Data-Driven Used Car Intelligence
Last updated: 9 March 2026
This Privacy Policy explains how Get Car Wise ("we", "us", "our") collects, uses, stores, and protects your personal data when you use our website at getcarwise.co.uk and all associated vehicle report services (collectively, the "Service"). We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using the Service, you acknowledge that you have read and understood this Privacy Policy. This policy should be read together with our Terms of Service.
Get Car Wise is the data controller responsible for your personal data. If you have any questions about this policy or your data, contact us at hello@getcarwise.co.uk.
| Data Type | What We Collect | Why |
|---|---|---|
| Vehicle data | Registration numbers you search for | To generate your vehicle report |
| Payment data | Payment card details (processed by Stripe — we do not store card numbers) | To process payments for paid reports |
| Contact data | Email address (if provided for report delivery) | To deliver reports and respond to support requests |
| Technical data | IP address, browser type, device information, pages visited | To operate and secure the website, analyse usage |
We do not collect any special categories of personal data (e.g., health, race, biometric data).
We use your personal data for the following purposes:
We do not sell your personal data to third parties. We do not send marketing emails unless you have explicitly opted in.
When generating a report, you may choose to opt in to receive marketing emails from Get Car Wise by ticking the marketing consent checkbox. This is entirely optional and does not affect your report.
What marketing emails contain:
How to unsubscribe: Every marketing email contains an unsubscribe link. You can also unsubscribe by:
Marketing subscriber data (your email address and subscription status) is stored and managed by Resend, Inc., our email service provider, acting as a data processor under a signed Data Processing Agreement. Your marketing subscription data is not stored in our own database.
Unsubscribing from marketing emails does not affect transactional emails (e.g., report delivery).
We share data with the following third-party processors, only as necessary to provide our service:
All third-party processors are required to process your data only for the purposes we specify and in accordance with data protection law. We have Data Processing Agreements in place with processors where required. We only share the minimum data necessary for each processor to perform its function.
We do not sell, rent, trade, or otherwise share your personal data with third parties for their own marketing purposes.
We use the following types of storage on your device:
You can change your analytics preference at any time by clearing your browser's localStorage for getcarwise.co.uk, which will cause the consent banner to reappear on your next visit.
We comply with the Privacy and Electronic Communications Regulations 2003 (PECR) — no analytics tracking occurs until you have given explicit consent.
Under the UK GDPR, you have the following rights:
To exercise any of these rights, contact us at hello@getcarwise.co.uk. We will respond within 30 days.
Automated data erasure: You can request immediate deletion of all data associated with your email address (reports, email records, and marketing subscriptions) by emailing us. We also provide a programmatic erasure endpoint that permanently deletes all your data from both our systems and our third-party processors (Resend).
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data rights have been violated.
We implement appropriate technical and organisational measures to protect your personal data, including:
While we take reasonable steps to protect your data, no system is 100% secure. We cannot guarantee absolute security of data transmitted over the internet or stored on our systems.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, as required by UK GDPR. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.
Your data is primarily processed within the UK and European Economic Area. Where data is transferred to processors outside these regions (e.g., cloud infrastructure), we ensure appropriate safeguards are in place as required by UK GDPR.
Our service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.
For any questions about this Privacy Policy or to exercise your data rights: