Privacy Policy

Road Lux Ltd (company number 08837891), registered office Kamp House, 124 Middleton Road, Morden, England, SM4 6RW, is the data controller for personal data processed through RoadLux Vehicle Check (check.roadlux.uk). ADMIN MUST COMPLETE BEFORE LAUNCH: confirm ICO registration reference before publishing.

What we collect

• Account data: email address, password credentials, account settings.
• Contact data: the details and message you send us through our contact form.
• Search data: the vehicle registrations you look up and the results returned.
• Report data: the vehicle reports generated for you and their references.
• Purchase data: order records, product purchased, amount, and payment metadata from Stripe. We never receive or store full card numbers or security codes.
• Technical data: IP address, device and browser information, and security logs.
• Preference data: cookie choices and marketing consent status with date and time.

Why we use it and our lawful bases

• To provide checks, reports and accounts — performance of a contract.
• To take payment and prevent duplicate charges — contract and legal obligation.
• To keep records for tax and accounting — legal obligation.
• To secure the service, prevent fraud and apply rate limits — our legitimate interests.
• To send MOT reminders, updates, rewards and offers — your consent.

Who we share it with

• Our vehicle data suppliers, including official DVSA MOT data services.
• Stripe, for payment processing.
• Our hosting, database, email and analytics processors.
• Authorities or advisers where we are legally required to disclose.

Retention

Purchased reports and order records are retained as historical records for as long as your account is active and for the periods required for tax, accounting and dispute purposes. Free search logs are kept for a short period for security and abuse prevention. Contact enquiries are kept while we handle them and for a reasonable period afterwards.

Security

We use encryption in transit, access controls, row-level database permissions and server-side secret storage. No system can be guaranteed completely secure.

International transfers

Where a processor operates outside the UK, transfers are protected by adequacy regulations or the UK International Data Transfer Addendum.

Your rights

You have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time. You can unsubscribe from marketing using the link in any email or in your account settings.

Complaints

Contact us first at info@roadlux.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.