PRIVACY POLICY

RevRadar is operated by RevRadar Ltd.

This Privacy Policy explains how we collect, use, store and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

RevRadar Ltd is the data controller for personal data collected through this Service. Contact us at [email protected] for any data-related queries.

RevRadar Ltd is registered in England and Wales. ICO Registration Number: ZC199673. If you have any questions about how we handle your data, contact us at [email protected].

• Email address
• Password (stored as a bcrypt hash — never in plain text)
• A display name, only if you choose to set one
• Account creation date, and your subscription tier and status (free, Pro, or Dealer)

• Search queries and filter preferences
• Saved searches and alert settings
• Saved (favourited) listings
• Pages visited and features used
• IP address and approximate geographic location
• Browser type, device type, and operating system
• Referring website

When you are signed in, we record which listings you view (and how many times), and how you interact with on-page prompts we show you — for example a vehicle-history-check nudge, a delivery-partner suggestion, or a "thinking about this one?" prompt. We use this to decide what, if anything, to show you on the listing you are currently looking at, and to measure whether those prompts are useful. Any prompt we show refers only to the listing in front of you — never to a summary of your browsing across sessions or other cars.

• Emails you send us and our responses

• Your subscription tier, status, and billing dates
• A Stripe customer ID and subscription ID that link your account to your billing record

If you subscribe to a paid plan, payment is taken by Stripe, our payment processor. Stripe collects and processes your card details directly — RevRadar never sees or stores your card number. See section 8 for more on Stripe.

• Your payment card number (this is handled entirely by Stripe — we never receive it)
• Government ID or driving licence information
• Vehicle registration plates you search for
• Sensitive personal data (race, religion, health, etc.)

If you save a search we will send email notifications when matching listings are detected. You can:

• Delete saved searches through your account at any time
• Unsubscribe via the link in any alert email
• Delete your account to stop all communications

RevRadar displays publicly available vehicle listing information from third-party platforms. We extract factual data (make, model, price, mileage, location) from public listings. We do not:

• Intentionally collect personal data about vehicle sellers
• Store seller contact details linked to identifiable individuals
• Share seller data with third parties

If seller contact details appear in listing descriptions, this is publicly available information posted by the seller on the original platform.

We collect listing data through automated means (web scraping of publicly accessible pages). We do not collect, store, or process any personal data belonging to vehicle sellers, including names, phone numbers, or email addresses. Only factual vehicle and listing data is retained. If you believe a listing contains your personal data and wish it removed, please use our listing removal page. Removal requests are reviewed within 48 hours.

RevRadar uses a small number of strictly necessary cookies and browser local storage items to operate the service. We do not use advertising cookies, tracking cookies, or any third-party analytics cookies that identify you personally.

Cookies set by RevRadar:

• rr_rt — A secure, httpOnly authentication cookie used to keep you signed in. This cookie is strictly necessary for the login function to work. It expires after 30 days of inactivity and is never accessible to JavaScript. No consent is required for this cookie under UK PECR as it is strictly necessary.

Local storage items (not cookies):

• rr_token — Your session access token, stored locally to authenticate API requests
• rr_user — Basic account details (email, tier) stored locally to display your account information without repeated server requests
• rr_theme — Your dark/light mode preference
• rr_lat, rr_lng, rr_postcode, rr_city — Your location preference for distance-based search filtering and, on a listing you're viewing, to work out whether it's far enough away that a vehicle-delivery partner prompt is relevant. Stored locally and never sent to third parties — only used to decide what to show on our own pages
• rr_view, rr_loc_tab — UI layout preferences

All local storage items are stored only on your device and are cleared when you sign out. You can clear them at any time via your browser settings.

Analytics: we use Cloudflare Web Analytics, a privacy-first, cookieless analytics tool. It measures aggregate page views and performance without setting any cookie, without cross-site tracking, and without building a profile of you or identifying you personally. See cloudflare.com/web-analytics.

We do not use Google Analytics, Meta Pixel, or any advertising or cross-site tracking scripts.

We do not sell your personal data. We share data only with:

• Resend: email delivery service for alerts and account emails — resend.com/privacy
• Cloudflare: hosting, HTTPS, and cookieless Web Analytics — cloudflare.com/privacy
• Stripe Inc: payment processing and subscription management — USA (Standard Contractual Clauses apply) — stripe.com/privacy
• Law enforcement or regulators: only when legally required

We do not share data with advertisers, data brokers, or marketing companies.

RevRadar earns commission from affiliate partners. Some links and prompts on the site — for example a carVertical vehicle-history check, a DeliverMyMotor delivery quote, or AutoAid breakdown cover — are affiliate links. If you click one you are taken to that partner's own website, and anything you do there is governed by their privacy policy, not this one. We may earn a commission if you buy, at no extra cost to you.

We do not hand your account details (email, name, search history) to these partners. An affiliate link may carry a non-identifying campaign tag (e.g. "revradar") in its URL so the partner can credit the referral — this tag does not identify you.

Resend and Cloudflare may process data outside the UK. Where this occurs, appropriate safeguards are in place in accordance with UK GDPR requirements.

We retain your data for the following periods:

• Account data — Retained for the duration of your account. Deleted within 30 days of account deletion request
• Search history — Retained for 90 days, then automatically deleted
• Saved searches and saved listings — Retained until you delete them or close your account
• Waitlist entries — Retained until you request removal or are onboarded
• Listing removal requests — Retained for 12 months for legal record-keeping purposes, then deleted
• Listing view & prompt-interaction data — We track which listings you view and how you interact with on-page prompts to power features like "thinking about this one?" nudges and a distance-based delivery-partner prompt, referencing only the listing you're currently viewing — never a summary of your browsing history across sessions or other listings. Retained for 12 months. We never send automated emails based on your viewing activity — email alerts always require your explicit opt-in on a saved search. Occasionally, a member of our team may personally follow up about a specific listing you viewed, to ask how your search went and suggest relevant services; these are individually reviewed and sent by a person, never by an automated system, arrive at most once a month, reference only the single listing concerned, and every one includes a one-click unsubscribe that stops them permanently
• Email send logs (Resend) — Retained by Resend for up to 30 days per their data processing terms
• Payment records (Stripe) — Retained by Stripe in accordance with their legal obligations and privacy policy

• Right to erasure — You can delete your account at any time from your account settings page. This will permanently delete your profile, saved searches, saved listings, and search history within 30 days.
• Right to object to automated processing — Deal scoring and search ranking on RevRadar is automated. You may request that we do not apply automated scoring to your usage by contacting us, though this may limit platform functionality.

We implement appropriate technical and organisational measures including:

• bcrypt password hashing (cost factor 12)
• HTTPS encryption for all data in transit via Cloudflare
• Database access controls
• Regular backups
• Server access limited to authorised personnel

No internet transmission is 100% secure. We cannot guarantee absolute security but will notify you of any breach affecting your personal data as required by law.

RevRadar is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided personal data, contact us at [email protected] and we will delete it promptly.

We do not make automated decisions that significantly affect you. Our deal scoring feature is informational only and does not constitute automated decision making under UK GDPR.

We may update this Privacy Policy. For significant changes, we will notify registered users by email. The date at the top shows when it was last updated. Continued use after changes constitutes acceptance.

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO):

We would appreciate the opportunity to address your concerns before you contact the ICO.

For any privacy queries or to exercise your rights: