Privacy Policy

RELOAD TECHNOLOGIES - FZCO is responsible for the personal information described in this policy.

Account information and saved reports are used to provide access to the service. Support messages are used to understand and respond to your request.

You can ask about access, correction, deletion or other applicable rights by emailing hello@carcheck.app.

Car Check is operated by RELOAD TECHNOLOGIES - FZCO. Our registered address is Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates.

We act as the controller for personal information used to operate Car Check and respond to communications sent to us. You can contact us at hello@carcheck.app.

Our operator is based in the United Arab Emirates and the product focuses on UK vehicle research. Privacy rights and the rules that apply to a particular request depend on the circumstances and applicable data protection law.

The information involved depends on how you use the product. We aim to collect the information needed for the relevant feature or request.

Account information

Your email address, account identifier, verification and session information needed to sign in and recognise the account. You can sign in with an email address and password or with Google. Supabase processes password authentication; Car Check does not store your password in report records.

Vehicle queries and reports

The registration you enter, returned vehicle information, saved report contents, report identifiers and creation dates. A registration or vehicle record can be personal information where it relates to an identifiable person.

Checkout records

The selected report, amount displayed, currency, outcome and an identifier used to prevent duplicate processing.

Support and applications

Your email address, the contents of messages you choose to send, relevant report or order references, and professional information supplied with a careers enquiry.

Technical information

Session cookies, your saved appearance choice and technical request information processed by hosting and account services, which may include IP addresses, device or browser information and error details.

If you choose Google sign in, Google shares your account identifier, email address and verification status, name and profile picture with Car Check through Supabase. Google handles your Google password; Car Check does not receive it. We request only the basic identity, email and profile permissions needed for sign in.

We use this information to create or recognise your Car Check account, authenticate your session and associate saved vehicle reports with the correct account. Reports created as a guest in the same browser can be moved to your verified account when you sign in. We do not request access to your Gmail messages, Google Drive files, contacts or calendar.

Supabase stores the Google identity and profile information with your account and processes the authentication tokens needed for sign in. Vercel processes authenticated requests to deliver the application. Google account information is used for account access and the related security and support purposes described in this policy; it is not sold, used for advertising or used to train AI models.

Car Check's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

You can revoke Google sign in access in your Google Account connections. Revoking access does not itself delete your Car Check account or reports. To request deletion of the Google identity, profile information and other account records held by Car Check, follow our account closure process. The retention criteria and applicable exceptions described below also apply to Google account information.

Where UK GDPR or another law requires a legal basis, we use the basis appropriate to the purpose. We do not treat visiting the website as consent to every possible use of personal information.

Provide the service

To verify sign in, create and retrieve a report, maintain account access and answer a request about the service. The relevant basis is performing our contract with you or taking steps at your request before entering one.

Protect and maintain it

To investigate failures, prevent duplicate processing, secure accounts and detect misuse. Our legitimate interests are operating a dependable service and protecting users, subject to their rights and interests.

Meet legal obligations

To respond to valid legal requests, maintain records required by law and handle applicable data protection rights. We process only the information necessary for the relevant obligation.

Recruitment and business enquiries

To assess information you submit for a role or respond to a proposed partnership. Depending on the enquiry, the basis is taking requested steps before a contract or our legitimate interest in evaluating the enquiry.

Optional uses

Where a use requires consent, such as a future optional marketing subscription, it must be offered separately with a way to withdraw consent. This policy does not itself sign you up for marketing.

We receive information from you when you enter a registration, use an account feature or email us. Account and hosting services also provide the information needed to authenticate requests and operate the application.

Supabase provides connected account authentication and database services for saved reports. Vercel provides application hosting and delivery. Information sent by email is also processed through the email services used by you and by us. Suppliers process the information needed for their role, subject to their applicable terms and privacy arrangements.

We may disclose information where reasonably necessary to meet a legal obligation, establish or defend a legal claim, or protect users and the service. We do not publish your email address or private account reports on public marketing pages. We do not sell account or support information for advertising.

Our company is based in the United Arab Emirates. Hosting, account, support and email services can involve processing in other countries. The location of a provider’s headquarters does not by itself identify every location where information is processed.

Where applicable law restricts an international transfer, an appropriate transfer basis and any required safeguards must be in place. We do not claim that all information stays within the UK or a single region. Contact us if you need details about the processing relevant to your account or request.

We use retention criteria tied to the purpose rather than promising one period for every record. Relevant factors include whether an account is active, whether a report must remain available to its owner, whether a support or refund issue is unresolved and whether a legal obligation or dispute requires a record to be kept.

Account and report information is kept while needed to provide the account and its saved history, subject to a valid deletion request and any applicable retention exception. Support messages and careers enquiries are kept for the enquiry and any necessary follow up; contact us if you would like an enquiry withdrawn or its information reviewed for deletion.

When information is no longer needed for its purpose or a lawful retention requirement, it should be removed or made non-identifying. A deletion request is reviewed for the records it covers. Where an exception applies, we explain the relevant category and reason rather than treating every record as exempt.

Cookie lifetimes are described separately in the Cookie Policy. Removing browser storage does not delete server records, and closing an account does not erase a PDF you already downloaded to your own device.

Depending on applicable law, you may have rights to access, correct, erase, restrict or receive a portable copy of personal information. Send your request to hello@carcheck.app. We may ask for information needed to confirm your identity and locate the relevant records; please do not send identity documents unless we explain why they are necessary and how to provide them.

You may object to processing based on legitimate interests where the applicable law gives you that right. Tell us about your circumstances so we can assess the request. You may also object to direct marketing and withdraw consent for a use that relies on consent, without affecting the lawfulness of earlier processing.

Rights are subject to applicable conditions and exceptions. We respond within the timeframe required by the law that applies to your request and explain any permitted extension, restriction or refusal. You can also complain to the relevant data protection authority; for UK data protection matters, this may be the Information Commissioner’s Office.

To close your account, follow the account closure process.

The application checks report ownership and restricts access to private account records. No system eliminates every security risk. Contact us if you believe your account or information has been affected by a security issue.

This policy may change as the service changes. The date at the top records the current version. Material changes to information handling should be explained before the new use begins where required. If you follow a link to another website, that website’s own privacy information applies.