Privacy Policy

We collect the following categories of personal information:

• Personal details — name, email address, phone number
• Vehicle registration details — number plate, make, model, year
• Ownership documentation — proof of identity and vehicle ownership
• Location data — derived from manufacturer search activity
• Payment information — processed securely via Stripe (we do not store card details)
• Device and usage information — app interactions, browser type, IP address
• Business information (manufacturers only) — company name, registration number, VAT number, business address

Your data is used for the following purposes:

• Verifying plate ownership and registering plates for protection
• Monitoring manufacturer searches and detecting potential cloning activity
• Sending real-time security alerts and notifications
• Processing subscription payments and managing billing
• Verifying and approving manufacturer business accounts
• Improving and maintaining our platform and services
• Complying with legal and regulatory obligations
• Responding to support requests and enquiries

We process your personal data on the following legal bases:

• Contract — processing necessary to fulfil our service agreement with you
• Legitimate interests — fraud prevention, platform security, and service improvement
• Legal obligation — compliance with UK law and regulatory requirements
• Consent — where you have given explicit consent (e.g. marketing communications)

We do not sell your personal data. We may share your information with:

• Law enforcement and regulatory authorities when legally required
• Service providers who help us operate the platform (e.g. cloud hosting, payment processing)
• Authorised manufacturers — limited to plate verification status only, not personal details
• Professional advisers — legal, financial, or insurance professionals where necessary

All third-party processors are contractually required to handle your data in accordance with UK GDPR.

We retain your personal data for as long as your account is active or as required to fulfil our legal and contractual obligations. When you close your account, we will delete or anonymise your data within a reasonable period, unless we are required to retain it by law.

We implement industry-standard security measures to protect your personal data, including:

• End-to-end encryption for data in transit (TLS/HTTPS)
• Encrypted token storage for authentication credentials
• Secure cloud infrastructure with access controls
• Regular security audits and vulnerability assessments

While we take all reasonable steps to protect your data, no system is completely secure. We cannot guarantee absolute security of information transmitted over the internet.

Under UK GDPR, you have the following rights regarding your personal data:

• Right to access — obtain a copy of your personal data
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restrict processing — limit how we use your data in certain circumstances
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Rights related to automated decision-making — not be subject to solely automated decisions with significant effects

To exercise any of these rights, contact us at support@protect-a-plate.co.uk. We will respond within 30 days.

We use cookies and similar technologies to operate the platform and improve your experience. For full details, please see our Cookie Policy.

Your data is stored and processed within the United Kingdom and the European Economic Area. Where we transfer data outside of these regions, we ensure appropriate safeguards are in place in accordance with UK GDPR.

We may update this Privacy Policy from time to time. The date of the most recent revision is shown at the top of this page. Continued use of the platform following any changes constitutes acceptance of the updated policy.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.