproof.co.uk. We will delete or anonymise associated personal data unless we need to retain it for a legal, accounting, security, or dispute-resolution purpose.

3. How we use your data

We use your data to:

• Provide and operate the Motorproof platform
• Verify vehicle registrations against DVLA records
• Process dealer subscription payments via Stripe
• Enable secure communication between buyers and sellers inside Motorproof without displaying either party's email address
• Display a dealer's business phone number on their listings, unless the dealer turns this off in their dashboard
• Where a private seller has opted in, provide a "Call" button on their listing that uses their phone number to connect buyers directly, without printing the number as visible text on the page
• Send transactional emails including account confirmation, lead notifications, and listing updates
• Comply with our legal obligations including fraud prevention and anti-money laundering requirements
• Improve the platform through aggregated, anonymised usage analytics

4. Legal basis for processing

• Contract: processing necessary to provide the service you have signed up for
• Legal obligation: compliance with fraud prevention and financial crime laws
• Legitimate interests: platform security, abuse prevention, service improvement, marketing to business contacts (e.g. prospective dealers) as permitted for business-to-business communications, and displaying a dealer's business phone number on their listings as routine business contact information (dealers may opt out at any time)
• Consent: marketing communications to individuals where you have opted in, and a private seller's "Call" button, which is only enabled after the seller actively opts in and can be withdrawn at any time from their dashboard

5. Data sharing

We disclose personal data to service providers where necessary to operate and secure Motorproof, including:

• Supabase: our database and authentication provider, hosted in Europe
• Stripe: payment processing for dealer subscriptions
• DVLA: vehicle registration data submitted for verification purposes only
• CarVertical: our vehicle history check partner. If you choose to click through to a CarVertical report from a listing, the vehicle's registration plate is shared with CarVertical so it can generate that report - this only happens if you actively click the link
• Resend: transactional email delivery
• Vercel: website hosting and delivery
• Cloudflare: bot and abuse prevention through Turnstile
• Slack: limited operational notifications and incident handling; private marketplace messages are not sent to Slack
• HubSpot: a CRM platform used to manage dealer relationships and respond to enquiries. We share name, email, phone number, business name, and enquiry content where applicable. See HubSpot's privacy policy
• Law enforcement: where required by law or court order

We do not sell your personal data. We do not share your data with advertisers.

6. Data retention

We retain account data while an account is active and normally for up to 2 years after closure. Listing data, including photos and any reports made about the listing, is retained for the life of the listing - normally up to 90 days from publication - and is permanently deleted approximately 10 days after the listing expires naturally. Where a listing is removed before expiry, whether by the seller or by Motorproof, it is held in a recoverable state for 14 days before being permanently deleted, so that a mistaken removal can be reversed within that window. Buyer-seller messages are normally retained for up to 2 years after the conversation or associated listing becomes inactive. Accounting and transaction records may be retained for up to 7 years where needed for tax, accounting, or legal purposes. Where a complaint, legal claim, fraud investigation, or legal obligation requires it, we may manually preserve relevant records beyond these periods. You may request deletion subject to these exceptions.

7. Your rights under UK GDPR

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data (right to be forgotten)
• Object to processing based on legitimate interests
• Request restriction of processing
• Data portability - receive your data in a machine-readable format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email info@motorproof.co.uk. We will respond without undue delay and normally within one month. The law permits an extension in certain complex cases, and we will tell you if that applies.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use essential cookies to operate the platform including session management and authentication. We use analytics cookies only with your consent. See our Cookie policy for full details.

9. Security

We use technical and organisational safeguards including encrypted data transmission (HTTPS), server-side authentication, access controls, and row-level security on tables containing user data where appropriate. No system is completely secure. We assess personal data breaches promptly. Where a breach is likely to risk people's rights and freedoms, we will notify the ICO without undue delay and, where feasible, within 72 hours of becoming aware of it. Where a breach is likely to create a high risk, we will also notify affected people without undue delay unless an applicable legal exception applies.

10. Changes to this policy

We may update this privacy policy from time to time. We will publish the updated notice here and change the date above. Where a change materially affects how we use personal data, we will provide an appropriate additional notice, such as an email or prominent in-product message.

11. Contact us

If you have questions about this privacy policy or our data practices, please contact us:

• Company: Breccs Private Limited (trading as Motorproof)
• Company Number: 15139888
• ICO Registration: ZB742139
• Email: info@motorproof.co.uk
• Address: 128 City Road, London, United Kingdom, EC1V 2NX
• Website: motorproof.co.uk

Breccs Private Limited is registered with the Information Commissioner's Office (ICO) under registration reference ZB742139, in compliance with the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK, the Data Protection Commission (DPC) in Ireland, or your local supervisory authority.