This Privacy Policy explains how Secure Online Managements S.L. ("we", "our", or "us") collects, uses, and protects the personal data of users in the United Kingdom under the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Our company is established in Spain, but we sell our services exclusively to customers in the United Kingdom. This means that we comply with UK GDPR while also being subject to EU GDPR and Spanish data protection laws.
Data Controller
The data controller for the processing of personal data under this policy is:
- Company Name: Secure Online Managements S.L.
- Registered Address: C/ Creueta, 20, 08870, Barcelona, Spain
- Contact Email: support@carscheck.uk
What Data We Collect
We collect and process the following types of personal data:
- Identification Data: Name, surname, and contact details (email, phone).
- Transaction Data: Payment details (processed via Stripe, we do not store card information).
- Technical Data: IP address, browser type, and other log data for security and analytics.
- Enquiry Data: Vehicle registration number provided by the user to perform vehicle history checks.
Legal Basis for Processing Personal Data
We process personal data under UK GDPR based on the following legal grounds:
- Contractual necessity: To provide the vehicle check service as per our terms and conditions.
- Legal obligations: To comply with UK tax, fraud prevention, and financial regulations.
- Legitimate interest: To analyze website usage and improve our services.
- User consent: When applicable, such as accepting cookies from third-party services.
How We Use Your Data
We use personal data for the following purposes:
- To process and provide vehicle history reports.
- To handle transactions securely through Stripe.
- To improve website functionality and user experience.
- To comply with legal and regulatory requirements.
- To prevent fraud and unauthorized access.
Data Sharing and Third-Party Processors
We do not sell or share personal data with third parties, except:
- Payment Processing: Transactions are handled by Stripe, which may process personal data as per their privacy policy.
- Legal Compliance: We may disclose information if required by UK or EU authorities for fraud prevention or tax compliance.
- Website Analytics: We may use Google Analytics to track website performance (see our Cookie Policy).
Data Transfers Outside the UK
Since our company is based in Spain, some data processing occurs outside the United Kingdom. However, we ensure that:
- Data transfers are conducted under the UK GDPR's International Data Transfer rules.
- The European Commission's adequacy decision applies to Spain, ensuring compliance.
- Standard Contractual Clauses (SCCs) are used when required.
Data Retention Period
We retain personal data only for the necessary period to fulfill the purposes outlined in this policy:
- Transaction and financial records: Retained for at least 6 years to comply with tax laws.
- User enquiries and reports: Retained for 12 months, unless required for legal or dispute resolution purposes.
- Marketing data: Retained until the user opts out.
Your Rights Under UK GDPR
Under UK GDPR, you have the following rights:
- Right to access: You can request a copy of your personal data.
- Right to rectification: You can correct inaccurate or incomplete data.
- Right to erasure ("Right to be forgotten"): You can request deletion of your data under certain conditions.
- Right to restrict processing: You can limit how we process your data in specific situations.
- Right to data portability: You can request a copy of your data in a standard format.
- Right to object: You can object to the processing of your data for legitimate interests or direct marketing.
- Right to lodge a complaint: If you believe we are not handling your data lawfully, you can file a complaint with the UK Information Commissioner's Office (ICO).
How to Exercise Your Rights
If you want to exercise any of your UK GDPR rights, you can contact us at:
- Email: support@carscheck.uk
- Postal Address: C/ Creueta, 20, 08870, Barcelona, Spain
We will respond to your request within one month, as required by UK GDPR.
Changes to This Policy
We may update this UK GDPR Policy from time to time. Any changes will be posted on this page, and we encourage users to review it periodically.