Privacy Policy

1. Who controls your data

REGUP controls the personal data used for REGUP public pages, free vehicle checks, paid reports, checkout, smart keys, customer accounts and workshop/GMS services unless a separate notice says otherwise.

For privacy questions, email privacy@regup.co.uk.

2. Data we collect

• Vehicle registration numbers and vehicle lookup/report data.
• Email address, name, telephone number and billing details if you provide them.
• Payment references, order references, Stripe/payment processor identifiers and invoice/receipt records. We do not store full card numbers.
• IP address, device/browser information, user agent, page URL, referrer and security logs.
• Cookie choices, consent records and optional marketing preferences.
• Customer portal, smart key, QR/NFC scan and keyring activation information where you use those services.
• Workshop/GMS account data, staff roles, workshop customer records, workshop chat, notifications, presence/session data and attachments where applicable.
• Support messages, emails and any information you send to us.

3. Why we use data

• To provide free vehicle lookups, paid digital reports, PDF downloads and report emails.
• To process payments, issue receipts, manage refunds and prevent fraud or abuse.
• To operate accounts, customer portal features, smart keys and workshop/GMS tools.
• To keep the service secure, debug errors, handle support and improve REGUP.
• To comply with legal, tax, accounting and dispute-resolution obligations.
• To send optional marketing only where allowed by law or consent.

4. Lawful bases

We use different lawful bases depending on the activity:

• Contract: to provide a checkout, paid report, smart key, account or workshop service you request.
• Legitimate interests: to secure the service, prevent fraud, improve functionality and respond to support requests.
• Legal obligation: for accounting, tax, compliance and lawful authority requests.
• Consent: for optional analytics/marketing cookies and any marketing opt-in where required.

5. Data sources

Vehicle information may come from customer-entered data, DVLA/DVSA sources where available, trusted report providers such as CheckCarDetails or another configured provider, payment providers, email/SMS providers, workshops using REGUP tools and internal REGUP systems.

Vehicle data depends on source availability and may be incomplete, delayed or unavailable for a particular registration.

6. Data sharing

• Payment processors such as Stripe to process payments and receipts.
• Vehicle/report data providers so we can retrieve report information.
• Email/SMS providers, hosting, IT, analytics and security service providers.
• Workshops if you use a workshop-issued key, report, customer portal link or workshop-managed service.
• Professional advisers, insurers, payment dispute handlers or authorities where legally required.

We do not sell your personal data.

7. Retention

We keep data only as long as needed for the purpose it was collected, legal requirements, fraud prevention and dispute handling. Typical retention includes:

• Free lookup logs for service security, abuse prevention and troubleshooting.
• Paid report/order/payment records for accounting, customer access and support.
• Consent records so we can prove and manage your choices.
• Workshop chat, attachments and session data according to workshop settings, operational need and cleanup rules.
• Technical logs for a limited period unless needed for security or legal reasons.

8. Cookies and similar technologies

Essential cookies run the site, checkout, forms, security and accounts. Optional analytics, marketing and preference cookies are off unless you allow them.

9. Your rights

Subject to UK GDPR rules, you may have rights to access, correction, deletion, restriction, objection, portability and withdrawal of consent. To use your rights, contact privacy@regup.co.uk.

You can complain to the UK Information Commissioner's Office at ico.org.uk.

10. International transfers

Some providers may process data outside the UK or EEA. Where this happens, we expect appropriate safeguards such as adequacy regulations, standard contractual clauses or equivalent protection.

11. Children, security and changes

REGUP is not intended for children to buy paid services. We use reasonable technical and organisational measures to protect data, but no online service can be guaranteed completely secure.

We may update this notice as REGUP changes. The current version and date are shown at the top of this page.