Privacy Notice

1. Controller

TekSpert Ltd is the data controller for the vehicle records that tenants persist into the Platform. Each tenant is also a controller in respect of their own use of the lookup service.

2. Data We Collect

• Account data: Name, email address, company name, industry sector, password (hashed).
• Vehicle data: Registration numbers (VRMs), DVLA VES responses (make, model, colour, fuel type, MOT/tax status, etc.). VRMs are treated as personal data because they can identify a registered keeper.
• Billing data: Processed by Stripe. We store Stripe customer IDs and invoice references only.
• Usage data: Lookup audit logs, IP addresses, session data, login timestamps.

3. Lawful Basis

We process data under legitimate interests (provision of trade/fleet vehicle checking services). For marketing communications, we rely on explicit consent.

4. Data Sharing

We share data with: DVLA (upstream API calls using TekSpert's registered API key), Stripe (billing only). We do not sell data to third parties.

5. Retention

• Vehicle records: kept until tenant deletes or closes account, then 90-day soft-delete and hard purge.
• Lookup audit trail: 24 months rolling.
• Bulk job CSVs: 30 days then automatic purge.

6. Your Rights

You have the right to access, rectify, erase, and port your data under UK GDPR. Tenants have a self-serve "purge this VRM from my records" tool. For erasure requests across the platform, contact privacy@tekspert.co.uk.

7. Contact

Data Protection Officer: privacy@tekspert.co.uk