Privacy Policy

MotoDealer Ltd is the data controller for personal data processed through motodealer.co.uk. For data-protection questions contact us at privacy@motodealer.co.uk.

We process the following categories of personal data:

• Account data — email, optional name, optional handle, optional avatar, hashed password (or none, if you use magic-link sign-in).
• Content you create — bike listings, photos, comments, valuations, watchlist items.
• Bike-related data — registration plate, year, make, model, mileage, location (city or postcode), photos. You decide what to provide.
• Inferred data — AI-generated valuation ranges, view counts on your bikes.
• Technical data — IP address, browser user-agent, pages visited, performance metrics (Core Web Vitals). Collected through Vercel Analytics & Speed Insights, which do not use cookies.

• To deliver the service (contract): account creation, signing you in, storing your garage, running valuations, posting your bike publicly, sending transactional emails like buyer-interest alerts.
• Site analytics and security (legitimate interests): preventing abuse, measuring aggregate use, optimising performance.
• Legal compliance: responding to legal process, fraud, or regulatory requests.

We do not sell your data, run third-party advertising, or share data with brokers.

We rely on a small set of trusted sub-processors. They process data on our behalf under their own privacy commitments:

• Supabase (database, auth, storage) — EU region.
• Vercel (hosting, analytics, OG image rendering).
• Resend + AWS SES (transactional and Supabase auth emails) — EU region.
• OpenAI — receives only the bike details you provide for valuation; no email, no name.
• DVLA Vehicle Enquiry Service — receives a registration plate when you look one up. We store the plate alongside the bike if you save it.
• postcodes.io — receives a postcode to return location data; no account data.

Where data leaves the UK/EEA — primarily to OpenAI and Vercel in the United States — we rely on the EU Standard Contractual Clauses and the UK addendum, plus our vendors' technical safeguards.

• Account data — for as long as your account is active.
• Content you post — until you delete it or close your account.
• Backups — purged on the rolling schedule of our database provider (typically 7–30 days).
• Analytics — aggregated, retained per Vercel's defaults.

When you delete your account from Settings, your profile and all content (bikes, comments, valuations, watchlist) are permanently removed.

You have the right to:

• Ask what data we hold about you (subject access).
• Correct inaccurate data.
• Have your data erased.
• Restrict or object to processing.
• Receive your data in a portable format.
• Complain to the ICO if you think we've handled your data wrongly.

Email privacy@motodealer.co.uk to exercise any of these rights. We'll respond within one month.

MotoDealer uses only essential cookies — those required to keep you signed in and to remember your preferences. We don't set advertising or third-party tracking cookies. Vercel Analytics is cookieless. As a result, we don't show a cookie consent banner.

MotoDealer isn't aimed at people under 16. If we learn we've collected data from a child under 16 without appropriate consent, we'll delete it.

We'll update the “Last updated” date at the top of this page when we make changes. Material changes will be flagged on the site or by email.

Privacy questions: privacy@motodealer.co.uk.