01 Data Controller & Entity Identity

This website (britishautorecords.co.uk) and its services are operated by zevseraLTD, a private limited company incorporated in England & Wales with registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom (“British Auto Records”, “we”, “us”, or “our”).

For the purposes of the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), zevseraLTD acts as the official Data Controller for information processed on this platform.

02 Categories of Data We Collect

When you access our platform or order an official vehicle inspection report, we may collect and process the following categories of data:

• Identity & Contact Information: First name, last name, and email address (mandatory for digital report dispatch). Telephone number is optional for automated SMS delivery notifications.
• Vehicle Information: UK Vehicle Registration Mark (VRM) and/or 17-digit Vehicle Identification Number (VIN) provided during lookup.
• Transaction & Order Data: Order reference number, selected package (Basic, Standard, Premium), delivery timestamp, purchase amount, currency, and payment confirmation status. Note: Full payment card details are collected directly by our PCI-DSS Level 1 compliant gateway (Stripe) and are never stored on our servers.
• Technical & Session Telemetry: Anonymised IP address, browser type, device operating system, referral URL, and server request logs for cybersecurity, DDoS mitigation, and fraud prevention.

03 Lawful Bases for Processing

Under Article 6 of the UK GDPR, we process your personal data under the following legal grounds:

• Contract Performance (Art. 6(1)(b)): Necessary to generate, verify, compile, and digitally deliver your requested vehicle history report.
• Legal & Regulatory Obligations (Art. 6(1)(c)): Retaining fiscal, tax, and VAT invoicing records as required by HMRC and UK corporate laws.
• Legitimate Business Interests (Art. 6(1)(f)): Protecting our digital infrastructure against fraudulent chargebacks, bot attacks, and automated API scraping.
• Explicit Consent (Art. 6(1)(a)): For optional communication preferences, which can be revoked at any time.

04 How Vehicle Data is Queried & Processed

Upon order placement, our automated verification engine queries authoritative UK governmental, policing, and automotive industry records, including:

• Driver and Vehicle Standards Agency (DVSA) MOT testing history and mileage logs.
• Driver and Vehicle Licensing Agency (DVLA) tax, keeper changes, and technical specifications.
• Police National Computer (PNC) stolen vehicle registers.
• MIAFTR (Motor Insurance Anti-Fraud and Theft Register) write-off category records (Cat A, B, S, N, C, D).
• Official finance registry databases and mileage anomaly algorithms.

05 Data Storage, Retention & Security

All data transmitted between your browser and our servers is protected using high-grade 256-bit TLS/SSL encryption. Our production databases are hosted within ISO 27001-certified UK/EU cloud data centres with strict role-based access control (RBAC).

Customer order and report access links are retained in your secure order archive for 90 days to allow convenient re-downloading. After this period, digital reports are archived or permanently anonymised, except where statutory accounting laws (HMRC) require fiscal retention of purchase invoices for up to 6 years.

06 Your Statutory Rights Under UK GDPR

As a data subject, you hold comprehensive rights under UK privacy legislation:

• Right of Access (Subject Access Request): You may request a complete copy of any personal data we hold about you.
• Right to Rectification: You may request correction of any inaccurate personal details.
• Right to Erasure (“Right to be Forgotten”): You may request deletion of personal information where retention is no longer legally necessary.
• Right to Restrict or Object to Processing: You may challenge or request restriction of data processing activities.
• Right to Data Portability: You may request transmission of your data in a machine-readable structured format.
• Right to Lodge a Complaint: You hold the right to contact the UK Information Commissioner’s Office (ICO) at ico.org.uk if you believe your data has been handled unlawfully.

07 Mandatory Pre-Dispute Support Protocol