Privacy Policy

MotoDealer Ltd is the data controller for personal data processed through motodealer.co.uk. For data-protection questions contact us at privacy@motodealer.co.uk.

We process the following categories of personal data:

• Account data — email, optional name, optional handle, optional avatar, hashed password (or none, if you use magic-link sign-in).
• Content you create — bike listings, photos, comments, valuations, watchlist items.
• Bike-related data — registration plate, year, make, model, mileage, location (city or postcode), photos. You decide what to provide.
• Inferred data — AI-generated valuation ranges, view counts on your bikes.
• Technical data — IP address, browser user-agent, pages visited, performance metrics (Core Web Vitals). Collected through Vercel Analytics & Speed Insights, which do not use cookies.

• To deliver the service (contract): account creation, signing you in, storing your garage, running valuations, posting your bike publicly, sending transactional emails like buyer-interest alerts.
• Introducing you to buying partners (consent): where you tick the box on a valuation request, passing your enquiry to vetted motorcycle dealers so they can offer to buy your bike. Section 5 sets out exactly what they get, and you can withdraw at any time.
• Site analytics and security (legitimate interests): preventing abuse, measuring aggregate use, optimising performance.
• Legal compliance: responding to legal process, fraud, or regulatory requests.

We do not sell your data to list brokers or run third-party advertising. Beyond the sub-processors in section 4 and the buying partners in section 5, your data goes nowhere.

We rely on a small set of trusted sub-processors. They process data on our behalf under their own privacy commitments:

• Supabase (database, auth, storage) — EU region.
• Vercel (hosting, analytics, OG image rendering).
• Resend + AWS SES (transactional and Supabase auth emails) — EU region.
• OpenAI — receives only the bike details you provide for valuation; no email, no name.
• DVLA Vehicle Enquiry Service — receives a registration plate when you look one up. We store the plate alongside the bike if you save it.
• postcodes.io — receives a postcode to return location data; no account data.

When you request a valuation you are asked to tick a box accepting our terms, and to say whether you want to sell. Together those let us share the enquiry with MotoDealer's vetted buying partners — UK motorcycle dealers — so they can contact you with an offer. We pass on enquiries from people who asked for dealer offers, are selling privately, or are undecided. If you tell us you are just curious, your enquiry is not shared with any partner. Unlike the sub-processors above, a partner is a separate data controller: once it holds your details it is responsible for them under its own privacy notice.

• What a partner receives — your email address, phone number and registration plate, together with the bike's make, model, year, mileage, condition, region and any photos you added. We have never asked for your name, so there is none to pass on.
• When — only after that partner has paid to access your enquiry, and only a limited number of partners can ever access the same one.
• What they may do with it — contact you by phone or email about buying your motorcycle. You are never obliged to sell, reply, or accept an offer.

You can withdraw at any time by emailing privacy@motodealer.co.uk. We stop sharing your details and ask partners who already hold them to delete them. Enquiries older than 30 days drop out of the partner network automatically.

Where data leaves the UK/EEA — primarily to OpenAI and Vercel in the United States — we rely on the EU Standard Contractual Clauses and the UK addendum, plus our vendors' technical safeguards.

• Account data — for as long as your account is active.
• Content you post — until you delete it or close your account.
• Backups — purged on the rolling schedule of our database provider (typically 7–30 days).
• Analytics — aggregated, retained per Vercel's defaults.

When you delete your account from Settings, your profile and all content (bikes, comments, valuations, watchlist) are permanently removed.

You have the right to:

• Ask what data we hold about you (subject access).
• Correct inaccurate data.
• Have your data erased.
• Restrict or object to processing.
• Receive your data in a portable format.
• Complain to the ICO if you think we've handled your data wrongly.

Email privacy@motodealer.co.uk to exercise any of these rights. We'll respond within one month.

MotoDealer uses only essential cookies — those required to keep you signed in and to remember your preferences. We don't set advertising or third-party tracking cookies. Vercel Analytics is cookieless. As a result, we don't show a cookie consent banner.

MotoDealer isn't aimed at people under 16. If we learn we've collected data from a child under 16 without appropriate consent, we'll delete it.

We'll update the “Last updated” date at the top of this page when we make changes. Material changes will be flagged on the site or by email.

Privacy questions: privacy@motodealer.co.uk.