This policy explains what personal data MotorSignet collects, why we collect it, how long we keep it, and your rights under UK GDPR.
Who we are
MotorSignet (the "company", "we", "us") is a UK business based at 43 Berkeley Square, London W1J 5AP, United Kingdom, and the data controller for the personal data described in this policy, subject to UK GDPR and the Data Protection Act 2018.
What we collect
- Vehicle data: registration, mileage, declared condition, finance status
- Contact data: name, email, phone, address, postcode
- Identity data: photo ID and V5C at point of purchase only
- Payment data: bank details to make the transfer (held for one settlement cycle, then redacted)
- Usage data: anonymised analytics (only if you accept analytics cookies)
- Consent records: timestamp, IP, user-agent, exportable on ICO request
Why we collect it
To assess, contact, pay, and provide after-sale support to you, and to comply with our legal obligations as a UK vehicle buyer (V5C verification and anti-money-laundering checks, where applicable).
How long we keep it
- Enquiries: 3 years from last activity
- Message logs (email + SMS): 6 months
- Sale records (V5C, settlement statements): 6 years to satisfy HMRC and DVLA obligations
Beyond these windows, data is automatically purged.
Who we share it with
Only processors strictly required to deliver the service:
- Payment provider (UK bank) for the bank transfer at sale
- Cloud host (Vercel)
- Database (Supabase, EU region)
- Email and SMS provider (Brevo, EU region)
- Image hosting (Cloudinary) when you upload optional vehicle photos with your enquiry
- Spam protection (Google reCAPTCHA) on enquiry forms
- Product analytics (Google Analytics 4 with IP anonymisation, and Microsoft Clarity for anonymised session insights): statistics cookies, only with your consent. We never link analytics data to your name, email, or registration.
- Google Ads measurement (first-party, only with consent): we send the conversion event so we can measure whether a paid ad led to your enquiry. No personal data is passed to Google Ads.
- Meta (Facebook) measurement (first-party, only with consent), when a Meta paid campaign is connected; hashed (one-way) email and phone may be sent to Meta for Conversions API matching. Never re-sold.
- Government APIs (DVLA, DVSA) for vehicle verification
We never sell your data.
Your rights
Under UK GDPR you have the right to access, correct, port, restrict, or delete your data, and to withdraw consent at any time. Use the self-service form below, we'll acknowledge by email immediately and complete the request within 30 days.
Prefer email? Send to hello@motorsignet.co.uk with the subject "Subject Access Request".
Marketing
We separate transactional messages (booking confirmations, payment trackers) from marketing (re-engagement, market updates). You consent to each channel separately. STOP on SMS or unsubscribe in email is honoured server-side within minutes.
Cookies
See our cookie policy for the categories we use, who sets them, and how to manage your choices.
Complaints
Please raise concerns with us first, we'll act within 30 days. You also have the right to complain to the ICO at ico.org.uk.