verifiedUK GDPR, Data Protection Act 2018 & ICO Registered (ZA892104)

Privacy Policy

Last updated: 15 October 2024 • Effective Date: 1 January 2025 • Version 3.2

Introduction & Scope

AuthorizeCheck Ltd ("AuthorizeCheck", "we", "us", or "our") is deeply committed to protecting the privacy, accuracy, and security of individuals using our vehicle provenance and background verification services across the United Kingdom.

This document outlines how we collect, process, disclose, and safeguard both personal identification information and automotive intelligence queries when you interact with authorizecheck.co.uk. AuthorizeCheck operates in strict conformity with the Data Protection Act 2018 and the United Kingdom General Data Protection Regulation (UK GDPR). We are registered with the Information Commissioner's Office (ICO) under corporate data registration certificate ZA892104.

verified_user

Institutional Safeguard

As a designated Vehicle Identity & Integrity verification pipeline, AuthorizeCheck holds data controller responsibility for direct customer service delivery, and acts as a lawful processor regarding UK registry querying.

Information We Collect

We collect only the technical, transactional, and automotive details strictly essential to conduct forensic verification, combat motor fraud, and fulfill your order requests.

personPersonal Identifier Data

Legal name and customer communication email
Billing address provided during checkout
Tokenized payment credentials via Stripe (PCI-DSS Level 1)
Customer support correspondence and ticket records

directions_carAutomotive Intelligence Data

Vehicle Registration Mark (VRM / UK licence plate)
Vehicle Identification Number (VIN chassis check queries)
Odometer records and declared mileage markers
V5C logbook serial reference checkpoints

devicesDevice & Telemetry Data

When accessing our portal, automated servers register your Internet Protocol (IP) address, operating system, browser engine version, device timezone, and referral source to combat brute-force automated scraping of registration databases.

How We Use Your Information

Every operation carried out with your information relies upon defined legal grounds under UK GDPR Article 6:

Contract

Fulfilling Vehicle Provenance AuditsGenerating and delivering comprehensive multi-point history reports to the registered owner or seller's verified email address within 3–4 hours of purchasing a vehicle check.

Legal Duty

Financial Accounting & Fraud PreventionComplying with HMRC tax regulations, anti-money laundering (AML) protocols, and reporting stolen vehicle patterns to law enforcement.

Legitimate

Platform Integrity & Diagnostic QualityDetecting scraping bots, optimizing server uptime, and verifying discrepancy reports on vehicle status alerts with insurance databases.

Cookies & Tracking Technologies

AuthorizeCheck uses strictly necessary, performance, and operational cookies to keep your active vehicle lookup session secure and remember your search state.

Cookie Category	Classification	Purpose	Retention
__ac_session	Essential	Maintains secure authenticated report sessions	Session (Close)
__ac_vrm_cache	Functional	Preserves user plate lookup while browsing bundles	24 Hours
__ga_telemetry	Analytics	Aggregated anonymous usage metrics via cookieless proxies	12 Months

You can change your cookie preferences at any time via the footer link or by disabling non-essential cookies directly within your internet browser configuration.

Data Sharing & Third Parties

To generate reliable automotive audits, AuthorizeCheck cross-references queries against vetted official and commercial registers under statutory or licensed data contracts:

account_balance

Driver & Vehicle Standards Agency (DVSA)

MOT inspection pass/fail status, test logs, advisory flags, and recorded odometer readings.

car_crash

MIAFTR (Motor Insurers Bureau)

Salvage category notifications, written-off insurance classifications (Cat A, B, S, N).

local_police

Police National Computer (PNC)

Active stolen markers and reported police automotive theft tracking feeds.

payments

Finance Repositories (Experian / Equifax)

Outstanding automotive finance agreements, hire purchase contracts, and unit stocking loans.

verifiedWe guarantee AuthorizeCheck does not monetize consumer lookup histories to marketing affiliates or insurance brokers.

Data Security & Encryption

All data flows through an uncompromising enterprise security architecture, ensuring end-to-end data integrity from initial search to report delivery:

lockTLS 1.3 Encryption256-bit dynamic tunnel safeguarding data in transit.

dnsISO 27001 CloudAWS London Region hosting with physical failover arrays.

credit_cardPCI-DSS TokenizedDirect Stripe processing. We never store raw card numbers.

verified_user

Reports issued only to the registered owner or seller

For security and privacy reasons, we only provide the vehicle details report to the registered owner of the vehicle. This policy helps protect owners from scammers who may attempt to obtain or misuse their personal information.

Once a payment is made, we verify that you are the registered owner. If the ownership cannot be verified, the payment will be declined or refunded.

Your privacy and security are our top priorities, and our platform uses strict security measures to protect your information.

Your Rights under UK GDPR

As a UK resident, you possess distinct statutory rights concerning your personal information. You may exercise any of the following without cost:

manage_search

Right to Access (Subject Access Request - SAR)

Obtain confirmation of whether we process personal data concerning you, alongside a portable digital copy within 30 days.

edit_square

Right to Rectification

Request correction of inaccurate or incomplete billing details or personal identifiers.

delete_forever

Right to Erasure ("Right to be Forgotten")

Demand complete deletion of account identity records where retention is no longer justified under statutory law.

sync_problem

Right to Object & Restrict Processing

Halt processing of specific analytical data logs or dispute specific records pending verification.

Data Retention Periods

We do not retain information longer than is legally required. In accordance with the Limitation Act 1980 and our £30,000 Data Guarantee Warranty:

Generated Audit ReportsRetained for 6 Years

Archived in encrypted cold storage to honor multi-year dispute representations and insurance claims.

Unfinished Plate LookupsRetained for 48 Hours

Temporary memory cache automatically wiped after unfinalized check interactions.

Changes to This Policy

AuthorizeCheck reserves the prerogative to revise this policy to reflect emerging regulatory standards, ICO directives, or technical additions to our registry integrations.

Registered account holders will receive a prominent notification banner or direct electronic dispatch at least 14 days prior to any material alterations affecting your privacy entitlements.

Data Protection Officer (DPO) Contact

If you wish to submit a Subject Access Request (SAR), inquire about our regulatory filings, or file a complaint regarding our data handling procedures, please contact our designated DPO team:

Corporate Headquarters

AuthorizeCheck Ltd
10 Fenchurch Avenue, Level 14
London, EC3M 5BN
United Kingdom

Company No: 14289104

Direct Compliance Channels

maildpo@authorizecheck.co.uk

phone+44 (0) 20 7946 0912

You also maintain the right to register concerns directly with the UK Information Commissioner's Office (ICO) via ico.org.uk.