What CarSussed collects, why it is used and the choices available to you.
Gavin Waby, trading as CarSussed, is the data controller for customer and report information. Correspondence may be sent to 3A Derby Street, Rishton, Blackburn, BB1 4NW, United Kingdom. Privacy enquiries are handled through carsussed@outlook.com.
We use the information to perform the report contract, verify payment, retrieve licensed vehicle data, calculate buyer guidance, prevent misuse, investigate faults, respond to support requests and meet legal or accounting obligations. Where legitimate interests are used, they are limited to operating, securing and measuring the service and improving reliability and the customer journey in a proportionate way.
Necessary information may be shared with Stripe for payment, Vercel for hosting, DVSA/DVLA-connected services for official vehicle information, Vehicle Data Global for licensed vehicle lookups, and professional advisers or authorities where legally required. Each provider receives only what is needed for its role.
Temporary browser storage holds your free preview, checkout reference and, after payment, the returned vehicle data, answers and completed report so that you can recover from a refresh or interrupted checkout. These recovery entries expire after about two hours and are cleared when you start another check. They are not a permanent backup. A separate completed report copy stays on the device when you choose “Save on this device”; it can be removed from Saved reports. CarSussed cannot restore that local copy if browser storage is cleared. Paid vehicle-history and valuation checks run only after payment is confirmed. Payment, consent and accounting records are retained for the period reasonably required for contracts, tax, disputes and fraud prevention. Provider lookup and technical logs are kept only as long as needed for service delivery, licensing and security.
Some technology providers may process information outside the United Kingdom. Where that happens, CarSussed will rely on the provider’s lawful transfer safeguards and contractual protections.
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or object to certain processing. You may also complain to the UK Information Commissioner’s Office. We may need to retain limited information where the law or a live dispute requires it.
CarSussed uses Vercel Web Analytics to measure aggregate page views and conversion events such as using or completing the free MOT check, viewing the paid offer, expanding the optional history, moving from the free check toward a full report, starting a vehicle check, opening checkout, reaching secure payment, confirming a successful payment, completing a paid report, and saving or reopening a report. CarSussed does not send the vehicle registration, advert URL, customer email, Stripe/session reference or report content as custom analytics event data. Essential, short-lived browser storage is used for the free-preview result and checkout recovery; optional browser storage is used when you ask to save a completed report. CarSussed may use Google Ads and Meta advertising measurement after you accept optional cookies, to understand whether an advert led to a visit or completed purchase. Meta Pixel may receive a PageView and, after a verified completed paid report, a Purchase event containing the purchase value and currency plus a pseudonymous event identifier derived in the browser. Google Ads may receive equivalent purchase measurement with a pseudonymous transaction identifier. CarSussed does not send the vehicle registration, advert URL, customer email, raw Stripe session reference or report content in these advertising conversion events. Google Ads and Meta advertising technology are not loaded when optional tracking is rejected. You can change this choice using Cookie settings in the footer, without deleting your saved reports. Changing to Reject optional withdraws advertising consent for subsequent events. Previously sent events are not recalled.
A registration can become personal data when combined with information that identifies or singles out a person. CarSussed uses registrations for the customer-requested vehicle assessment and does not publish a public database of customer searches.