Privacy policy

This policy explains what data Flipcar UK collects when you use the service at flipcaruk.com, why we collect it, who we share it with, and the rights you have under UK GDPR. We try to keep this short and readable. If anything is unclear, email support@flipcaruk.com.

Who we are

Flipcar UK (the service) is operated from the United Kingdom and intended for UK car flippers researching used vehicles. For data protection purposes we act as the data controller for the personal information described below.

What we collect

• Your email address, when you sign in. We use a one-time code login, so we never store a password.
• The registrations you look up, the deals you save, the expenses you log, and the notes you write. This is your workspace. Only you can read it.
• Payment metadata from Stripe: the amount, currency, credit pack purchased, and a Stripe session ID. We never see or store your card number, CVC, or billing address. Those go directly to Stripe.
• Basic technical logs: timestamps, IP address, and which page you requested. Used to diagnose errors and prevent abuse. Kept no longer than 30 days.

What we don't collect

• No advertising trackers. There are no third-party ad pixels on this site.
• No analytics SDKs that build a personal profile across other websites.
• No location beyond the postcode or town you optionally type in for resale calculations.

Why we collect it

• To run your lookups and show you the result.
• To keep your saved deals available across sessions and devices.
• To bill credit pack purchases and apply credits to your account.
• To detect abuse and keep the service running.

Who we share it with

We use a small number of trusted service providers to operate the site. We share only the data each provider needs to do its job.

• Supabase: database and authentication hosting. Stores your account, lookups, and saved deals.
• Vercel: application hosting. Serves the website and handles incoming requests.
• Stripe: payment processing for credit pack and HPI purchases.
• DVLA Vehicle Enquiry Service: for the registered vehicle's make, model, year, fuel type, tax and MOT status. We query it using only the plate you provide.
• GOV.UK MOT History API: for the MOT test history (dates, results, mileage, defects).
• CheckCarDetails: only when you explicitly request a full HPI provenance check. Provides stolen marker, finance, write-off, and book valuation data.

Each of these providers has their own privacy notice. We do not sell or rent your personal data to anyone.

Cookies

We use a single first-party cookie to keep you signed in. There are no advertising or tracking cookies. Stripe sets its own cookies when you open their checkout page. See Stripe's privacy policy for details.

How long we keep it

• Account, lookups, deals, expenses: until you delete your account.
• Payment records: 6 years (UK tax / HMRC retention requirement).
• Technical logs: 30 days, rolling.

Your rights under UK GDPR

You have the right to:

• Ask for a copy of the data we hold about you.
• Correct anything that's wrong.
• Delete your account and all associated data (except payment records we have to retain by law).
• Object to processing or withdraw consent at any time.
• Complain to the UK Information Commissioner's Office (ico.org.uk) if you think we've handled your data badly.

To exercise any of these rights, email support@flipcaruk.com from the address registered on your account. We'll respond within 30 days.

Children

Flipcar UK is intended for adults making financial decisions about used vehicles. We do not knowingly collect information from anyone under 18.

Changes to this policy

If we materially change how we handle your data, we'll update the "last updated" date at the top and email account holders before the change takes effect.

Contact

Email support@flipcaruk.com for any data, privacy, or account questions.