Privacy policy

AutoFinder (AUTOFINDER LIMITED, Company No. 16562062, ICO Registration: ZC104874) is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our vehicle inspection platform.

We believe in transparency and your right to understand exactly how your data is handled. This policy covers all aspects of our data practices in simple, clear language.

Personal information (optional storage)

• Username and email address (when you create an account)
• Profile information you choose to provide
• Your email address if you join a waitlist, like Find me a car's, so we can email you when it opens
• You can opt out of storing personal details in account settings

Platform data (AutoFinder property)

• Vehicle registration numbers entered for inspections
• A copy of each car check's result, so you can send it to someone with a link. Anyone with the link can see that check; the page is never shown in search engines
• The first half of your postcode (like E3), when you've given one, kept with a car check saved to your account, so the repair prices on it are for garages near you
• When we offer you a time-limited price, a record of that offer (when it ends, when you said you're seeing the car, whether it was used and for what, and a random id for your device or a scrambled form of your connection) so it's one per person and the deadline can't be moved
• If you use someone's discount code, or make an account after following their link, a note of whose code it was and when, so we can pay them a share of what you spend with us for a set time (usually 12 months). They aren't told who you are
• Viewings you book: the day and time, the postcode or address, and the seller's name and phone number if you add them, so you can find your way there and add it to your calendar
• If you rate a Find me a car reply with a thumbs up or down, we keep your vote with the message you sent, our reply (with its prices taken out), the number plates of the cars it showed, and any reason or note you add, so we can make its answers better
• Inspection data, assessments, and scoring results
• Photos and notes added during inspections
• All reports and analysis generated through our platform

Usage information

• How you interact with our platform
• Features you use and time spent on inspections
• Device information and browser type

External data

• Vehicle data from UK government APIs (DVLA, MOT)
• This data is publicly available and used to enhance your inspections

Core services

• Provide vehicle inspection tools and reports
• Save your inspection history and results
• Generate inspection reports and recommendations

Platform improvement

• Analyse usage patterns to improve our features
• Identify common vehicle issues and trends
• Enhance the accuracy of our assessments
• Generate market insights and analytics from aggregated data

Communication

• Send important updates about your account
• Notify you of new features or improvements
• Respond to your support requests
• If you leave "Email me tips" ticked when you make an account, or say yes after signing up with Google: a few emails from MT, our founder, with tips on the cars you check and the odd offer of our inspection. You can say no when you sign up, and every one of them has an unsubscribe link

Protection measures

• All data is encrypted in transit and at rest
• Secure database hosting with regular backups
• Access controls and authentication requirements
• Regular security updates and monitoring

Data retention

• Account data: Retained while your account is active
• Inspection data: Stored for your access and platform improvement
• Usage analytics: Aggregated and anonymised after 2 years

Access and control

• View all your inspection data through your dashboard
• Download your reports and inspection history
• Update or correct your account information
• Delete your account and associated data

Privacy choices

• Use basic features without creating an account
• Control email communication preferences
• Opt out of non-essential data collection

Government APIs

• DVLA Vehicle Enquiry Service for registration lookups
• MOT History API for vehicle test data
• This data is public and used to enhance your inspections

Companies that help us run AutoFinder

These companies process data on our behalf, only to provide the service:

• A website host: runs the website and app (servers in the EU)
• A database host: stores our database (London)
• A storage and security service: stores inspection photos and protects the site
• A payment provider: takes card payments. We never see or store your full card number
• Your sign-in provider: if you choose to sign in with an account you have elsewhere, it confirms who you are
• AI providers: analyse the photos, recordings and listing screenshots you give us, to spot damage, read your dashboard and produce your report, and read the messages you send Find me a car, to search for cars and write its replies
• A vehicle history provider: history checks and valuations
• A car listings provider: cars for sale, their prices and a car's past adverts. We send it the car or number plate and the postcode or area you search from, never your name or email
• A postcode lookup service: finds where a postcode or town is, for Find me a car and the viewings you book. We send it only the postcode or place
• A web page service: fetches a listing page when you give us its link
• An email service: sends account emails, receipts and report links, and the tips emails if you said yes to them
• A site analytics service: if you switch on Analytics cookies, records how the site is used (taps, scrolling, pages seen) so we can make it easier to use. What you type is hidden

Some of these companies are based outside the UK, so your data may be processed there. See "International data transfers" below.

Advertising

Only if you switch Advertising on in Cookie settings: the company that runs our social media ads receives the pages you open and whether you pressed Check, got a free check's result, made an account or paid, with the cookie it sets and your device's details. We use it to see which of our ads work and to show them to people likely to find AutoFinder useful; it uses it under its own privacy policy. We never send it a registration, your email or anything you type. It's off unless you switch it on, and you can switch it off any time.

The same switch lets the company that runs our search ads know when you got a free check's result, made an account, opened the payment box or paid (and how much), with the page you were on, the cookie it sets and your device's details. We use it to see which of our search ads work and to show them to people likely to find AutoFinder useful; it uses it under its own privacy policy. We never send it a registration, your email or anything you type. Our Cookie policy names both companies, with links to their privacy policies.

If you have questions about this privacy policy or how we handle your data, please contact us:

• Email: mt@autofinderuk.com
• Support: mt@autofinderuk.com

We'll respond to all privacy inquiries within 48 hours and aim to resolve any concerns promptly.

GDPR compliance limitations

While we strive to comply with GDPR, users acknowledge that:

• Photo and content uploads may contain third-party personal data beyond our control
• Government API data is processed under legitimate interest for vehicle assessment
• Data retention periods may vary based on legal and business requirements
• Cross-border transfers may occur for service delivery and security

Data controller vs processor

AutoFinder acts as data controller for platform data and data processor for user-uploaded content. Users uploading photos containing personal data remain responsible for obtaining necessary consents and complying with applicable laws.

Regulatory reporting

AutoFinder may report data incidents, suspicious activities, or legal violations to appropriate authorities as required by law, including but not limited to ICO, DVLA, or law enforcement agencies.

Data breach notification

In the event of a data breach affecting personal data, we will notify affected users within 72 hours of discovery where legally required. However, our liability for such incidents is limited as set forth in our Terms of Service.

Cross-border data processing

Your data may be processed in countries outside the UK/EEA for:

• Infrastructure services (hosting, CDN, security)
• Third-party integrations and APIs
• Analytics and performance monitoring
• Payment processing and fraud prevention

Transfer safeguards

We implement appropriate safeguards for international transfers, but cannot guarantee the same level of protection available in the UK. Users consent to such transfers as necessary for service delivery.

Government access

Data processed internationally may be subject to foreign government access under local laws. We will resist unlawful access requests but cannot guarantee protection against all foreign legal processes.

Data accuracy limitations

Users acknowledge that AutoFinder cannot guarantee accuracy of:

• Government API data (DVLA, MOT) - provided "as-is" from official sources
• User-submitted information including photos and vehicle details
• Third-party market data and valuations
• Historical records or cached information

User data verification

Users are responsible for verifying all data accuracy before making vehicle purchase decisions. AutoFinder provides tools but not guarantees regarding data completeness or accuracy.

Third-party content

Users uploading photos or content warrant they have proper rights and consents. AutoFinder is not responsible for intellectual property violations or privacy breaches in user-submitted content.

We may update this privacy policy to reflect changes in our practices, legal requirements, or regulatory guidance. When we make significant changes:

• We'll update the "Last updated" date at the top
• We'll notify active users via email with reasonable notice
• We'll highlight key changes clearly
• We may require re-consent for material changes

Your continued use of AutoFinder after policy updates indicates acceptance of the revised terms, except where additional consent is legally required.

Regulatory changes

Privacy practices may change in response to new regulations, court decisions, or regulatory guidance. We reserve the right to modify data handling practices as necessary for legal compliance.