Privacy Policy

RegWize Ltd is the data controller for the personal data described here. We're registered in England & Wales (company number 17246776), registered office 66 Paul Street, London, EC2A 4NA, and registered with the UK Information Commissioner's Office (ICO) under reference ZC163983. For anything to do with privacy, email support@regwize.co.uk.

Account details — your name and email, plus a securely hashed password (handled by our auth provider, Supabase). For Dealer accounts, your business name if you add one.

Payment details — when you buy something, Stripe processes the payment. We receive a confirmation and a payment reference, but we never see or store your full card number.

Usage data — the registrations you look up, with timestamps and your IP address, so we can show your search history, enforce plan limits, and prevent abuse.

Reports you generate — when you run a paid check, we store the resulting report for 30 days so you can view and download it. These reports contain vehicle data (and, for provenance checks, information such as previous-keeper counts, finance markers and plate history) which we retrieve from Experian on your behalf.

Technical data — standard server logs (browser type, timestamps, IP) for security and reliability.

• To run the checks and reports you request, and keep them in your account
• To take payment and manage your subscription
• To send service emails — receipts, report deliveries, password resets, and MOT/tax reminders if you have them
• To enforce free-plan limits and prevent fraud or abuse
• To answer your support messages

We don't sell your personal data, and we don't use it for advertising or third-party tracking.

• Contract — to provide the checks, reports and account you signed up for.
• Legitimate interests — keeping the service secure, preventing fraud, and improving how it works.
• Legal obligation — keeping records (e.g. for tax) where the law requires it.
• Consent — only where you've opted in, such as optional reminder emails. You can withdraw consent any time.

We use a small set of trusted providers to run RegWize. They only process data on our instructions:

• Supabase — database and login (EU-hosted)
• Stripe — payment processing
• Resend — sending our emails
• One Auto API — connects us to our vehicle-data providers (below)
• Experian — vehicle provenance data (write-off, finance, stolen, salvage, plate/keeper history)
• UK Vehicle Data — vehicle & model specification
• Brego — vehicle valuations
• DVLA / DVSA — government vehicle and MOT data

When you look up a vehicle, its registration is sent to these providers to retrieve the report. Some providers may process data outside the UK/EU; where they do, appropriate safeguards (such as UK/EU-approved contractual clauses) are in place.

• Account data — for as long as your account is open.
• Paid reports — 30 days from purchase, after which they're removed.
• Search history & logs — up to 12 months, then deleted or anonymised.
• Payment records — kept as long as the law requires for accounting.

Delete your account any time from your settings, or ask us to erase your data — see your rights below.

Under UK GDPR you can ask us to:

• give you a copy of the data we hold about you;
• correct anything that's wrong;
• delete your data ("right to be forgotten");
• restrict or object to how we use it;
• port your data elsewhere.

Email support@regwize.co.uk and we'll respond within a month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

We only use cookies that are strictly necessary to run the site — to keep you logged in, and (on checkout pages) for Stripe's fraud prevention. We don't use advertising or analytics cookies, so there's no tracking pop-up. Full detail is in our Cookie Policy.

We protect your data with HTTPS, hashed passwords, database row-level security, and access controls. No system is ever completely secure, but we take it seriously and review our setup regularly.

RegWize isn't intended for under-18s, and we don't knowingly collect their data.

We'll update this policy as the service changes and revise the date above. If a change materially affects you, we'll let registered users know by email.