Privacy Policy

    Last updated: April 2026

    1. Data controller

    The data controller is CarSavvi. Full company and contact details available on request. We are committed to protecting your data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

    Contact: privacy@carsavvi.co.uk

    2. Data we collect

    • Identity data: first name, email address, mobile phone number.
    • Vehicle data: registration number, make, model, year, fuel type, engine size, colour, mileage, MOT history (sourced from DVSA), previous owners, condition report, photos, and videos.
    • Financial data: outstanding finance amount (if declared), equity position. This data is kept private while your listing is live and is disclosed to the winning dealer upon bid acceptance to facilitate finance settlement.
    • Location data: postcode (used for dealer distance matching only).
    • Documents: V5C, MOT certificate, and service history uploads.
    • Usage data: cookie preferences, page views, and interaction data (only with your consent to analytics cookies).

    3. How we use your data

    • To generate a market valuation for your vehicle.
    • To create and display your listing to verified dealers (excluding your finance details and personal contact info).
    • To match you with replacement vehicles based on your stated preferences.
    • To facilitate dealer bids and communicate accepted offer details.
    • To send you email and push notifications about your listing.
    • To send marketing communications only with your explicit consent.

    4. Third parties

    We share data with the following third-party services:

    • Supabase (EU): database hosting and authentication.
    • Resend: transactional email delivery.
    • Stripe: dealer subscription payment processing.
    • DVLA Vehicle Enquiry API: vehicle specification lookup.
    • DVSA MOT History API: MOT history data.

    Your personal contact details (name, email, phone) are only shared with a dealer when you accept their bid.

    5. Data retention

    Listing data is retained for 12 months after expiry. Consumer account data is retained for 24 months after last activity. You can request deletion at any time.

    6. Your rights

    Under UK GDPR you have the right to:

    • Access your personal data.
    • Rectify inaccurate data.
    • Erase your data ("right to be forgotten").
    • Restrict processing.
    • Data portability — receive your data in a machine-readable format.
    • Object to processing.

    To exercise any right, email privacy@carsavvi.co.uk.

    7. Cookies

    We use essential cookies required for the site to function and optional analytics cookies (only loaded with your consent). You can change your cookie preferences at any time via the cookie banner.

    8. Contact

    For questions about this policy or your personal data, contact our Data Protection Officer at privacy@carsavvi.co.uk.